Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/yjXljVumuFpn88V8J2PDjSR0DzM.roa
File:                     yjXljVumuFpn88V8J2PDjSR0DzM.roa (raw, json)
Hash identifier:          +5CfFKVcgKIqXZSm6uNlLlrwPHJZGWL1QX51JCLPUmA=
Subject key identifier:   CA:35:E5:8D:5B:A6:B8:5A:67:F3:C5:7C:27:63:C3:8D:24:74:0F:33
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       97
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/yjXljVumuFpn88V8J2PDjSR0DzM.roa
Signing time:             Fri 01 Aug 2025 01:34:16 +0000
ROA not before:           Fri 01 Aug 2025 01:34:16 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9621
IP address blocks:        218.40.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Aug  1 01:34:16 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=CA35E58D5BA6B85A67F3C57C2763C38D24740F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:a8:ae:ec:db:84:28:85:ac:28:52:a5:52:
                    fd:d5:cd:65:34:8e:35:94:18:02:76:f4:e9:e7:36:
                    05:eb:b6:0c:65:3b:13:34:1a:86:ca:fa:82:8a:db:
                    ce:74:b9:92:2b:a4:9c:99:a3:19:1b:7d:0f:96:09:
                    88:96:81:c5:3d:81:20:f0:16:ce:16:fc:0c:0c:f2:
                    c9:b3:47:78:58:89:bb:6d:89:8f:d7:e8:b9:d0:b4:
                    b8:94:da:be:c5:91:86:a2:7e:44:29:a8:be:87:22:
                    63:13:6e:81:31:2f:26:ff:63:45:39:2a:aa:96:4d:
                    b8:88:8d:d3:b2:84:a4:79:9e:96:37:42:be:71:9d:
                    fa:bf:83:80:6d:5b:75:df:16:fd:86:c2:f5:b4:c1:
                    14:5e:2c:90:7b:28:af:eb:88:ed:84:8e:3a:2e:7e:
                    4a:04:33:9d:34:0b:6d:db:e2:29:98:3a:a0:9c:90:
                    43:94:e7:ac:5a:cd:9a:3a:fa:b6:ad:01:55:7f:18:
                    79:90:b5:11:1c:18:0b:ea:bf:d8:7d:19:b1:3e:cc:
                    90:1b:af:1b:42:04:56:67:ba:e4:28:aa:e6:93:9f:
                    94:0f:c8:7c:64:0d:71:3b:4c:fa:1a:bd:3e:ab:cf:
                    45:e9:79:6f:73:6f:a5:39:3a:58:84:f3:3a:2e:5b:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:E5:8D:5B:A6:B8:5A:67:F3:C5:7C:27:63:C3:8D:24:74:0F:33
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/yjXljVumuFpn88V8J2PDjSR0DzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:ea:77:00:49:8b:e8:06:d4:1c:ab:22:bc:fc:a0:27:a1:
         70:92:d4:1c:bb:77:e9:6e:52:03:70:d3:29:2d:ea:d0:1d:15:
         6f:90:a1:74:bc:e6:b0:d9:85:f2:a8:c1:a9:e6:2c:96:33:ca:
         3a:97:62:39:61:d6:89:81:5d:4e:96:14:ac:c7:59:28:fb:81:
         ce:51:c1:36:89:83:cb:47:26:1e:55:b9:7b:e3:43:f6:88:81:
         06:ca:69:1d:a4:3a:29:37:ed:3e:5c:8a:4e:03:50:40:ab:04:
         32:98:70:35:62:e4:e9:20:3e:75:22:08:39:44:a9:b2:a4:4f:
         bf:38:ea:39:92:9e:68:da:64:b6:8a:0b:dc:f8:a7:e4:72:26:
         12:82:09:c7:ec:77:72:54:93:ee:04:9b:fa:22:77:dd:39:1e:
         45:3b:71:12:49:d6:5b:07:81:05:f6:d1:6f:33:a2:5a:76:1f:
         95:ef:c4:39:dd:d9:64:b6:e7:93:ca:11:19:10:9d:4d:41:9d:
         84:e7:3b:95:7f:9e:bd:f4:7a:77:80:d8:75:9f:ba:a5:82:3c:
         8e:2c:28:9b:d8:37:45:f6:8b:06:1a:63:01:27:cc:9d:74:8f:
         92:f9:a7:61:44:f3:95:76:13:22:17:a3:bf:cb:c5:87:18:6f:
         c3:34:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:45 2025 by rpki-client