Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
File:                     CRrxOzOTs_M6f80K1I1q8eHROTQ.roa (raw, json)
Hash identifier:          i8u9HY9I9FpjmJCsnviSx89/1SiRtOCRGan56M5zW3Q=
Subject key identifier:   09:1A:F1:3B:33:93:B3:F3:3A:7F:CD:0A:D4:8D:6A:F1:E1:D1:39:34
Certificate issuer:       /CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Certificate serial:       22
Authority key identifier: AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
Signing time:             Fri 01 Aug 2025 01:36:01 +0000
ROA not before:           Fri 01 Aug 2025 01:36:01 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24255
IP address blocks:        64.33.0.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Aug 2025 16:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEB992E910DD690365E5E9B86B6ED210578721C
        Validity
            Not Before: Aug  1 01:36:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=091AF13B3393B3F33A7FCD0AD48D6AF1E1D13934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:43:60:a9:1e:10:a1:e5:01:35:bc:4c:7d:
                    d1:17:9b:f9:d0:5f:98:c4:33:42:d0:d4:62:b9:50:
                    6f:61:9f:ab:06:35:e1:8f:59:d7:6b:06:7e:6c:25:
                    03:f6:ee:91:85:87:7b:f6:d7:19:57:34:a8:05:58:
                    15:cb:59:be:97:09:26:29:3e:55:0a:79:a8:fc:f9:
                    64:4b:51:16:76:6d:fb:f2:bc:10:5f:90:06:45:33:
                    82:9d:9d:98:71:72:bc:ac:8a:fc:b0:a6:62:60:ea:
                    f3:5c:f4:bc:f0:98:a6:f9:81:98:68:16:27:99:df:
                    f7:cc:74:79:68:99:ec:9d:e0:80:00:5a:62:83:ee:
                    80:ec:11:05:f4:2b:5a:20:51:e0:6d:e4:66:e4:6b:
                    e5:d4:74:04:29:c7:88:df:d4:ee:1b:d6:23:a1:7b:
                    01:1a:77:03:c1:04:fb:84:b9:5c:bd:c8:c2:5e:e3:
                    bb:46:4c:41:62:0b:a2:c8:05:e8:98:f7:af:16:30:
                    68:47:f7:39:6e:4f:3e:2f:a0:c8:f4:2a:3b:a4:96:
                    a9:de:bb:1f:d4:48:46:f2:f6:90:70:84:2f:c2:59:
                    f0:6d:40:10:12:37:69:76:31:f6:c0:20:0c:dd:73:
                    90:f7:fd:6c:6a:53:3f:41:93:5e:ae:40:88:eb:5f:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:F1:3B:33:93:B3:F3:3A:7F:CD:0A:D4:8D:6A:F1:E1:D1:39:34
            X509v3 Authority Key Identifier:
                keyid:AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/CRrxOzOTs_M6f80K1I1q8eHROTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:6a:ac:dd:db:6c:6a:cb:09:c8:62:8b:92:21:02:ec:35:ea:
         c5:e2:89:78:15:a7:97:3b:9e:3e:6a:37:b1:9e:5d:30:43:a6:
         f6:c1:68:45:2d:e9:f9:7b:92:2c:29:35:5b:04:ce:da:5a:36:
         7f:51:58:e9:ce:06:b9:8f:2b:a5:66:62:1b:4c:d4:66:6e:0c:
         f4:04:be:46:dd:bf:ca:98:75:f8:58:60:43:37:c6:84:a0:68:
         3d:15:ba:c4:c2:5c:4e:1b:40:29:29:67:5d:1f:67:41:52:68:
         b0:b8:33:bb:97:97:dd:d4:f6:aa:02:88:a6:ad:65:91:4c:d6:
         dd:47:ea:08:66:73:5b:ea:9e:a2:83:72:c9:7b:c8:c4:74:d6:
         92:06:be:6d:00:67:76:c8:76:2a:b7:c8:8e:62:ca:7c:5f:d2:
         5e:f6:e7:1a:b1:4b:31:73:61:f3:a2:6b:9e:c9:4c:3d:3d:eb:
         da:b1:62:c7:2e:e1:9d:43:80:43:2a:dc:85:7e:bb:ee:f6:09:
         4a:e0:ca:11:2d:61:6c:fb:74:fb:75:d4:7b:c3:55:30:80:b8:
         fb:2f:67:e5:3f:f5:cf:7d:9e:6a:ae:19:22:e2:73:bd:a4:a0:
         af:a7:33:cd:27:d1:7e:98:da:f2:84:c5:5f:92:0e:df:30:7d:
         b6:bc:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 15 17:59:11 2025 by rpki-client