Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/ZyAK-VC5oEmSdCgE2ATQWYxpuTY.roa
File:                     ZyAK-VC5oEmSdCgE2ATQWYxpuTY.roa (raw, json)
Hash identifier:          6VhC+6GFc6t9bftruLlXqnI/1fIGdK1y2k++hcdtKP0=
Subject key identifier:   67:20:0A:F9:50:B9:A0:49:92:74:28:04:D8:04:D0:59:8C:69:B9:36
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       7D
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/ZyAK-VC5oEmSdCgE2ATQWYxpuTY.roa
Signing time:             Mon 14 Jul 2025 08:30:34 +0000
ROA not before:           Mon 14 Jul 2025 08:30:34 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     45680
IP address blocks:        101.78.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Jul 14 08:30:34 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=67200AF950B9A04992742804D804D0598C69B936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:c5:5b:31:ed:3a:a1:82:47:25:84:8f:bb:
                    ad:18:97:e4:1a:aa:0d:85:e7:c4:ad:88:c7:89:f3:
                    36:3d:94:12:a4:f4:af:8c:9f:e1:40:a0:d1:f9:72:
                    d0:35:9b:d0:1c:1c:c7:67:d0:34:f3:36:d4:5b:cd:
                    f0:34:fb:13:29:7c:79:15:aa:2c:86:8f:dc:fe:28:
                    84:5e:d5:e9:2c:b3:bb:47:92:66:e3:0c:e0:c1:2d:
                    7d:f2:fa:fb:56:cb:76:3b:fd:57:d7:3e:6a:c4:1b:
                    ea:48:b4:9a:c8:6b:99:85:5f:3f:84:44:6b:6e:e6:
                    32:f6:f3:f3:5d:1c:3d:20:8a:2c:95:46:a3:3f:6a:
                    06:4b:39:49:37:54:79:16:8d:73:61:ce:d4:2b:a7:
                    be:27:e1:15:bd:8e:ea:82:dd:b3:5c:6b:c3:fc:f6:
                    50:bf:0e:64:cd:11:a9:c3:d7:7d:c3:1c:77:8b:fc:
                    b5:9c:89:d7:d3:26:2b:de:e1:15:08:67:f8:81:0a:
                    e8:a9:b5:69:88:06:0e:6d:24:f3:a3:a3:62:77:95:
                    96:ce:34:d6:26:fb:dd:f4:2b:ea:7d:85:89:a3:fa:
                    93:21:13:f4:dc:46:8f:64:42:ce:a6:0b:39:1c:02:
                    5a:b5:20:40:1c:dd:2f:60:d7:35:14:95:03:5d:ce:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:0A:F9:50:B9:A0:49:92:74:28:04:D8:04:D0:59:8C:69:B9:36
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/ZyAK-VC5oEmSdCgE2ATQWYxpuTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:f5:18:c8:b5:23:21:65:b3:a9:f9:07:12:3a:7b:33:1e:
         4a:3f:5a:3f:a5:cb:9f:83:3b:9b:7f:ad:ea:0f:1d:68:63:94:
         6b:4b:90:0d:18:3c:b5:c6:09:94:11:81:ae:cb:17:6c:3e:19:
         0e:82:ce:22:6e:ec:86:70:7e:67:f5:fa:c8:c2:76:80:5b:40:
         f3:67:8e:f0:bf:e3:86:c1:ef:c4:b4:76:b8:1c:80:e9:5a:98:
         21:e1:3b:bf:21:0b:c9:cf:20:11:8f:0c:13:bb:de:83:2d:5d:
         d8:53:33:0c:b2:71:ed:f6:83:46:cf:56:cc:2e:37:58:b7:9d:
         3c:bd:4f:b0:a3:31:0e:e2:40:2e:a4:bf:73:0f:18:21:8d:1f:
         a5:6c:23:3b:67:77:1a:6c:1c:f7:cb:24:37:a8:f7:e7:6e:94:
         98:30:47:34:9b:ea:40:d7:82:3e:37:10:eb:6c:cf:14:28:08:
         a0:38:dc:41:c8:39:42:ac:95:f2:e5:31:21:63:f0:fa:91:ad:
         10:e9:35:c4:26:d1:8e:52:2a:ed:fc:c0:f2:58:cb:ef:0c:89:
         35:01:38:a2:63:83:40:ae:dc:88:8a:0b:ef:9c:be:ac:c6:20:
         7c:0d:79:12:64:4e:02:ba:a4:26:db:89:76:44:7c:05:89:3e:
         a4:1e:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:02 2025 by rpki-client