Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/08WI9jqMgxCl-aJyoyQcXodG-EQ.roa
File:                     08WI9jqMgxCl-aJyoyQcXodG-EQ.roa (raw, json)
Hash identifier:          NPj+aBUn8LKwb7NVUPZ0v6c5V2jzkffYfU8Z6weaIBs=
Subject key identifier:   D3:C5:88:F6:3A:8C:83:10:A5:F9:A2:72:A3:24:1C:5E:87:46:F8:44
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       82
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/08WI9jqMgxCl-aJyoyQcXodG-EQ.roa
Signing time:             Fri 01 Aug 2025 01:29:49 +0000
ROA not before:           Fri 01 Aug 2025 01:29:49 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        110.232.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:29:49 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=D3C588F63A8C8310A5F9A272A3241C5E8746F844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:2b:31:7a:c6:7f:31:95:af:cf:2b:d9:c6:
                    bd:fb:f9:88:b6:9d:5b:1a:f1:25:e7:30:b8:c8:08:
                    b4:eb:ae:9f:e4:a3:5d:bf:40:de:3e:22:54:96:4d:
                    67:52:2a:ae:3d:9f:3c:ce:b6:ce:95:d6:87:e9:1f:
                    52:0a:11:72:1f:5f:93:73:5b:a0:89:b5:cf:c0:68:
                    86:4d:0c:13:73:83:57:ba:24:5d:41:1f:3a:b7:37:
                    16:59:a8:f8:2c:3e:23:b6:5f:5d:45:f1:90:d2:c3:
                    2e:92:ca:3c:8b:8d:e1:66:8f:39:d1:6c:e7:c1:89:
                    83:c2:f5:12:e3:af:0e:78:02:32:e6:f7:60:a6:ad:
                    8f:a7:9b:82:e5:42:42:29:a2:e7:34:8e:bf:25:74:
                    be:ab:29:7c:67:3c:b4:88:57:0d:b9:29:75:c4:d4:
                    b3:e8:42:a6:81:e9:6d:07:81:db:a4:5f:e0:b4:c4:
                    64:f5:a0:26:61:3c:be:83:f4:05:f0:09:93:93:4c:
                    a6:bd:c4:8e:5b:a3:85:2b:b5:74:15:38:91:28:4d:
                    7d:97:46:f7:30:d4:09:22:fb:27:35:bb:f0:6e:72:
                    0e:b0:70:5f:30:ac:1c:c0:74:b9:8f:68:97:c8:c9:
                    a9:52:2c:fc:02:f3:f0:50:ac:8d:fc:84:69:66:7d:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:88:F6:3A:8C:83:10:A5:F9:A2:72:A3:24:1C:5E:87:46:F8:44
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/08WI9jqMgxCl-aJyoyQcXodG-EQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:73:da:6d:77:cc:98:86:57:de:f9:08:9b:7a:a8:91:95:
         ef:ce:ac:07:8a:07:04:07:e6:13:34:5f:c3:e3:b0:6c:7a:22:
         e6:d0:7f:08:f8:63:f0:5a:43:f9:5b:a4:30:b3:38:10:2e:05:
         d9:47:84:8f:c9:3f:db:ce:a5:f0:26:75:0d:c6:99:f0:01:76:
         92:45:98:7e:76:f1:76:77:ad:98:f3:c1:c3:92:30:70:c8:49:
         0e:36:28:fc:e8:e9:af:32:b0:0d:3c:ce:b0:93:cb:d1:3c:b5:
         72:82:b9:22:25:09:45:80:9a:a2:f9:94:bf:78:67:f0:45:71:
         f4:bc:9b:34:e4:57:a3:47:bf:2a:a8:68:9b:08:a2:17:75:b4:
         39:d6:d7:b3:89:54:e1:16:99:09:e2:5c:ab:d3:57:90:a2:38:
         c7:3f:e6:59:c2:0a:02:3b:26:63:bd:7e:41:ac:37:47:f3:f4:
         3d:46:81:c6:4b:ca:cf:f5:3a:2f:3d:36:a8:8c:75:5b:9d:94:
         b9:33:da:25:4f:5e:74:89:16:b9:71:b0:3f:13:02:b4:64:5b:
         6e:48:f6:29:46:f7:e2:64:20:94:cb:4a:4f:f4:69:58:a8:1e:
         c4:30:92:77:b4:ca:e3:4d:6b:15:21:b8:94:28:ab:9c:c1:37:
         9c:7e:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:42 2025 by rpki-client