Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/gTg8A2-GjwpHrxWg3k5j8eNweyw.roa
File:                     gTg8A2-GjwpHrxWg3k5j8eNweyw.roa (raw, json)
Hash identifier:          2ZuLRBZEyVB5YzS2B6KaU1OwrkprE6GuwPdwSA7pp34=
Subject key identifier:   81:38:3C:03:6F:86:8F:0A:47:AF:15:A0:DE:4E:63:F1:E3:70:7B:2C
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       92
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/gTg8A2-GjwpHrxWg3k5j8eNweyw.roa
Signing time:             Fri 01 Aug 2025 01:30:00 +0000
ROA not before:           Fri 01 Aug 2025 01:30:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        203.191.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:30:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=81383C036F868F0A47AF15A0DE4E63F1E3707B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:b4:0e:93:0a:0b:65:1a:ba:67:11:31:52:
                    d8:14:00:75:b8:01:e6:40:11:fb:17:a4:a7:59:d8:
                    0c:49:90:d9:bc:10:c9:bc:4a:0c:21:e2:b7:ce:ca:
                    a1:a0:4e:2c:4e:a5:1f:f8:de:9c:9a:0b:bd:2f:3e:
                    85:b5:01:1b:9a:52:6d:01:dc:29:9f:9f:9b:d4:1d:
                    0b:72:77:8b:31:92:51:38:ac:bc:a2:77:ec:13:40:
                    c7:a6:77:99:a3:4c:2d:4a:f7:1f:a9:00:0e:03:bc:
                    67:cd:d5:fa:d5:16:35:cc:fa:3c:d1:31:fe:aa:2a:
                    0c:d6:84:8b:9a:c6:9e:f7:32:7a:74:f6:ae:c3:8e:
                    8a:cb:ac:f3:ec:08:f3:8b:1f:d2:bc:e4:71:89:a2:
                    b2:05:0f:ad:98:c9:d3:cd:6c:92:a6:89:ed:57:73:
                    35:14:d2:08:02:9a:03:18:28:f0:df:42:c2:fb:38:
                    8c:7f:b1:a8:2c:1c:49:18:65:75:58:f8:b1:bf:4b:
                    bc:4d:d3:c9:0c:92:77:94:c4:33:a1:a9:86:e4:6f:
                    89:e3:cb:c2:f8:c9:96:0f:31:2a:49:2c:a8:e7:5c:
                    a0:40:1b:d9:03:cb:23:57:94:72:b5:af:ed:85:3b:
                    a2:5a:06:70:fc:85:f1:c8:79:d0:7b:11:3e:d2:a3:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:3C:03:6F:86:8F:0A:47:AF:15:A0:DE:4E:63:F1:E3:70:7B:2C
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/gTg8A2-GjwpHrxWg3k5j8eNweyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:73:2f:0a:09:da:31:0a:45:5b:30:25:60:93:8d:4a:38:
         98:71:70:f3:93:74:c0:61:4c:b5:4b:10:44:13:d5:57:00:55:
         62:dd:f6:6b:7b:b1:65:95:3d:9e:48:1d:70:65:7b:f3:47:1e:
         30:76:65:38:5e:ef:a4:5b:8a:2c:c3:99:72:14:15:98:ca:ed:
         9a:75:5a:66:20:be:e6:63:04:35:21:d3:d7:7d:09:f7:eb:0a:
         d0:3a:14:ef:de:23:8a:18:67:4e:23:d7:f3:1a:a5:1c:e4:82:
         1d:76:f0:c0:5f:3c:a3:36:a9:68:69:1a:49:8b:2b:fb:df:c1:
         c0:33:d1:54:7f:33:a2:ed:f1:15:a5:8c:b2:30:27:0e:59:20:
         07:73:ce:f1:cb:bc:fb:2b:3e:b3:14:b0:46:57:78:e9:a2:bb:
         55:03:51:5d:db:27:ed:91:fb:a1:aa:14:83:9f:a0:d4:c3:30:
         de:e8:50:62:c5:94:dd:11:69:4f:85:1b:7e:63:f8:eb:27:ab:
         54:14:cb:24:54:ec:c4:ac:0a:2f:cf:8e:fb:18:64:8a:b3:fb:
         7e:5a:1f:ff:c7:6b:d1:e6:d0:41:66:83:59:ce:68:c1:90:af:
         55:77:4a:c4:af:46:aa:b7:13:c6:2f:e8:de:80:7b:99:ee:65:
         72:9e:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:19:53 2025 by rpki-client