Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/-A7U2-uPwn9mFb2wybdidCmimhg.roa
File:                     -A7U2-uPwn9mFb2wybdidCmimhg.roa (raw, json)
Hash identifier:          kN+6RT1s4IELYHPa94oWe52c4G52WAjZwahEoq+NJOk=
Subject key identifier:   F8:0E:D4:DB:EB:8F:C2:7F:66:15:BD:B0:C9:B7:62:74:29:A2:9A:18
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       4C
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/-A7U2-uPwn9mFb2wybdidCmimhg.roa
Signing time:             Tue 05 Aug 2025 01:16:58 +0000
ROA not before:           Tue 05 Aug 2025 01:16:58 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        219.105.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  5 01:16:58 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F80ED4DBEB8FC27F6615BDB0C9B7627429A29A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:21:37:50:f8:f4:86:73:09:1f:e3:3b:98:
                    7d:1a:38:27:06:68:74:8f:09:dc:f1:30:6e:14:9e:
                    97:46:65:48:d4:49:9f:63:6a:9b:70:29:e6:42:97:
                    32:ff:00:c0:48:74:6f:a4:89:92:9f:6f:b0:db:5b:
                    19:3d:55:4c:3e:f8:62:e0:4c:69:77:66:03:51:26:
                    16:af:73:63:9c:bb:dd:a8:88:dc:fb:52:ca:06:0a:
                    63:a1:c2:09:93:dd:94:af:3b:e4:3d:2d:cb:42:6e:
                    5d:cb:59:c5:70:4d:42:c1:26:f8:11:21:79:27:5f:
                    25:88:95:b7:bc:6c:a5:2c:51:3a:7b:58:b7:bb:bd:
                    d3:de:62:b5:5e:40:52:24:13:41:3e:5b:34:43:30:
                    0c:60:28:38:0e:c1:f3:6e:33:e1:9c:06:51:c2:ca:
                    3b:2b:03:4b:5f:48:84:92:21:5d:ef:63:36:a6:ee:
                    6e:3b:1e:7d:cb:7f:39:c1:69:02:83:cc:97:0d:af:
                    8d:e1:be:19:43:5b:f9:64:60:fb:d1:bf:b8:85:23:
                    8d:5e:11:ef:e6:b9:b8:e7:52:35:19:13:89:17:0f:
                    1c:8e:49:33:a1:b8:4d:b4:71:0c:4f:1a:29:59:19:
                    24:d3:87:0d:42:fd:9b:74:f8:fd:b7:52:4b:51:00:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:D4:DB:EB:8F:C2:7F:66:15:BD:B0:C9:B7:62:74:29:A2:9A:18
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/-A7U2-uPwn9mFb2wybdidCmimhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:86:69:93:b3:42:37:7d:03:59:aa:9f:f6:31:5a:7f:56:
         52:fe:2c:26:70:25:a0:28:f0:ad:c3:4d:e5:b6:14:a5:e6:c9:
         5d:ea:bc:f9:9f:81:5e:c1:63:70:23:1d:9d:0b:cb:f1:26:66:
         d5:90:b9:31:48:e9:39:8e:8d:33:91:09:a6:60:32:53:ce:37:
         b4:2a:de:52:90:18:b3:40:40:d4:2d:d6:0b:30:43:3d:d9:d9:
         8d:3d:c0:27:55:d3:40:de:16:37:fa:e0:de:07:c4:13:f0:a5:
         b6:93:20:86:eb:8d:de:ae:c8:b3:8a:25:46:47:e8:4c:00:05:
         dc:c6:0e:07:6f:86:4e:c6:a6:42:96:22:fd:92:90:6a:3c:d8:
         e8:7d:92:3a:0f:03:7c:de:1a:3b:62:70:20:6b:9e:1f:d1:33:
         4f:95:27:b6:48:b0:de:8f:1e:da:35:42:8f:79:0c:a3:70:36:
         ff:84:0f:2e:b6:74:43:8d:b5:2f:41:00:68:78:66:a5:9c:14:
         28:e3:2f:8f:28:a5:4a:2c:f4:54:c3:db:aa:c1:37:2b:be:b0:
         22:55:e4:d7:52:46:36:39:b2:c5:f1:cf:c1:54:14:16:73:66:
         a0:4e:cb:83:9b:3b:ec:c8:41:21:3c:c0:cf:c4:8e:1c:50:af:
         1c:54:92:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:18:10 2025 by rpki-client