Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/t2TYzLIQ5uoYLBDm5HGEtsGVOoE.roa
File:                     t2TYzLIQ5uoYLBDm5HGEtsGVOoE.roa (raw, json)
Hash identifier:          lZ6Bip0yc3Ex2ilM0GSqYBcA6yTYN+LBQqzbZdTxZ1I=
Subject key identifier:   B7:64:D8:CC:B2:10:E6:EA:18:2C:10:E6:E4:71:84:B6:C1:95:3A:81
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       4A
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/t2TYzLIQ5uoYLBDm5HGEtsGVOoE.roa
Signing time:             Tue 05 Aug 2025 01:13:08 +0000
ROA not before:           Tue 05 Aug 2025 01:13:08 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        119.30.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  5 01:13:08 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B764D8CCB210E6EA182C10E6E47184B6C1953A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:31:94:c8:17:d9:de:4e:99:37:6f:7f:da:
                    78:24:5e:a3:fc:a2:7a:f8:3c:6d:75:5d:3f:1e:9a:
                    d6:53:fa:90:3b:ef:25:4c:86:4f:ea:c8:f7:5f:2a:
                    94:20:f0:33:c7:d8:5c:f4:92:10:4d:04:fa:fe:e0:
                    16:00:4f:43:3b:8a:a8:13:d8:cd:60:92:b3:ef:03:
                    80:56:2c:a7:a7:10:00:94:b5:b6:33:af:2a:82:7b:
                    6a:c9:3a:99:97:c5:fb:cd:36:04:f5:b9:d5:39:75:
                    41:ac:a0:d3:9d:5c:8d:96:59:86:a2:92:8f:4c:ac:
                    9b:cc:54:cf:c1:4e:cf:50:76:47:7b:01:cd:c7:a3:
                    f5:29:c8:17:7c:ab:59:c9:05:5d:56:9e:70:4a:ea:
                    50:d9:e5:b1:ba:6b:b8:e0:43:df:82:0d:fe:e9:8d:
                    8a:cd:c3:ad:be:a4:e6:65:00:7f:d3:5e:35:a7:af:
                    10:d4:b6:d3:2a:99:fd:2b:2a:9b:25:dc:d1:0a:4e:
                    52:df:7b:bc:84:fb:73:2e:ad:68:15:1e:d8:b9:50:
                    c8:5b:1f:a4:bb:34:a0:76:94:df:0b:eb:1b:d6:bb:
                    57:8b:b5:13:d3:97:97:ed:f0:a4:3e:ad:39:b6:32:
                    29:06:45:c1:45:2b:3a:f3:f0:f0:ec:bc:4e:27:ae:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:D8:CC:B2:10:E6:EA:18:2C:10:E6:E4:71:84:B6:C1:95:3A:81
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/t2TYzLIQ5uoYLBDm5HGEtsGVOoE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:b0:6f:0b:b3:ca:02:b9:65:21:ac:d9:ad:df:9a:1c:ca:
         3c:67:c4:b7:e3:7a:c7:c5:7b:64:d9:88:57:2e:90:70:ab:36:
         c8:41:d3:b0:eb:0d:22:1f:5c:0c:da:e5:58:14:92:91:9d:73:
         69:7c:a3:ea:12:b3:8c:50:dc:80:31:13:d2:0b:11:7b:7f:16:
         39:b4:67:ee:00:02:7e:98:61:42:b3:b1:4d:4c:ea:d4:e8:15:
         70:95:2b:6f:a1:89:88:05:66:59:70:4f:4e:c4:6c:57:3f:63:
         69:a7:a3:a2:7a:b8:29:10:15:84:80:6e:da:f3:f6:7b:0c:11:
         ba:73:aa:fc:53:6d:17:0b:3f:bd:e6:66:e1:91:06:9a:7d:0f:
         e4:59:d0:9b:d8:9a:32:66:25:72:8a:ea:5c:de:3d:ce:85:50:
         2f:ea:4f:eb:68:c7:a6:af:3a:fe:60:e6:b3:7c:de:0e:a2:d3:
         3f:0d:9b:67:13:3b:55:83:26:97:22:29:98:68:66:7c:0b:ed:
         2a:a0:2c:8f:fd:16:ae:07:71:a5:da:76:d4:8e:17:25:f6:74:
         21:d7:07:4d:1a:ea:e2:16:4e:23:3b:8f:20:a9:e7:6a:5e:fd:
         62:1e:28:d5:74:44:1b:da:db:74:37:39:a2:dc:15:1c:1d:6c:
         44:2a:1c:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:35 2025 by rpki-client