Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ySWZwR70dzdEEcEBws7bBINkmwU.roa
File:                     ySWZwR70dzdEEcEBws7bBINkmwU.roa (raw, json)
Hash identifier:          nEOhHmZ58rrwfSPLuhog6nbj1AhoN5lF5c+JKL1y2wQ=
Subject key identifier:   C9:25:99:C1:1E:F4:77:37:44:11:C1:01:C2:CE:DB:04:83:64:9B:05
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       50
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ySWZwR70dzdEEcEBws7bBINkmwU.roa
Signing time:             Wed 06 Aug 2025 04:43:46 +0000
ROA not before:           Wed 06 Aug 2025 04:43:46 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        133.106.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  6 04:43:46 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C92599C11EF477374411C101C2CEDB0483649B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:9a:c6:c1:2c:7d:c7:6d:d5:d7:79:a6:79:
                    78:70:f3:78:89:e3:69:50:09:ef:a2:b3:f2:a3:19:
                    4e:d2:d5:72:36:f2:8b:b6:cd:31:cf:9f:8f:b3:9f:
                    78:43:7b:5a:ce:cd:94:16:66:ad:4e:0e:b1:19:82:
                    7b:c3:51:76:a6:66:6f:77:a7:ca:d3:b3:3e:2f:7a:
                    16:05:84:c6:8a:98:1e:a7:99:20:56:12:59:00:01:
                    9c:90:4d:42:57:04:09:4d:fb:62:af:0c:f9:a9:c6:
                    2a:14:32:01:95:46:c0:82:16:11:dd:07:60:5e:78:
                    1c:15:2e:98:45:76:56:21:3c:9c:f3:08:df:63:ba:
                    e0:5d:f5:e9:c7:73:0e:73:3d:74:ab:12:eb:80:a1:
                    6a:9a:3f:ed:d2:c3:d1:07:26:8e:90:32:71:de:58:
                    9d:62:9e:85:7e:9a:85:d8:c4:49:d8:e8:46:97:88:
                    c4:f5:56:e7:e9:78:00:75:57:1c:5d:38:ec:5f:30:
                    24:27:4e:00:98:a2:29:bd:58:be:a8:f5:ef:13:6d:
                    4a:76:7f:03:fd:94:07:6b:d7:9b:81:8a:f5:e5:98:
                    50:b7:3d:43:bb:44:04:55:40:2d:79:fb:66:7c:99:
                    bc:93:23:73:76:24:3b:24:cd:74:e6:a8:a4:54:a5:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:99:C1:1E:F4:77:37:44:11:C1:01:C2:CE:DB:04:83:64:9B:05
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/ySWZwR70dzdEEcEBws7bBINkmwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.106.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:60:76:c6:41:2f:eb:d6:4a:fb:b3:f4:af:a2:31:4c:ff:e6:
         43:f9:2a:8f:3f:72:7d:c8:b2:61:df:b5:85:f7:ae:90:d0:b0:
         0f:3b:ac:b5:9e:29:b9:8f:20:52:9d:52:a7:0d:d0:b2:82:7e:
         3a:29:9f:72:42:24:ae:61:b5:5d:68:47:e4:68:7e:92:cd:f2:
         94:40:ea:86:41:99:88:f3:86:3b:2b:7a:23:ee:fb:9c:66:04:
         5b:68:c6:80:34:35:af:cc:ce:67:8a:48:01:de:b7:90:6b:72:
         f7:23:7e:05:3f:a5:c7:4e:95:03:3b:16:a7:8c:d7:ba:58:6c:
         d4:5c:bc:cc:78:41:b0:ee:31:e6:6a:d7:28:d7:9d:94:14:93:
         e8:60:40:40:63:a9:c6:6d:5b:1d:73:86:04:85:34:15:ae:36:
         5f:93:5b:84:37:35:5a:9b:49:a2:14:5c:42:8a:51:18:2f:d8:
         15:f2:74:d9:97:f4:cd:a5:6f:de:48:8e:a8:71:bd:e3:a1:de:
         e8:e0:33:42:35:80:80:8d:c4:e4:bc:a8:3c:24:7c:9e:59:01:
         5e:af:78:a9:f5:d7:03:f5:3e:e7:1f:6d:a8:66:9c:c6:ad:9e:
         34:5f:89:0e:dc:b8:a9:d2:03:ab:a6:c4:d4:e1:e3:f3:bc:a8:
         f1:ea:24:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:01 2025 by rpki-client