Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/-q7nyU1v9dFLB3ZJ3ndiLPz3UzM.roa
File:                     -q7nyU1v9dFLB3ZJ3ndiLPz3UzM.roa (raw, json)
Hash identifier:          vfFQXndh0/VzDmjJDZwnwYbwaMzlW2i630GWOmrBM/o=
Subject key identifier:   FA:AE:E7:C9:4D:6F:F5:D1:4B:07:76:49:DE:77:62:2C:FC:F7:53:33
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       AB
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-q7nyU1v9dFLB3ZJ3ndiLPz3UzM.roa
Signing time:             Fri 01 Aug 2025 01:31:37 +0000
ROA not before:           Fri 01 Aug 2025 01:31:37 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        61.125.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:37 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FAAEE7C94D6FF5D14B077649DE77622CFCF75333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:13:33:80:34:58:1c:1b:69:b7:94:b2:c5:
                    84:21:a0:bf:2b:d3:b0:5e:15:3f:b6:9b:44:20:ac:
                    c6:7d:e9:d9:fb:36:d7:ce:35:8e:b6:af:be:03:16:
                    27:db:73:f5:82:a6:82:20:55:43:6b:c3:c1:0e:6f:
                    d9:c0:10:73:f2:ce:37:62:73:ac:29:c0:75:f6:0a:
                    32:d6:05:3d:48:10:8f:72:0b:7a:f7:ff:9f:bf:41:
                    e0:30:3b:c4:73:97:be:ef:1b:bf:41:c3:60:76:3f:
                    5e:3b:53:c6:7d:49:32:d3:11:e3:a8:59:c1:ae:b8:
                    69:51:57:e3:ea:e3:09:b8:e4:f4:e4:6a:4d:31:d9:
                    3b:54:49:e1:6c:1d:8e:e7:dd:bf:83:8c:d6:71:c3:
                    5e:5b:9e:b5:9c:c6:f6:1d:7b:a5:94:ad:49:86:bb:
                    1c:80:27:51:15:f6:f2:54:74:e1:e5:fd:4d:5d:de:
                    0f:f9:ff:1f:9b:86:d7:3a:7c:2f:8c:54:65:de:9c:
                    76:11:4d:f4:92:73:70:26:ff:27:61:6d:62:0f:79:
                    73:f0:4e:1b:1c:0f:3d:b7:b0:bf:00:2c:35:91:a0:
                    09:c3:d6:c0:6d:6f:e3:40:81:44:b4:fd:d1:e0:4c:
                    d6:7e:72:82:c1:08:20:7b:27:31:df:03:3d:59:08:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:E7:C9:4D:6F:F5:D1:4B:07:76:49:DE:77:62:2C:FC:F7:53:33
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-q7nyU1v9dFLB3ZJ3ndiLPz3UzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:52:01:38:51:92:16:0b:14:cb:e4:3b:9b:ea:5a:e1:1e:09:
         e7:24:34:78:ea:e9:b4:ee:75:91:f8:29:be:ee:8a:f0:04:10:
         ee:6e:e6:e5:58:87:8e:62:f0:bf:93:b8:12:2e:a6:86:80:57:
         00:ed:fb:b7:ce:7a:98:b4:e5:b3:c3:8a:33:df:76:0b:d2:dc:
         e3:0f:68:56:80:b7:d2:ea:36:76:21:f2:71:71:68:d6:d2:75:
         4a:b4:5c:c8:a7:84:36:f3:e8:99:0d:9e:64:bf:73:50:22:1e:
         32:63:52:e9:ac:d0:60:4b:31:24:1a:73:89:17:f2:5f:73:6b:
         16:b0:bc:00:bf:97:2f:d8:48:6e:2c:3a:ba:4e:c6:84:3c:f3:
         1a:cc:be:50:3d:4a:90:16:3c:23:95:9c:85:78:f7:67:84:f4:
         03:f6:f2:9b:a3:29:b3:2e:f2:d9:73:03:a8:0e:f4:de:c8:e7:
         65:42:0e:8c:7a:fd:18:8c:f5:79:b7:84:e2:ee:21:17:64:21:
         66:a3:b8:63:8d:99:f8:6f:2f:02:c8:42:e7:78:f6:0f:ca:4d:
         45:b2:48:e4:76:00:db:26:39:cb:28:55:75:e9:29:c5:b6:23:
         53:7e:c2:51:f7:b6:6c:61:8c:fe:04:04:84:fa:c7:b9:71:b2:
         1f:65:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:22 2025 by rpki-client