Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/19CwRn-0uyudot9KcQiV5FNB8x8.roa
File:                     19CwRn-0uyudot9KcQiV5FNB8x8.roa (raw, json)
Hash identifier:          /+muK5vEGnwCQpJ9JSAur2s5JQ10M/2zY8llxDcvyp4=
Subject key identifier:   D7:D0:B0:46:7F:B4:BB:2B:9D:A2:DF:4A:71:08:95:E4:53:41:F3:1F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       BD
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/19CwRn-0uyudot9KcQiV5FNB8x8.roa
Signing time:             Fri 01 Aug 2025 01:31:48 +0000
ROA not before:           Fri 01 Aug 2025 01:31:48 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        150.9.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:48 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=D7D0B0467FB4BB2B9DA2DF4A710895E45341F31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:be:60:ff:14:0c:3f:18:e1:8e:49:73:a7:
                    99:e5:27:d1:34:8c:fa:4a:35:a7:15:f6:23:31:76:
                    f7:4e:0c:7c:af:e5:cf:03:80:a9:20:3c:3a:7b:52:
                    c1:4a:b1:c5:ec:7d:85:e6:b2:82:f7:e4:3a:58:64:
                    b5:5e:ab:b0:59:b3:72:45:10:6d:e8:b5:b3:5b:c6:
                    52:db:7b:d0:24:35:05:e5:32:8c:53:09:82:f2:21:
                    69:ce:f0:a1:19:21:d7:72:39:c9:de:04:ef:16:69:
                    97:b3:8c:1a:ee:c0:11:7e:91:f3:f7:bc:d2:a9:1b:
                    d0:bb:2a:dc:f1:82:df:01:c7:ac:be:b3:da:6c:07:
                    f7:0c:cc:1a:12:45:da:80:67:65:a9:b1:bf:92:94:
                    e6:95:04:85:16:67:be:9f:e9:9c:be:e9:3e:72:df:
                    b4:ac:65:0d:f2:c0:ea:19:0c:32:17:f1:0a:92:c8:
                    e4:c6:42:e2:17:ab:eb:68:72:cd:f9:28:95:9c:f2:
                    19:08:97:42:7d:76:ea:d9:f9:5c:5e:3f:61:e0:92:
                    7b:b4:e1:ed:2a:c5:de:4c:f5:20:29:c1:5d:d7:ca:
                    de:29:20:5b:c4:0a:42:1d:24:62:c4:3b:b8:40:6a:
                    63:e8:1f:7b:ed:b0:c5:b6:63:ee:b8:23:af:46:38:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:B0:46:7F:B4:BB:2B:9D:A2:DF:4A:71:08:95:E4:53:41:F3:1F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/19CwRn-0uyudot9KcQiV5FNB8x8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d7:4f:fc:cc:6b:e5:76:ed:6f:8f:e8:f8:df:23:25:a8:da:40:
         f4:75:cd:ea:e6:7f:98:57:e4:16:aa:2a:97:46:23:cd:de:7b:
         af:44:31:ba:29:ec:8e:07:e9:14:f5:69:1b:64:25:6c:0f:60:
         06:19:32:3d:f7:b3:a6:96:65:d6:ff:ee:14:e4:83:d8:38:54:
         c1:c8:5c:90:8c:a3:9d:3d:2e:c0:0d:eb:76:af:b0:21:e9:28:
         35:bb:d3:2c:e0:88:df:73:38:a3:6c:26:3e:87:73:15:35:53:
         39:f5:0c:e2:08:d6:00:d3:00:52:3f:4e:09:81:85:50:29:d1:
         55:73:6a:51:7e:01:f8:fc:48:41:52:14:bf:ad:97:27:d9:1d:
         4c:c9:fc:db:87:45:1d:3d:76:7d:4a:51:c9:c0:c6:c9:3e:0f:
         e5:3d:9f:bb:ca:06:d8:df:1e:ee:af:bd:1a:3f:0f:8c:c8:9d:
         3b:e7:79:9b:7f:34:aa:50:fa:74:54:c6:24:46:d7:d0:6d:5a:
         f6:cd:1a:cd:a8:ab:8c:86:31:57:e8:ef:fd:13:14:9c:2c:b5:
         16:50:9f:90:ca:6d:b4:6e:a1:31:c5:17:29:a8:ac:2f:af:b0:
         5c:93:15:f1:c1:ba:31:fa:af:0a:61:e2:7b:f0:85:d7:b7:fe:
         0b:62:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:13 2025 by rpki-client