Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3PvmALwkE7d4nWxsx0XenyYJKZ4.roa
File:                     3PvmALwkE7d4nWxsx0XenyYJKZ4.roa (raw, json)
Hash identifier:          kRiAet0hH927GK4Spql7yWQqum8kgIHEHLWtkPk2Ss0=
Subject key identifier:   DC:FB:E6:00:BC:24:13:B7:78:9D:6C:6C:C7:45:DE:9F:26:09:29:9E
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       AF
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3PvmALwkE7d4nWxsx0XenyYJKZ4.roa
Signing time:             Fri 01 Aug 2025 01:31:39 +0000
ROA not before:           Fri 01 Aug 2025 01:31:39 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        219.121.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:39 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DCFBE600BC2413B7789D6C6CC745DE9F2609299E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:8f:f9:54:c6:b0:69:32:b1:91:d1:38:17:
                    d6:37:71:43:3e:c8:ab:90:47:27:61:6c:40:bd:6d:
                    c7:29:1f:0a:8d:27:4f:2d:11:21:d5:1a:54:21:95:
                    5f:bb:b7:67:c9:2a:3b:6f:66:c6:a6:e4:f9:16:cd:
                    ae:76:c2:15:1d:b4:4f:ff:33:9d:d6:e8:ae:64:f1:
                    c5:4b:d9:c4:64:df:b2:51:c8:db:b2:fd:91:93:d7:
                    1e:44:75:52:af:06:ae:cb:6f:33:9e:13:0c:d6:9a:
                    5f:83:ed:3f:f5:02:3f:64:41:d4:49:55:ce:9d:da:
                    e8:c6:b6:23:c8:ce:33:c2:4f:9c:68:21:a9:19:17:
                    e9:de:36:0d:98:64:20:d2:b7:e3:35:f5:22:56:84:
                    02:a1:b9:af:dd:cc:9c:52:cd:bb:11:74:98:c2:67:
                    e6:b8:45:60:dc:74:ff:c5:29:1d:63:8c:ca:b7:63:
                    43:33:15:22:f6:85:93:1f:93:99:99:c0:04:2b:0f:
                    f7:df:78:6d:9e:e0:cc:2a:9f:af:ed:02:2a:f6:c7:
                    88:d2:35:c2:7a:26:b1:c9:b8:81:4f:fe:73:80:5a:
                    2d:03:82:cf:87:85:fd:1f:b5:39:34:c8:a5:25:89:
                    90:52:ad:1b:a7:70:2d:67:9a:87:2a:06:bc:7c:10:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:E6:00:BC:24:13:B7:78:9D:6C:6C:C7:45:DE:9F:26:09:29:9E
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3PvmALwkE7d4nWxsx0XenyYJKZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e5:8a:7c:74:df:6a:07:7b:62:3c:f0:e7:38:0f:df:38:66:d0:
         8f:73:e8:c0:b2:a5:16:df:a1:ed:b1:7d:0f:14:0d:b0:bb:19:
         7c:49:b8:87:ed:22:25:f0:35:77:33:60:31:ba:e4:b3:d7:ff:
         30:ca:ad:fd:0c:04:b2:7f:50:2a:a9:55:ce:1e:5c:66:48:d0:
         ed:0e:6d:53:eb:a9:4c:35:9f:68:fd:5d:3c:eb:ca:da:f7:52:
         4f:18:f3:91:2e:5f:d5:0c:50:38:20:b9:3f:a2:c1:bc:df:4c:
         9a:ef:86:0b:bc:7a:4c:54:c3:24:fc:9c:ec:d2:32:aa:79:ae:
         72:59:7d:6e:db:a9:df:04:63:4e:36:f7:bf:c9:fa:f2:a0:1f:
         07:e3:8e:a5:44:22:c5:bf:f6:e9:4e:3e:c3:c4:54:4e:65:2e:
         78:c6:28:45:01:30:80:93:0a:aa:0e:49:cc:be:21:c6:60:14:
         3e:17:bd:52:ad:d2:30:36:25:cf:c2:c3:4e:d1:89:44:30:d2:
         65:38:1c:f2:c1:96:65:6f:0d:d5:94:19:77:ff:e7:2e:6f:92:
         f6:52:84:a5:05:a2:e1:1c:de:3f:27:17:6d:91:09:a4:24:af:
         76:4a:6d:70:9d:84:aa:c2:60:f8:5f:50:02:37:1c:b8:71:94:
         eb:60:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:30 2025 by rpki-client