Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/67LuQpuAKaLoRm1jgSgKot1wznA.roa
File:                     67LuQpuAKaLoRm1jgSgKot1wznA.roa (raw, json)
Hash identifier:          9c6YqMtixkM78hCgQEY5E5DyaCSJZwTUgrrVed4iIuU=
Subject key identifier:   EB:B2:EE:42:9B:80:29:A2:E8:46:6D:63:81:28:0A:A2:DD:70:CE:70
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       A9
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/67LuQpuAKaLoRm1jgSgKot1wznA.roa
Signing time:             Fri 01 Aug 2025 01:31:36 +0000
ROA not before:           Fri 01 Aug 2025 01:31:36 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        211.132.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:36 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EBB2EE429B8029A2E8466D6381280AA2DD70CE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:0d:88:79:e8:3d:f3:fa:ec:41:2c:38:27:
                    bc:88:05:ba:d9:b2:04:40:d3:d4:34:ac:9a:4c:6f:
                    cf:30:4b:3c:6f:d5:28:a1:3c:92:32:10:0f:f7:49:
                    ef:0c:21:4f:f5:6a:68:c8:44:3e:86:85:7a:1b:fb:
                    5c:63:8d:8c:5e:cb:07:75:7f:54:57:ab:d5:c8:85:
                    0a:ce:8c:a1:a8:95:a9:a5:01:d4:2c:68:a1:18:27:
                    25:50:fe:3a:18:44:43:c9:37:ca:a2:11:bb:0f:04:
                    7e:88:44:f2:61:15:66:60:d0:7f:e9:82:49:7d:60:
                    c2:18:ee:1d:e8:ba:82:3c:4f:41:22:66:7b:b8:58:
                    b0:e3:b4:9c:c1:56:3a:2c:70:8f:7d:b4:74:9e:9d:
                    83:75:83:69:fd:d5:3c:eb:7d:2f:76:f2:5c:d3:37:
                    6a:c0:6a:b7:a8:b8:8e:1e:07:c9:b3:54:f4:7b:e3:
                    43:05:59:2e:ce:db:88:f7:72:e6:1c:b7:3a:8e:7f:
                    f8:86:a0:c8:90:5f:56:29:5b:12:93:08:2f:bd:60:
                    3d:9e:92:75:25:c4:69:ce:a9:dd:29:22:77:ab:48:
                    85:00:83:10:d1:91:b5:99:60:61:c5:1d:ab:b1:7a:
                    3b:22:f0:5a:1c:c0:31:0b:fc:d4:f6:52:6e:fe:44:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:EE:42:9B:80:29:A2:E8:46:6D:63:81:28:0A:A2:DD:70:CE:70
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/67LuQpuAKaLoRm1jgSgKot1wznA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:87:47:1b:28:95:82:0e:00:b9:59:94:ca:9d:11:24:43:
         f6:3c:26:88:a7:ec:bd:5d:d2:ad:04:1a:c8:00:ab:0e:41:d5:
         0b:96:ba:48:f2:b4:b9:7e:5e:bc:f3:56:2d:14:a6:3e:36:78:
         df:d9:f8:28:6c:e6:7d:39:84:e2:b6:e3:a1:fd:d1:ce:48:ac:
         7b:18:41:7c:d9:2f:52:04:8b:2d:3b:75:9a:32:00:fd:18:82:
         3c:b0:a3:29:bc:6d:1b:b3:26:59:d5:96:f0:d0:8a:07:59:db:
         1c:33:04:38:36:5a:9e:90:72:09:76:8d:9e:fd:a9:cb:2d:d9:
         a1:d1:63:09:b9:e2:5c:0f:5d:ab:5d:2e:4c:b5:d7:94:21:8a:
         ec:df:b0:7b:95:09:88:fa:96:16:cc:37:25:14:d7:e5:41:aa:
         37:8a:12:22:07:43:00:ad:18:2c:82:1b:45:37:81:d5:11:a8:
         ad:03:6a:7a:f4:8e:b0:e4:49:53:16:25:07:84:99:8c:39:a1:
         27:30:79:e2:91:27:9d:98:ec:09:95:97:b6:18:f1:63:40:c8:
         95:04:51:69:33:13:cc:be:19:1c:da:e3:77:21:31:39:9f:1f:
         85:19:22:ae:10:49:cc:77:69:25:7c:50:1c:4d:21:a2:d9:8e:
         c8:2d:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:59 2025 by rpki-client