Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/6K3z_Q1bv9uqRlOKym1Gf_qTSNQ.roa
File:                     6K3z_Q1bv9uqRlOKym1Gf_qTSNQ.roa (raw, json)
Hash identifier:          29+2GGiUknpAyQMz+KyAmT1wTpMWuTxnVO6z1JgCumU=
Subject key identifier:   E8:AD:F3:FD:0D:5B:BF:DB:AA:46:53:8A:CA:6D:46:7F:FA:93:48:D4
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C1
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6K3z_Q1bv9uqRlOKym1Gf_qTSNQ.roa
Signing time:             Fri 01 Aug 2025 01:37:52 +0000
ROA not before:           Fri 01 Aug 2025 01:37:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        202.208.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E8ADF3FD0D5BBFDBAA46538ACA6D467FFA9348D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:55:da:10:68:30:46:d8:4d:7b:dd:e1:ea:
                    9a:64:d5:25:a7:73:22:01:c0:f4:f6:33:3c:23:e7:
                    fd:9f:87:c1:07:35:07:40:98:c5:bb:55:ff:2d:48:
                    73:54:98:c7:80:03:05:d8:07:26:1f:7e:13:58:57:
                    10:6b:c6:ee:15:f8:89:87:bf:3f:89:16:35:46:ea:
                    bb:05:62:b2:b0:49:e5:20:3c:f1:31:35:65:d8:51:
                    b0:a4:6b:28:b9:eb:9d:e2:8b:5a:66:c3:db:29:c0:
                    6d:2e:97:e9:6e:f8:fb:44:ad:81:3f:06:de:63:f6:
                    71:a1:78:12:09:fa:80:95:c0:d7:e8:76:10:ee:21:
                    f1:bc:02:02:ec:bb:73:b0:ef:49:cb:ae:ae:a1:49:
                    8e:2e:9f:1f:96:cd:21:ed:7f:cf:5c:fc:32:39:ae:
                    30:8e:78:69:41:3b:5f:e1:be:8a:6b:ae:41:f4:37:
                    c9:f8:84:07:fd:30:05:e9:6c:11:c0:ac:fc:29:a4:
                    92:f5:1a:f5:bd:a9:47:47:58:0c:83:51:07:0d:85:
                    4c:ae:f6:af:40:c5:2f:a5:53:4b:9c:85:ee:ac:87:
                    e2:bb:ce:be:b7:d6:f3:24:c8:bb:50:5d:00:e0:40:
                    ad:bd:0e:61:d4:7d:b6:29:2c:cd:d1:53:86:ac:bb:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:F3:FD:0D:5B:BF:DB:AA:46:53:8A:CA:6D:46:7F:FA:93:48:D4
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6K3z_Q1bv9uqRlOKym1Gf_qTSNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:7b:22:69:5e:74:a2:19:79:f6:4f:17:07:5a:bf:d4:04:
         ea:54:49:89:3c:da:41:c5:00:77:fa:f0:76:6f:c4:82:fe:21:
         e8:de:01:e2:4c:51:e2:ad:3c:95:52:23:74:fc:d3:fa:61:b8:
         46:5c:6e:a0:2d:81:96:63:7f:e5:30:c8:f4:1c:78:01:e7:f7:
         63:3b:e3:bf:26:c9:05:17:0f:fb:6d:0f:4b:7d:50:b3:f4:ba:
         84:eb:c4:83:26:6c:76:85:9d:78:60:c3:e3:4a:62:38:a1:d6:
         a6:c1:ed:5d:6f:03:a2:5c:48:f2:93:11:4b:4f:00:d7:a9:7a:
         fc:12:4c:68:62:e0:ef:ef:fb:f3:99:84:bd:f3:74:1c:ee:6a:
         ff:0c:17:60:71:bc:ed:ee:dd:ac:f4:d7:c1:dc:87:45:fc:ac:
         49:31:b0:df:80:52:ea:e9:c5:6e:8e:53:06:71:82:0c:6c:d9:
         5e:d7:cf:37:a6:1b:e6:d7:de:32:07:b9:d3:d4:1c:9c:29:b2:
         82:ee:66:a8:cc:da:e3:99:89:0d:3b:2c:4c:42:ff:7a:a3:ab:
         6b:ed:28:38:55:bb:fc:bb:a3:2a:a3:e6:b7:e0:bc:bb:0a:31:
         bc:7b:ab:3f:cd:d1:c4:9d:7d:67:47:db:f6:c7:68:ca:29:20:
         6f:1b:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:31:58 2025 by rpki-client