Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/6umFH_4PR4lpFaB3gJh0CDSyFrU.roa
File:                     6umFH_4PR4lpFaB3gJh0CDSyFrU.roa (raw, json)
Hash identifier:          luSb0TWC0ajbxYl/DcJ7JqFXdPF4q5uRXuWUdJfTzaE=
Subject key identifier:   EA:E9:85:1F:FE:0F:47:89:69:15:A0:77:80:98:74:08:34:B2:16:B5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       BB
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6umFH_4PR4lpFaB3gJh0CDSyFrU.roa
Signing time:             Fri 01 Aug 2025 01:31:47 +0000
ROA not before:           Fri 01 Aug 2025 01:31:47 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        150.9.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:47 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EAE9851FFE0F47896915A0778098740834B216B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:db:49:c6:1b:2a:d0:1d:dd:cc:1e:3f:88:
                    e2:1e:74:5a:65:da:ce:08:11:5b:11:70:32:b9:c7:
                    43:70:b9:76:26:24:f8:41:05:24:3b:b9:b0:3a:47:
                    65:64:67:e8:64:e4:1a:17:fb:03:4a:c8:42:c3:d8:
                    dc:ad:c6:a3:0d:52:59:1c:e8:7b:e3:42:12:d2:b1:
                    1a:6a:46:13:d1:07:df:1f:15:03:61:ab:33:0d:77:
                    6b:a8:e4:9c:b7:0a:78:cf:6e:f0:dc:38:26:93:bd:
                    e8:d6:d8:9b:3d:9f:30:14:f9:3a:20:84:15:1e:c5:
                    94:b7:b7:00:9e:6b:3b:12:62:83:cf:3b:ff:03:33:
                    1c:be:ef:bc:08:d0:8c:9e:27:b8:1d:52:36:41:5b:
                    13:1e:4e:0f:27:63:96:99:9c:33:92:d1:61:79:90:
                    6c:e6:c5:ed:f3:2e:42:2e:a9:6a:9c:f4:5d:7d:99:
                    5e:23:0e:42:08:72:d5:62:5a:db:44:d9:e5:64:06:
                    67:6e:cf:57:12:8f:26:95:2f:4e:37:53:c3:70:00:
                    1f:a5:c2:66:df:cf:ef:ee:93:a5:4c:be:a9:e1:2a:
                    f9:80:3d:9f:81:f4:d6:6f:df:59:cc:1a:f0:01:51:
                    03:34:3a:7f:a5:d3:00:1d:b3:33:68:bf:17:5d:22:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:85:1F:FE:0F:47:89:69:15:A0:77:80:98:74:08:34:B2:16:B5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/6umFH_4PR4lpFaB3gJh0CDSyFrU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:6d:f7:6f:58:f5:ea:b5:78:bb:9b:60:8a:71:af:bb:3d:
         a8:4b:8b:0e:31:85:71:b1:5e:f3:71:23:4e:1a:a8:05:a7:59:
         46:c9:91:f9:db:62:73:c1:76:18:a2:eb:89:4f:e9:80:4a:5c:
         df:ef:25:93:33:2c:27:a4:0b:6b:77:db:80:10:37:9d:46:97:
         f2:a4:c2:96:22:9f:b4:be:59:b9:d4:4e:5a:ed:21:8f:0b:89:
         53:62:9f:08:6f:75:e4:78:92:0c:59:dc:4a:57:3d:2a:81:65:
         31:4c:1e:0b:37:18:d3:43:df:9c:df:aa:d0:63:d9:61:f4:0c:
         2a:aa:33:a9:93:db:3c:0d:ca:45:1e:e0:23:01:ab:d9:a1:c5:
         6d:94:35:62:3a:2c:a6:41:b4:f9:71:a9:c4:cc:de:3d:38:17:
         4e:96:a8:58:82:dd:26:eb:e4:09:69:4c:d9:bf:ad:e5:5f:ac:
         4f:41:75:ce:4c:81:59:34:69:07:5a:f7:45:5f:4c:dc:18:78:
         52:b2:eb:20:5c:20:4f:f3:04:4e:6e:f3:2c:8d:4f:ed:5e:01:
         08:99:ce:4d:e1:c8:74:67:3c:df:d6:14:5d:44:17:c6:9b:f7:
         01:0a:8e:bb:62:26:55:9f:8a:eb:24:f6:d1:42:6c:4c:47:e7:
         fe:0b:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:20 2025 by rpki-client