Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/G3gJtROdSRgEOYLIwuOpB-b33CQ.roa
File:                     G3gJtROdSRgEOYLIwuOpB-b33CQ.roa (raw, json)
Hash identifier:          V7KTTTpJVhIDcOSw07Eo+gtl9JK362uDR/U/b3RY3JQ=
Subject key identifier:   1B:78:09:B5:13:9D:49:18:04:39:82:C8:C2:E3:A9:07:E6:F7:DC:24
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       BE
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G3gJtROdSRgEOYLIwuOpB-b33CQ.roa
Signing time:             Fri 01 Aug 2025 01:37:49 +0000
ROA not before:           Fri 01 Aug 2025 01:37:49 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        150.91.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:49 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1B7809B5139D4918043982C8C2E3A907E6F7DC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:36:89:52:73:9c:5f:53:35:38:f2:d4:e7:
                    ed:25:08:82:ef:e6:f5:ff:f3:8d:ef:15:29:d5:64:
                    c2:76:e3:a1:a3:f2:19:6a:96:16:98:f8:9a:a6:14:
                    1e:56:82:7d:69:c3:eb:47:fe:6a:f6:65:23:65:c4:
                    08:ea:49:a2:70:22:27:98:38:ea:a8:53:ed:2b:a1:
                    3e:11:0c:d9:69:f1:e9:9d:3f:59:b6:4b:c8:d2:20:
                    97:b9:bf:20:0f:ef:b9:d1:dc:b2:93:92:be:26:8e:
                    a5:21:89:e3:83:24:ca:e7:07:2e:a8:87:82:9d:ca:
                    4e:bf:b3:77:cf:1e:ab:93:3f:0c:f4:a2:d5:6c:a4:
                    ab:6b:10:4a:4c:e5:48:d5:98:f8:b1:9c:07:d9:d9:
                    ce:20:d2:85:ae:c1:5b:3c:2d:80:fe:18:84:87:d9:
                    12:11:5d:84:ba:e9:13:c5:ae:6d:28:54:aa:da:03:
                    5d:75:8a:df:4e:d1:87:44:53:c2:6d:b2:80:37:61:
                    48:bc:24:1b:19:ab:6e:10:fd:62:c5:1f:58:32:82:
                    5a:a0:a0:26:50:81:4a:9d:2e:21:54:e6:c0:44:86:
                    36:42:40:51:67:89:77:14:e0:7a:36:7a:cb:f8:2d:
                    50:02:3a:2f:e8:22:7f:5f:f3:d1:a1:56:4f:a6:f9:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:09:B5:13:9D:49:18:04:39:82:C8:C2:E3:A9:07:E6:F7:DC:24
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G3gJtROdSRgEOYLIwuOpB-b33CQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:dd:e9:24:04:11:24:77:e5:a8:84:3e:23:4a:cd:5b:e8:9c:
         ce:6e:51:ed:9c:4b:dd:3c:1d:d7:1b:e3:14:dd:4e:6e:ee:14:
         7b:d7:86:a5:61:a7:17:9a:24:fe:ba:8a:d1:c0:f7:7a:0b:06:
         f7:93:c6:6c:04:8b:7f:17:5e:26:8a:f5:8c:f4:60:ba:7a:f7:
         9b:93:8c:61:22:f7:e4:2c:cf:a1:c1:1d:0a:69:2a:ca:7c:2c:
         08:6c:4d:dd:92:a3:33:f9:20:5b:b7:13:ea:e0:e5:77:97:02:
         b9:7d:ec:28:b7:bd:5d:f5:ee:92:8c:00:a5:9c:6c:24:89:9b:
         2b:07:ab:0c:58:8f:1c:ef:4b:82:52:3e:6d:4e:cf:dc:44:3d:
         28:86:be:ba:a4:a8:d0:25:4c:26:3c:63:01:e2:00:07:6d:b4:
         e4:62:29:d1:91:76:85:42:16:9d:9d:c7:85:e0:b4:ee:14:fb:
         d8:55:04:69:3e:97:5a:04:40:7b:15:be:48:d3:f7:9e:79:3c:
         fb:2d:ca:41:71:6f:96:27:1d:59:4a:69:a5:9c:60:27:12:1f:
         55:9a:5f:ae:f5:14:71:62:1f:1b:9f:ee:b4:73:87:62:fc:06:
         64:73:af:9f:c4:5b:6c:10:ea:73:65:25:7a:0c:26:a4:17:53:
         e3:d3:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:54 2025 by rpki-client