Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/H1gp1k4mT3zJWGCiC6clHcYzOkY.roa
File:                     H1gp1k4mT3zJWGCiC6clHcYzOkY.roa (raw, json)
Hash identifier:          QunuJQTXiW8VupgMIkC0bG9RF17/i48sNfbeBzfjmuc=
Subject key identifier:   1F:58:29:D6:4E:26:4F:7C:C9:58:60:A2:0B:A7:25:1D:C6:33:3A:46
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       BC
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H1gp1k4mT3zJWGCiC6clHcYzOkY.roa
Signing time:             Fri 01 Aug 2025 01:31:48 +0000
ROA not before:           Fri 01 Aug 2025 01:31:48 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        150.9.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:48 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1F5829D64E264F7CC95860A20BA7251DC6333A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:de:68:1d:ff:98:3d:18:ce:26:a6:4f:a3:
                    bf:94:76:8a:30:63:53:90:b1:3d:25:c6:23:5a:66:
                    79:32:3d:a4:64:fb:bb:64:35:8c:a7:b9:4a:49:64:
                    e0:35:ca:66:96:1c:14:91:9f:2a:b3:89:24:5c:fc:
                    79:94:7e:7e:cb:fd:75:80:c0:90:cd:09:07:84:d1:
                    f5:ac:57:ed:ca:c3:1e:d8:25:19:31:c7:7b:db:6e:
                    5c:ae:bf:64:e8:dd:40:d8:dc:d8:eb:81:a0:36:85:
                    cb:28:56:f5:21:a1:37:a5:1e:38:6b:ce:58:82:39:
                    0f:8c:fb:70:7f:f0:48:09:47:40:51:4d:f1:05:c5:
                    5e:b9:9d:11:3c:4b:56:39:35:82:78:0f:98:e0:be:
                    be:36:0c:c5:d3:ba:b5:60:25:d8:29:c1:2f:59:b4:
                    16:a0:57:2f:6b:78:00:c4:a5:f3:99:bc:6c:01:ad:
                    04:4f:24:88:d8:68:ee:ac:3a:6b:97:37:e9:d3:48:
                    43:57:d0:98:96:fa:65:53:fe:d4:31:00:6c:e1:1f:
                    52:2d:64:41:6d:82:12:c3:e5:ff:d6:cf:3c:15:bd:
                    ba:45:4d:74:a1:18:b8:29:9e:bb:2e:59:9d:b7:9a:
                    47:4d:c9:8b:ab:f5:8a:b6:2b:36:4c:49:42:31:54:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:29:D6:4E:26:4F:7C:C9:58:60:A2:0B:A7:25:1D:C6:33:3A:46
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H1gp1k4mT3zJWGCiC6clHcYzOkY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e0:03:82:c3:0b:c1:c8:f6:94:62:6d:ea:26:5b:db:90:29:dd:
         2e:a3:a5:2f:82:e5:b9:2d:6e:87:a4:2a:f1:d3:2f:64:a2:b0:
         8c:67:2a:a2:59:11:ff:3a:80:d3:af:2b:8c:c4:4f:92:e8:3b:
         f2:e8:e6:cf:3b:cc:70:ae:6a:81:25:4d:f8:b6:7a:d1:1f:c1:
         86:a0:96:73:8b:a0:bb:73:dd:1d:ce:1b:02:43:5f:7b:8a:5e:
         53:d1:1d:58:49:22:34:dc:6f:d4:e4:c9:2c:be:da:b4:d1:ef:
         68:72:69:37:3c:7a:e8:75:fd:3d:b3:d0:35:d4:73:f3:92:55:
         bd:12:8c:7b:88:82:17:07:2e:b5:27:3a:6c:2e:44:7c:be:57:
         68:28:46:29:74:b7:d6:e9:3c:73:b3:a8:9a:56:62:ce:02:b3:
         19:08:45:dc:37:bd:a5:0b:cf:2a:ee:a3:39:b1:22:7f:a4:73:
         08:06:d0:e6:85:61:45:ea:3a:a5:07:48:1c:a7:ab:68:91:fc:
         d0:d5:7b:b8:76:c1:71:86:93:ac:73:94:58:12:df:c6:86:f3:
         64:4e:f5:45:3b:d4:bc:7e:bd:4c:bf:f4:7a:00:00:3b:5a:83:
         a3:88:71:ee:0b:dc:64:f0:43:0b:07:d6:a5:7f:50:6e:3f:62:
         f4:99:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:24 2025 by rpki-client