Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/NZX9N9-VxSCnGPzBFDYRQc7f0Hk.roa
File:                     NZX9N9-VxSCnGPzBFDYRQc7f0Hk.roa (raw, json)
Hash identifier:          ODdyaQuqqcg4KbwNbk0FNyIqDo/XALfc2cuN2g6tGQA=
Subject key identifier:   35:95:FD:37:DF:95:C5:20:A7:18:FC:C1:14:36:11:41:CE:DF:D0:79
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       B0
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/NZX9N9-VxSCnGPzBFDYRQc7f0Hk.roa
Signing time:             Fri 01 Aug 2025 01:31:39 +0000
ROA not before:           Fri 01 Aug 2025 01:31:39 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        61.87.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:39 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=3595FD37DF95C520A718FCC114361141CEDFD079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:7d:9e:d9:8a:b4:b8:f6:ac:1f:b0:38:ce:
                    27:79:51:d0:fa:94:4d:ca:67:3c:32:ae:31:52:06:
                    3b:67:d6:7c:6e:be:45:6e:db:f3:f0:81:58:22:22:
                    6d:20:30:95:39:ac:7e:a3:c5:e0:8c:99:8b:6e:1e:
                    91:f3:9f:de:77:dc:1f:d4:91:8c:67:78:79:64:67:
                    72:7b:fd:9e:ca:ca:a4:79:ee:c3:fa:13:f5:9f:ee:
                    7c:bd:e1:0a:c4:7f:16:81:a1:37:24:21:29:d5:a3:
                    d5:e4:6f:be:3c:85:41:0a:69:75:27:a5:24:5e:e5:
                    e9:bc:66:49:41:6f:f6:9f:35:02:ae:99:b6:31:63:
                    45:21:df:cc:b3:d1:b1:1c:86:66:a1:59:a8:c5:6c:
                    6c:e8:14:75:26:57:e0:48:5c:39:f3:a0:bf:c4:4b:
                    01:7b:17:36:f9:d4:bc:9a:3b:b1:ac:bf:fc:2c:9e:
                    58:cf:67:69:84:49:95:e3:bd:09:c9:93:69:8a:17:
                    0c:e7:7d:46:db:81:32:e1:ed:97:bd:55:f4:e2:ef:
                    b3:c3:04:d8:a7:df:9f:c7:f5:1d:0e:30:7d:6c:c1:
                    35:34:52:a0:ca:75:eb:3b:6e:6b:87:11:42:47:ad:
                    76:73:c2:2a:af:e9:9b:b9:60:de:aa:ad:8e:8e:70:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:FD:37:DF:95:C5:20:A7:18:FC:C1:14:36:11:41:CE:DF:D0:79
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/NZX9N9-VxSCnGPzBFDYRQc7f0Hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:e4:1a:e8:13:e5:42:d9:34:20:d9:09:60:51:6e:7b:d5:27:
         19:74:c5:eb:19:34:39:f9:af:af:cb:5c:1c:52:0a:18:9d:11:
         8d:d4:5b:d9:4c:71:22:05:91:6c:9b:fb:6b:fe:f2:5a:64:85:
         45:9a:96:63:83:a6:81:7c:07:62:6f:9c:de:2e:18:ca:58:4b:
         a0:98:ec:8b:f8:0f:e1:35:3d:82:13:62:bc:07:5b:6b:3c:d7:
         67:f5:36:32:af:ed:77:26:5f:fc:c1:02:3f:c2:2e:d1:16:96:
         1f:30:82:3e:2b:f6:f9:87:b7:2d:7b:3f:75:65:9e:ad:2b:fc:
         af:cb:b2:94:54:1c:c6:c9:40:29:cf:66:9e:c3:08:bd:33:44:
         df:92:cb:9e:69:07:d9:35:ed:30:89:df:c9:3c:2a:1c:36:95:
         23:41:fa:e1:50:17:3d:81:87:38:cf:e3:74:7d:a9:60:ef:5b:
         d9:86:af:ad:b6:f6:f5:7a:b7:ac:21:49:6f:a6:37:a2:ef:f4:
         3d:c3:df:7a:b2:7a:e2:bc:42:dd:8e:4e:4c:28:b7:66:5b:a2:
         97:bf:67:3d:a4:4c:34:7b:e7:b0:36:81:04:87:4b:c2:92:6f:
         27:e0:3d:32:0f:69:3a:59:6b:83:e1:9d:c8:c7:cb:78:e7:4c:
         c1:33:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:13 2025 by rpki-client