Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UFiM8cUE9BV_Mcno90HXacfAskg.roa
File:                     UFiM8cUE9BV_Mcno90HXacfAskg.roa (raw, json)
Hash identifier:          e/ZXEOMnlfxHOtMWCVDwU1NQAkGlrrIH4mqHJ5RV1cM=
Subject key identifier:   50:58:8C:F1:C5:04:F4:15:7F:31:C9:E8:F7:41:D7:69:C7:C0:B2:48
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C8
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UFiM8cUE9BV_Mcno90HXacfAskg.roa
Signing time:             Fri 01 Aug 2025 01:37:55 +0000
ROA not before:           Fri 01 Aug 2025 01:37:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        220.147.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=50588CF1C504F4157F31C9E8F741D769C7C0B248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:40:85:7a:ed:39:ca:cf:d6:99:e2:bb:36:
                    40:a9:40:67:12:1c:ca:2e:ae:9b:63:fa:91:c0:11:
                    d0:94:d4:1a:d1:cf:45:53:12:d4:11:6f:52:84:c8:
                    5c:07:6a:21:e9:bb:ef:c0:1c:af:15:57:54:36:c5:
                    c5:65:bd:05:da:7e:cb:4e:4f:2f:d7:6e:90:ae:55:
                    57:5a:60:ce:26:b4:5b:64:f3:cb:eb:a7:42:ae:3e:
                    59:f0:8b:86:b2:63:8a:1a:cf:89:5c:99:ec:07:03:
                    b7:20:7e:42:96:45:b0:f4:0d:88:89:c9:9d:4c:94:
                    97:e1:e6:04:e1:c7:44:bf:7f:08:25:d1:0c:55:2c:
                    fd:ae:b2:a1:57:44:04:ed:d3:a6:c6:a6:e5:f8:05:
                    0e:08:03:b7:b1:2f:69:59:ac:38:9e:1c:3e:62:8e:
                    af:09:4b:21:d8:4d:40:bd:78:3c:25:d8:ba:c7:a8:
                    1c:85:10:85:e5:5e:cf:c6:d2:17:18:fd:27:d8:08:
                    c2:6e:73:c7:85:72:9c:b5:1c:07:c8:42:b2:17:01:
                    e5:96:47:2c:88:b9:24:ba:d9:59:58:b7:61:cc:1a:
                    10:13:d6:cc:6e:07:84:19:fc:02:d9:15:63:c6:20:
                    e2:bf:69:75:5c:36:c8:61:d7:a3:c3:50:14:7b:b9:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:8C:F1:C5:04:F4:15:7F:31:C9:E8:F7:41:D7:69:C7:C0:B2:48
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UFiM8cUE9BV_Mcno90HXacfAskg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.147.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:14:26:24:ff:39:64:f8:4d:bc:ff:88:f8:e9:90:d6:38:
         5e:cd:63:0e:c8:27:a1:ba:59:42:2e:29:d5:97:7b:76:24:bb:
         86:cf:39:5d:d1:f3:6f:4d:ce:ac:9b:1f:d7:0e:ca:bd:b3:b9:
         77:51:49:b7:a5:a4:78:19:84:9f:48:2f:d8:55:ec:2b:fa:bd:
         fa:ae:e6:b6:98:c8:a1:5d:5c:d4:bd:99:2a:bc:df:9d:52:7d:
         25:ee:44:1f:28:70:3e:5e:e3:d4:7b:3d:83:3c:71:3f:34:34:
         dc:ae:d3:e0:49:62:67:f6:0f:71:f0:66:7b:e8:c1:22:d3:ba:
         22:48:91:c6:d2:ee:e4:30:97:39:75:d6:ff:f8:c8:d2:65:4c:
         97:69:d6:29:a1:d8:e9:8b:78:49:b6:fa:05:e7:39:56:f1:be:
         e9:84:93:46:9c:97:be:5a:51:a5:b7:68:5b:45:7a:77:70:ee:
         67:68:ed:a6:6e:0a:28:00:89:d4:b2:89:22:56:91:e5:d4:20:
         36:5a:e4:76:ad:af:86:f7:68:2f:7c:7c:d8:81:36:b3:d9:22:
         16:19:df:b5:97:a3:0b:e6:0f:ee:b7:14:58:31:b8:2d:f0:45:
         f8:18:96:9c:f1:8e:e5:60:4b:97:08:16:16:e6:61:29:66:1a:
         47:2f:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:59 2025 by rpki-client