Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
File:                     ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa (raw, json)
Hash identifier:          v0Y8/swDgcg/j0Cmu+pmzjrNXeurnJUSx0MfNLxRMkg=
Subject key identifier:   66:79:C6:2C:80:09:70:1C:42:E8:B9:58:0C:48:7C:6C:F3:4B:58:5A
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       A8
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
Signing time:             Fri 01 Aug 2025 01:31:35 +0000
ROA not before:           Fri 01 Aug 2025 01:31:35 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        211.120.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:35 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=6679C62C8009701C42E8B9580C487C6CF34B585A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:a2:6e:23:b2:df:12:41:f5:ba:0f:ac:ea:
                    3d:0d:a8:05:07:05:ee:3a:10:37:a5:47:e9:61:f8:
                    af:1b:b8:d7:71:47:8b:7e:e3:0b:55:ce:c9:46:9b:
                    c0:14:34:85:d5:dc:2e:ea:f2:e5:df:a3:af:c6:ed:
                    fb:7b:00:0f:8a:19:02:c1:a3:56:ab:f8:99:2c:27:
                    5a:e6:a8:97:ac:28:d7:1e:2d:73:2a:39:db:6a:33:
                    e7:55:35:2c:40:6f:b2:47:03:05:00:9c:14:9a:cd:
                    52:1a:7f:52:0f:80:72:23:f7:dc:5b:c9:0a:1f:b6:
                    75:02:2a:a3:a6:46:2e:52:8e:88:56:44:c4:14:20:
                    c6:e0:6c:f6:89:10:9c:3c:06:50:cd:03:5e:bd:64:
                    ae:cb:c3:b2:18:f7:13:e5:d0:47:8a:4a:78:02:33:
                    23:37:e0:9f:f9:c7:d6:6c:e5:f4:94:c9:33:54:76:
                    a3:6f:0e:88:7e:ba:0d:0f:cb:7a:36:ad:03:70:62:
                    ba:f4:0c:6c:9a:95:0c:c4:bc:1f:d6:12:6b:93:b5:
                    d7:33:f2:e9:54:e7:e1:93:37:7d:39:c9:99:55:a5:
                    3a:5e:52:82:60:71:92:2d:19:37:f4:62:9d:81:78:
                    e1:e6:b1:d7:5e:f5:aa:86:b1:49:09:5f:f5:c3:6b:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:C6:2C:80:09:70:1C:42:E8:B9:58:0C:48:7C:6C:F3:4B:58:5A
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZnnGLIAJcBxC6LlYDEh8bPNLWFo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:a1:1a:5e:07:33:cf:9a:29:51:80:93:ca:e5:36:17:88:
         46:27:f4:c1:57:f7:0b:f6:87:39:9d:03:93:49:4d:e1:7f:fc:
         4c:1a:19:54:f2:2b:9e:d0:e3:3c:d1:d9:29:75:87:51:16:51:
         6e:3f:55:50:20:45:69:8c:ae:ef:88:05:5e:89:c7:67:20:e3:
         db:32:86:4f:a1:90:4f:6f:1e:b3:53:0d:2c:2a:16:75:17:de:
         c8:c9:c4:21:4f:15:c0:b0:c2:20:8e:ae:c6:c1:c3:0d:6e:60:
         4d:39:89:bf:c4:ed:0c:b8:63:f5:82:69:22:fd:d5:8a:86:d1:
         37:b0:d3:38:7f:cb:d8:9e:6b:b4:7c:dc:9e:10:1e:3f:06:66:
         20:c0:53:6e:03:65:91:ec:3a:21:6a:b0:19:7b:dc:e7:b2:e2:
         87:8e:bd:8f:0a:b6:f5:df:2e:bb:ad:99:94:64:57:62:88:77:
         ef:6a:1d:44:cd:cd:88:db:ad:a9:40:d9:41:c4:b7:86:ac:06:
         75:d3:bf:18:ab:98:13:87:83:d6:55:ad:65:4b:52:df:d1:4b:
         80:2a:52:5e:71:43:6c:53:28:c2:17:e9:5c:79:d5:20:b6:3c:
         71:bd:a1:3f:83:8e:c8:b9:b4:3f:69:c8:4b:21:00:13:39:d0:
         b5:7f:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:21 2025 by rpki-client