Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/fgTM1QMAiUo86Vvqsg9sSw6nDyk.roa
File:                     fgTM1QMAiUo86Vvqsg9sSw6nDyk.roa (raw, json)
Hash identifier:          +bslxmeoMfNwLWFLn8UFBEZh8iYu0Q6Hd1e8Z91du/A=
Subject key identifier:   7E:04:CC:D5:03:00:89:4A:3C:E9:5B:EA:B2:0F:6C:4B:0E:A7:0F:29
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       AD
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fgTM1QMAiUo86Vvqsg9sSw6nDyk.roa
Signing time:             Fri 01 Aug 2025 01:31:38 +0000
ROA not before:           Fri 01 Aug 2025 01:31:38 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        218.45.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:38 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7E04CCD50300894A3CE95BEAB20F6C4B0EA70F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:44:86:da:c3:c6:85:63:c0:e2:71:97:47:
                    b2:fa:bb:6f:a6:7b:ec:76:2c:cd:f7:67:59:37:c0:
                    9c:fb:67:66:b7:c3:28:08:88:02:f3:f3:8b:c9:49:
                    0f:4e:82:b3:93:b1:a2:8a:51:d6:67:74:f0:36:66:
                    64:b4:08:20:0c:7f:dc:9d:bd:9c:43:96:c9:50:ea:
                    bf:f6:26:cd:35:75:15:e5:19:ad:46:7a:0e:b6:5c:
                    cf:6f:e8:31:06:ca:48:20:da:1f:5d:8c:99:1f:46:
                    be:a1:8d:d7:c1:cc:e7:b0:8d:78:ca:e8:8a:a2:bc:
                    49:63:cf:42:b9:c0:97:2b:11:4e:3a:30:70:b7:8e:
                    fd:1a:df:29:df:db:8e:0e:b2:64:10:63:8f:bf:6f:
                    ca:f7:81:c1:6e:39:6b:11:9f:6c:95:27:0f:a5:ee:
                    b1:5a:a8:4b:ff:13:d4:c8:2e:5d:88:c0:59:d6:86:
                    90:17:90:df:3c:ce:ca:63:3b:f5:2d:ad:7f:a6:a2:
                    b4:63:49:d8:3c:06:e1:43:b6:00:bb:6a:62:52:a8:
                    3b:19:81:a7:8a:d5:b3:1b:ee:49:07:39:4e:ac:13:
                    5e:52:59:e5:46:b5:58:c6:86:9e:31:b7:c4:b4:0e:
                    5b:22:b6:3e:73:0f:e3:ec:ba:bd:c3:6d:34:c6:13:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:CC:D5:03:00:89:4A:3C:E9:5B:EA:B2:0F:6C:4B:0E:A7:0F:29
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fgTM1QMAiUo86Vvqsg9sSw6nDyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:cd:2f:38:0c:3a:f4:90:14:a0:51:f1:77:03:6b:16:69:
         e9:a7:97:21:b7:ac:63:c6:b3:70:47:8d:c9:85:a0:89:f4:a3:
         8e:6b:ef:fe:dd:69:35:de:4f:76:7e:64:3d:3d:48:09:7a:a5:
         44:b8:e8:fc:0f:06:f8:50:f6:80:a9:c3:25:1c:33:bf:86:a0:
         15:be:ab:52:cf:94:d7:41:79:88:a0:24:77:3e:92:4b:73:25:
         82:46:15:86:75:68:59:1b:04:d8:74:ef:d3:fa:93:46:e7:66:
         d3:c4:67:4c:b6:07:a6:1f:9f:1b:b2:d3:89:92:1f:16:35:5a:
         c2:c0:9e:46:b3:33:b6:ba:1d:b9:45:9e:32:f1:f9:35:7f:27:
         78:84:97:f6:df:34:53:84:3c:f1:fb:67:e7:79:0a:df:4d:a0:
         a4:20:1d:7d:eb:74:f8:da:ba:79:78:97:c2:5c:cd:47:d1:ee:
         93:02:11:f7:5c:f6:e5:4f:ff:4d:ba:7a:97:61:81:46:bd:c1:
         76:b1:c4:fd:ee:b7:d1:35:bd:a1:22:6a:8f:40:01:fc:c7:d7:
         c6:5c:19:38:ab:e5:7b:4b:6f:92:90:49:64:a0:63:6a:2f:e4:
         29:aa:be:e4:50:d1:15:3f:73:e7:57:da:32:a8:6f:6a:36:72:
         ad:22:4d:ef
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw
MTMxMzhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDdFMDRDQ0Q1MDMwMDg5
NEEzQ0U5NUJFQUIyMEY2QzRCMEVBNzBGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMskSG2sPGhWPA4nGXR7L6u2+me+x2LM33Z1k3wJz7Z2a3wygI
iALz84vJSQ9OgrOTsaKKUdZndPA2ZmS0CCAMf9ydvZxDlslQ6r/2Js01dRXlGa1G
eg62XM9v6DEGykgg2h9djJkfRr6hjdfBzOewjXjK6IqivEljz0K5wJcrEU46MHC3
jv0a3ynf244OsmQQY4+/b8r3gcFuOWsRn2yVJw+l7rFaqEv/E9TILl2IwFnWhpAX
kN88zspjO/UtrX+morRjSdg8BuFDtgC7amJSqDsZgaeK1bMb7kkHOU6sE15SWeVG
tVjGhp4xt8S0Dlsitj5zD+Psur3DbTTGE1BjAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUfgTM1QMAiUo86Vvqsg9sSw6nDykwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9mZ1RNMVFNQWlVbzg2VnZxc2c5c1N3Nm5EeWsucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQF2i2gMA0GCSqGSIb3DQEBCwUAA4IBAQCXbM0vOAw69JAUoFHxdwNrFmnpp5ch
t6xjxrNwR43JhaCJ9KOOa+/+3Wk13k92fmQ9PUgJeqVEuOj8Dwb4UPaAqcMlHDO/
hqAVvqtSz5TXQXmIoCR3PpJLcyWCRhWGdWhZGwTYdO/T+pNG52bTxGdMtgemH58b
stOJkh8WNVrCwJ5GszO2uh25RZ4y8fk1fyd4hJf23zRThDzx+2fneQrfTaCkIB19
63T42rp5eJfCXM1H0e6TAhH3XPblT/9NunqXYYFGvcF2scT97rfRNb2hImqPQAH8
x9fGXBk4q+V7S2+SkElkoGNqL+Qpqr7kUNEVP3PnV9oyqG9qNnKtIk3v
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:04 2025 by rpki-client