Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/hF9zu9yk4dzUiozkZ9K6w3gaj1c.roa
File:                     hF9zu9yk4dzUiozkZ9K6w3gaj1c.roa (raw, json)
Hash identifier:          uU8dT0ncqdnw7MbDjIn1W+KpMvhIIhtPKilEV55wkiY=
Subject key identifier:   84:5F:73:BB:DC:A4:E1:DC:D4:8A:8C:E4:67:D2:BA:C3:78:1A:8F:57
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       AC
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hF9zu9yk4dzUiozkZ9K6w3gaj1c.roa
Signing time:             Fri 01 Aug 2025 01:31:38 +0000
ROA not before:           Fri 01 Aug 2025 01:31:38 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        61.213.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:38 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=845F73BBDCA4E1DCD48A8CE467D2BAC3781A8F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:da:2a:98:5e:85:18:e5:f3:27:c0:fd:ce:dd:
                    78:f9:f8:06:b7:da:a8:b7:f7:d2:57:9a:13:58:c5:
                    85:37:78:46:09:04:d8:db:7f:54:d9:00:4b:89:4d:
                    21:f7:8a:0d:96:4e:e7:ca:cf:2a:b2:40:4e:d3:d0:
                    30:6f:63:78:cd:f2:8b:2e:e2:f3:48:12:37:ca:30:
                    0c:b9:4e:52:e1:9d:59:f9:58:46:de:08:19:81:34:
                    5a:4c:92:37:40:3b:c6:8d:97:79:8c:03:c5:a9:93:
                    29:89:82:c8:73:da:6d:60:0e:15:b0:a4:97:4b:1b:
                    5d:15:cf:18:34:45:cb:bd:2f:99:5f:3b:38:8c:59:
                    1a:a7:88:35:87:50:21:04:9d:d7:31:1c:85:59:a0:
                    3b:f3:c2:16:f6:0d:fc:a9:e1:87:ab:76:77:ff:02:
                    5e:84:38:2f:bc:8c:85:57:89:a1:3f:21:0c:cd:01:
                    13:2f:bc:f8:1f:0b:cb:b5:7b:6a:f2:07:02:bd:67:
                    59:28:98:5e:6d:ca:a1:0c:12:88:8b:aa:a7:e0:d6:
                    1c:2a:1e:53:c9:eb:7b:52:21:d1:f7:83:06:77:b1:
                    8a:29:85:6d:39:ad:91:d8:81:0f:ca:dd:12:1a:db:
                    74:4c:33:b4:d0:3a:8c:e5:77:2f:ea:4c:20:ec:60:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:73:BB:DC:A4:E1:DC:D4:8A:8C:E4:67:D2:BA:C3:78:1A:8F:57
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hF9zu9yk4dzUiozkZ9K6w3gaj1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:77:ee:a1:d0:ea:82:d7:ab:a1:1b:d1:23:4d:6c:75:f0:
         7c:6d:cd:8a:c6:ad:0a:e7:a7:50:83:78:8c:81:49:01:2b:31:
         2c:28:60:0f:46:48:d5:7d:49:5c:e3:41:e7:b8:fb:57:c7:92:
         76:84:c7:de:30:be:1f:a8:f1:c6:ad:9a:db:52:29:3f:4f:45:
         97:89:d7:3c:26:46:f9:1d:e5:4b:d4:33:84:cc:ba:f8:79:0f:
         88:7d:cc:ff:27:96:b0:a9:8d:5f:65:12:5f:72:c3:44:7f:10:
         84:5c:3d:f3:31:cd:48:44:f6:19:8a:fc:4c:25:29:63:d9:a1:
         2e:28:81:98:6e:75:b7:45:ab:58:ca:96:d5:5d:a3:1f:73:89:
         83:f0:7c:80:d9:26:f2:47:78:e7:b5:8f:f1:b9:c4:97:59:46:
         94:12:2c:e5:cb:10:4f:8c:d6:0e:be:0d:f7:b3:00:0e:9e:37:
         95:58:3a:e9:5b:7b:31:7e:50:5e:70:e0:09:eb:4f:33:92:8b:
         b4:7f:2f:4b:0d:07:44:41:cf:94:aa:45:5b:6e:5d:48:46:28:
         9b:5e:0e:7a:c9:9f:67:77:89:14:c2:7a:82:5a:62:55:5a:2a:
         91:30:a1:2c:b9:8c:74:2f:a0:44:0c:91:f6:7e:87:a2:0e:44:
         3c:9f:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:52 2025 by rpki-client