Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/jQ5Z_W0IB5UjowCpR83LGzRgHc0.roa
File:                     jQ5Z_W0IB5UjowCpR83LGzRgHc0.roa (raw, json)
Hash identifier:          p4KsrYi2tfoBPahBre3Dx5q7lT+CjBuUWI+1762YPjY=
Subject key identifier:   8D:0E:59:FD:6D:08:07:95:23:A3:00:A9:47:CD:CB:1B:34:60:1D:CD
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C3
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jQ5Z_W0IB5UjowCpR83LGzRgHc0.roa
Signing time:             Fri 01 Aug 2025 01:37:52 +0000
ROA not before:           Fri 01 Aug 2025 01:37:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        203.189.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8D0E59FD6D08079523A300A947CDCB1B34601DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:79:29:11:87:c6:69:88:22:fa:19:3f:02:
                    8e:99:3a:52:ad:c2:a4:30:c3:7c:da:5f:e0:6d:71:
                    ee:cd:7b:46:7d:bb:83:0f:d3:82:05:fe:4a:82:ac:
                    52:44:6c:92:00:a3:77:1c:aa:da:87:da:92:f2:84:
                    c3:0c:7b:89:91:6f:5e:20:4f:e3:99:2a:0a:a2:28:
                    9e:bc:bb:9f:d0:70:c7:63:7b:d0:fc:be:15:0d:bc:
                    75:40:44:16:85:9a:a1:25:4e:be:f8:f9:5a:b8:a9:
                    9c:ee:41:79:78:25:ef:04:d8:e9:cf:cf:fe:db:52:
                    08:5c:f2:be:3d:a8:55:98:dd:dd:d7:a2:28:f4:08:
                    e4:42:d5:db:c8:15:e7:d8:75:be:22:44:82:05:00:
                    62:de:5b:37:39:b4:63:25:e0:15:ce:50:ab:01:5a:
                    27:d8:8a:88:be:f2:0a:86:7d:2a:10:54:13:cd:bb:
                    43:ae:15:d1:64:8e:33:11:ed:8c:bc:cf:95:1d:94:
                    05:f9:5a:6b:dd:c2:49:0f:35:22:6c:02:01:25:b5:
                    cc:ac:27:b9:e7:49:06:ab:fa:d0:8a:a6:57:24:0c:
                    4d:03:b4:1f:80:c4:51:67:18:d8:2d:0e:cf:15:24:
                    5d:df:74:3d:f7:bb:af:30:1d:5e:e8:85:32:6c:d5:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:59:FD:6D:08:07:95:23:A3:00:A9:47:CD:CB:1B:34:60:1D:CD
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jQ5Z_W0IB5UjowCpR83LGzRgHc0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.189.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:d6:ed:c7:81:b6:40:41:2f:a9:ff:55:8f:c8:d4:1e:90:
         0f:ff:f8:e6:61:21:45:38:62:49:16:69:b9:6f:01:3e:e7:87:
         c7:02:b3:d8:90:aa:2f:72:4a:9d:10:ad:41:b4:c6:84:85:17:
         00:4a:ee:49:01:31:eb:00:6b:92:50:3b:c0:67:1d:f1:e1:4d:
         68:bf:9c:6e:38:8f:52:e4:06:f7:2f:8f:0b:db:76:8b:e8:dc:
         0e:d8:45:11:56:b2:db:46:4f:e8:06:e9:20:4f:68:0f:40:b4:
         de:63:30:d1:0f:16:f0:25:75:51:b9:ef:5c:34:3e:d9:2f:32:
         3e:5b:3e:c0:17:4c:49:17:ba:9d:a8:d6:4b:84:47:0b:24:23:
         91:42:b5:db:00:41:75:30:60:ad:ba:07:0d:2e:39:0e:38:93:
         c2:91:1a:a1:f6:6f:2f:42:46:13:fc:35:37:03:1b:7f:6f:4f:
         41:a0:ea:d7:f6:1d:27:45:b8:71:7d:d2:37:1c:ee:ef:d9:78:
         8e:86:cf:85:3b:26:3a:14:8e:70:40:a3:60:5d:85:c8:7e:53:
         7d:f1:dd:d2:21:3e:96:ac:dc:51:d0:8f:d3:20:d2:2e:59:dd:
         52:43:d0:2c:9d:a7:36:5c:08:28:8c:e2:48:f3:4d:01:66:94:
         44:eb:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:47 2025 by rpki-client