Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
File:                     -uDJ_7X3sOgsShwKMsXp-n9MNzc.roa (raw, json)
Hash identifier:          uKqa1tNWBWutiQczWVJcYXa+TrCXVZemLFBSU5Jx+mY=
Subject key identifier:   FA:E0:C9:FF:B5:F7:B0:E8:2C:4A:1C:0A:32:C5:E9:FA:7F:4C:37:37
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       05B2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
Signing time:             Fri 01 Aug 2025 01:33:06 +0000
ROA not before:           Fri 01 Aug 2025 01:33:06 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10010
IP address blocks:        133.186.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Aug  1 01:33:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FAE0C9FFB5F7B0E82C4A1C0A32C5E9FA7F4C3737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:d5:5f:13:14:f4:ca:25:9e:07:0b:28:a9:
                    92:b4:81:20:cb:84:67:18:ea:ba:8f:a6:f9:b6:c0:
                    60:4c:bd:ab:61:4f:a3:24:29:6e:57:43:11:3d:21:
                    49:cd:d5:22:27:1b:15:ff:4d:56:6f:9a:50:e8:03:
                    77:95:61:b3:9e:e2:ca:e6:44:3c:3e:60:51:55:ff:
                    01:5a:80:10:1e:3f:7c:d6:0f:76:b6:e5:b4:35:4f:
                    8d:5b:08:28:86:db:ff:41:d4:94:0a:1c:84:8d:6c:
                    db:46:a8:6a:82:bd:98:b2:c9:5d:d3:18:ff:12:01:
                    e4:23:2a:cf:20:9f:d2:67:55:4f:74:b3:0e:79:14:
                    cf:cc:ef:c3:10:ca:f0:05:31:4f:9d:9f:53:a5:8c:
                    8e:80:03:dc:0c:d5:66:26:fe:53:f0:2f:99:42:f5:
                    de:18:7d:42:78:e1:21:48:8b:5e:43:2d:72:d8:33:
                    77:7d:ae:10:03:f4:7f:ad:2f:e0:69:dd:64:c1:d7:
                    f0:08:cb:32:70:07:41:ae:91:f5:2b:8d:f1:b8:ab:
                    fc:61:90:48:d3:8d:c6:d4:94:13:83:73:df:23:bd:
                    68:66:43:d7:c5:fb:a7:11:c6:c1:ef:49:1f:5f:ce:
                    2f:0a:2e:51:a4:b6:55:5e:c7:31:ad:a8:ee:66:73:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E0:C9:FF:B5:F7:B0:E8:2C:4A:1C:0A:32:C5:E9:FA:7F:4C:37:37
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-uDJ_7X3sOgsShwKMsXp-n9MNzc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:ac:be:a7:51:2f:0f:29:a2:73:68:c4:cc:df:3c:9a:da:
         f8:76:a1:ff:5e:89:5e:d2:e3:51:71:98:d6:36:b8:18:b7:51:
         d3:dd:f4:38:d0:b8:53:1e:81:b0:2c:fc:3c:67:9b:d1:87:3b:
         bb:11:af:95:09:81:27:98:0a:98:85:a6:35:df:a7:d3:83:4a:
         9a:62:f8:9f:57:32:77:4b:53:93:bf:20:3f:81:1e:a2:0c:80:
         cb:59:5a:53:dd:08:2e:1a:a2:05:7c:3f:be:ed:44:bd:21:62:
         7a:61:77:cb:60:f1:62:1b:d3:97:ec:3d:11:90:a7:e8:bb:66:
         da:9c:41:02:75:93:81:a1:14:f4:ea:09:db:79:ec:69:cc:f8:
         31:b6:13:aa:92:94:38:8b:85:3b:39:fb:65:24:6c:d7:a3:aa:
         db:23:5c:1b:28:b2:2e:8d:ba:0b:bf:8b:64:8f:a3:4a:2e:97:
         37:45:c9:61:e9:36:03:f3:27:c2:41:33:7f:fe:f5:1a:78:87:
         52:d2:02:38:78:48:16:4c:1f:30:2e:91:d1:94:1c:48:8c:a2:
         8b:0d:35:42:28:e8:b2:ad:a2:ac:1e:74:54:47:10:55:8f:ef:
         23:96:9d:cf:1e:99:92:ee:fc:74:db:5c:eb:1d:a2:94:16:19:
         08:a0:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:41:06 2025 by rpki-client