Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/H471lGMJgutMMeT-IQlO30UTisw.roa
File:                     H471lGMJgutMMeT-IQlO30UTisw.roa (raw, json)
Hash identifier:          A8L+FSKCkledyRatUB/SyvklM/ms9GoizEUfNQ/oOew=
Subject key identifier:   1F:8E:F5:94:63:09:82:EB:4C:31:E4:FE:21:09:4E:DF:45:13:8A:CC
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01E9
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/H471lGMJgutMMeT-IQlO30UTisw.roa
Signing time:             Fri 01 Aug 2025 01:33:44 +0000
ROA not before:           Fri 01 Aug 2025 01:33:44 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2497
IP address blocks:        133.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug  1 01:33:44 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1F8EF594630982EB4C31E4FE21094EDF45138ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:c6:6b:6d:b2:a7:c9:8c:29:be:fd:ed:37:
                    e3:d1:29:8d:4d:75:fd:84:93:6e:4e:df:19:82:94:
                    03:39:5b:bb:66:bb:b0:24:d3:d1:17:20:0b:74:1a:
                    34:97:fe:a8:f6:ac:30:03:3e:76:07:ab:13:05:52:
                    f4:51:1d:a1:31:a0:a3:69:6f:07:9b:58:60:f6:58:
                    de:44:d6:24:99:97:7a:dc:7b:90:fd:9c:89:e4:2b:
                    27:55:a8:2f:bb:bc:2a:43:f9:a8:66:86:0e:a8:f7:
                    1c:90:c5:5f:03:0a:60:94:de:95:b0:c4:a6:67:07:
                    bf:14:e7:bf:23:7f:e4:da:58:29:31:03:12:ef:d1:
                    c4:6a:a8:a8:c8:9d:e0:ee:c9:e6:80:b3:b1:2c:33:
                    42:6b:85:37:04:94:cb:66:6e:36:54:44:d7:56:18:
                    23:ea:76:69:da:14:52:79:aa:33:9a:06:3d:0a:35:
                    be:91:ae:53:10:53:cd:e4:b3:ac:92:3c:b4:f5:f1:
                    5c:fd:19:bc:0b:de:b9:00:69:7e:97:46:d0:9e:e0:
                    83:fa:da:17:d0:eb:d2:95:96:24:8e:c6:62:7a:a5:
                    28:b2:4c:85:bd:c6:37:99:74:ca:24:c1:2f:fd:01:
                    9e:89:ff:5f:6d:b8:45:2e:d5:ac:c8:c6:b8:be:79:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8E:F5:94:63:09:82:EB:4C:31:E4:FE:21:09:4E:DF:45:13:8A:CC
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/H471lGMJgutMMeT-IQlO30UTisw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:da:7a:29:39:30:0e:53:ca:22:88:5c:f9:f8:98:f1:1c:04:
         4a:b4:c6:8a:72:29:50:59:5b:e0:2a:d0:62:8e:d7:f8:41:9f:
         8a:22:a8:81:f0:e8:77:3e:1f:ed:c9:70:bb:36:99:98:af:fd:
         28:6c:52:f7:f3:0a:f9:3b:c5:45:59:36:f8:19:ab:b4:7b:f9:
         f6:0b:fd:47:9c:49:65:d5:ff:a7:fa:c5:0d:92:92:c0:a9:1c:
         ac:9e:3f:67:49:93:74:43:d4:16:f0:98:4c:3e:e8:b8:df:f5:
         76:17:1e:63:0b:ff:d5:23:d5:6f:06:17:21:2b:d9:55:f3:8d:
         e2:bb:00:ed:8c:64:95:a2:34:b3:e1:22:1e:aa:ce:6d:bf:cd:
         7f:85:8d:5b:02:cb:d1:f8:b2:8f:76:c4:47:16:06:d4:f6:d0:
         7b:c7:2d:ce:35:ce:db:11:07:f1:c1:d9:bb:31:41:8e:92:e5:
         f2:e1:7f:23:b7:85:e7:ae:5e:e9:f2:a4:9b:bd:c9:4f:b0:b4:
         86:6b:fc:98:3a:c5:be:7b:b5:4e:c4:2f:56:2c:34:a0:ee:ff:
         7d:24:9f:91:ae:dc:df:02:b1:60:8b:5d:1a:74:46:c4:44:d6:
         4f:13:b2:85:4c:9c:2d:46:91:4a:f3:5c:56:f2:cd:24:85:21:
         39:e0:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:39:23 2025 by rpki-client