Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
File:                     GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa (raw, json)
Hash identifier:          vv0rNyucCA/o0J0JXnvPS3K++WEDxkLh5pdw+XUvHUY=
Subject key identifier:   18:4D:26:79:04:49:2E:63:8E:FD:CE:5F:D7:73:2C:E8:77:57:35:D4
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       33
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
Signing time:             Fri 01 Aug 2025 01:32:07 +0000
ROA not before:           Fri 01 Aug 2025 01:32:07 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18121
IP address blocks:        202.222.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug  1 01:32:07 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=184D267904492E638EFDCE5FD7732CE8775735D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:63:70:8f:59:99:85:7b:6a:14:5f:be:14:ae:
                    17:f7:29:ff:d3:79:31:3e:0b:89:94:ae:dd:e3:e9:
                    d5:b0:95:4b:22:40:01:91:f0:0a:fb:27:81:75:55:
                    eb:b9:f7:85:6f:07:27:4d:9a:e2:c4:6d:ee:83:1a:
                    88:c6:d0:63:5b:06:8a:49:fb:67:8b:94:64:09:0a:
                    83:b1:b3:25:b7:c9:27:3d:4e:c3:cf:94:6e:80:c9:
                    d6:27:6a:d0:c6:5c:da:ad:0a:cb:92:d8:d1:fc:1e:
                    c6:44:83:79:51:d4:ac:ab:74:48:6e:ff:e8:05:2b:
                    01:ae:c8:f3:91:9a:09:b5:f1:e4:9e:6b:c5:0c:1e:
                    77:da:d5:9c:9e:0b:69:dd:61:eb:1f:94:62:b4:11:
                    4b:98:3a:8d:db:c0:f5:97:db:10:1f:f3:ce:09:70:
                    7a:3c:31:0c:19:91:95:d6:c8:b9:d5:3e:7b:a6:ad:
                    76:07:91:71:b3:7f:70:80:7e:57:f1:e1:c0:65:5b:
                    f2:99:e3:94:a8:1f:ff:ed:4e:d3:bb:89:3b:20:11:
                    ed:a9:f4:0c:67:7c:15:69:7d:6a:76:e8:43:4f:f1:
                    df:6d:3b:bb:c2:41:dc:0c:db:8b:90:8f:8d:0d:db:
                    62:f9:a4:f9:b7:7d:96:e8:4b:d9:da:a3:ce:98:44:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:26:79:04:49:2E:63:8E:FD:CE:5F:D7:73:2C:E8:77:57:35:D4
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:56:da:8f:af:39:61:2b:68:6e:b0:b2:bc:d6:f7:51:61:f3:
         00:2c:65:2c:09:79:c8:11:17:62:fa:f5:32:e1:00:91:b5:43:
         d1:4c:b3:35:df:39:16:c5:ab:36:ec:b5:3e:08:e0:f9:86:e8:
         d2:97:ac:52:21:f5:04:2d:b0:f4:c7:27:bf:21:a7:32:a9:c8:
         f3:2f:ee:b0:bb:50:9f:89:8b:fd:0b:b8:e3:2d:65:6a:4a:b1:
         56:9c:3b:bc:86:90:23:99:62:d3:83:5f:f4:16:85:25:ab:20:
         10:3d:0a:a5:90:18:ef:9d:01:5c:20:a2:0a:1b:55:a2:bb:a5:
         44:28:9b:a6:bc:f3:bd:89:8a:36:03:7d:84:81:17:26:cb:27:
         c5:72:ae:e5:e0:08:b0:75:0c:eb:ba:c1:54:2c:73:85:8e:9c:
         82:46:61:05:45:d7:7e:94:a2:99:b9:f0:b0:19:a3:4f:aa:82:
         fb:db:1d:12:0e:d6:88:a3:74:c6:70:df:8d:3b:16:8c:9b:1d:
         48:c5:45:a1:a1:b5:3e:52:61:c0:8c:35:62:8a:b8:4f:15:90:
         48:7a:78:87:b4:14:28:b0:8d:7b:75:b2:96:4f:a3:2c:79:d2:
         bf:8f:ef:d2:f8:50:6f:39:48:1d:4b:e5:dd:65:e9:2b:89:5a:
         30:41:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:58:06 2025 by rpki-client