Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa
File:                     PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa (raw, json)
Hash identifier:          MXKmPBGTejsyCq91YnsAMgO5ROtpw1+QT6ZWE66VAPw=
Subject key identifier:   3D:8B:26:85:F9:C3:2C:09:B4:7E:F1:69:BC:2F:6F:F2:F0:6A:11:FA
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       37
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa
Signing time:             Fri 01 Aug 2025 01:32:10 +0000
ROA not before:           Fri 01 Aug 2025 01:32:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2519
IP address blocks:        219.121.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug  1 01:32:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=3D8B2685F9C32C09B47EF169BC2F6FF2F06A11FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:80:ae:11:23:fa:e3:50:18:5e:c2:27:1b:
                    5a:69:77:0a:21:5a:98:24:3f:66:1c:e1:1a:6e:95:
                    c5:40:2f:00:f6:1a:77:75:8a:0b:66:23:9e:1f:b7:
                    19:12:0f:cc:54:a7:27:83:10:5e:a3:b0:64:81:6a:
                    c4:08:54:45:bc:a8:17:c7:52:64:25:cc:36:9b:bf:
                    ad:d3:95:6d:4b:fc:aa:7e:03:b8:90:74:4d:03:45:
                    35:96:bf:e6:ba:61:c6:fd:72:0a:db:ea:c2:e6:a4:
                    19:b5:ff:a1:97:c9:39:3f:d8:20:b1:31:c8:8b:6a:
                    57:c9:71:4c:3a:c4:4a:13:a8:91:4c:5e:78:c2:6f:
                    1c:e4:0c:c4:29:cb:35:fc:b4:ea:a7:61:74:f7:f6:
                    2f:da:11:d7:a5:e1:15:da:84:32:c4:9d:74:ad:76:
                    8c:6e:96:a8:93:fa:00:e7:53:ee:fe:7e:e8:6a:23:
                    dc:18:5b:0d:c1:38:e9:ab:d7:7f:f7:e2:72:44:dc:
                    8b:c2:23:ee:7a:c5:b3:4e:32:b7:f2:12:b1:37:92:
                    32:ee:5b:fc:5a:a9:52:62:7f:27:58:9d:33:f8:4d:
                    a8:26:de:e1:6c:28:ae:3d:df:27:dd:de:b4:10:d4:
                    42:0f:0f:d6:b5:4f:cd:79:f2:20:06:80:ac:58:cd:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:26:85:F9:C3:2C:09:B4:7E:F1:69:BC:2F:6F:F2:F0:6A:11:FA
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:30:2a:fa:0d:50:51:5e:dd:b9:3e:d8:9c:22:2c:56:c3:7b:
         a0:ab:a8:6e:66:97:40:bc:a8:ba:31:9c:92:0d:8e:5d:9d:0f:
         f8:16:35:91:fb:9a:a2:18:e0:d3:45:53:31:7a:90:c0:3a:6a:
         37:2e:1a:0a:24:4a:5a:64:f1:c0:95:90:89:03:34:fb:6f:d9:
         d6:b3:9b:59:08:a5:37:b2:ff:85:38:63:29:e4:11:3d:25:ef:
         6d:8d:32:4f:4d:3f:e8:b5:fc:da:83:d0:f7:60:d2:f4:06:79:
         92:f2:37:20:8d:33:c1:0b:22:07:4b:9f:3e:29:76:42:e9:e5:
         09:79:6e:8a:57:f3:ad:e9:0d:f2:66:66:e3:57:41:72:ca:d9:
         6c:77:28:41:d5:f9:55:66:14:fa:a6:03:d9:45:98:a5:0b:05:
         c1:21:d1:ca:5d:b8:55:94:d1:60:97:a2:74:2b:22:df:ce:77:
         2e:a2:ae:a1:5d:3b:12:e4:ea:71:d0:d7:a8:50:6b:3b:52:da:
         bd:2a:4f:a3:00:67:22:c5:1c:f2:bd:bf:e3:40:54:9b:ef:82:
         1f:c1:2e:0a:72:3d:4d:32:cc:2d:66:47:0d:7d:0c:55:24:34:
         d2:1f:0b:df:41:9c:26:f7:29:0d:94:67:8b:6d:1f:12:39:61:
         4b:89:8d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:46 2025 by rpki-client