Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa
File:                     mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa (raw, json)
Hash identifier:          84Y5yVKDpBo0UXjagxi/YMbjjiJtCs93jbkhz1cFqfM=
Subject key identifier:   99:4E:AB:EE:0E:9F:4A:F7:42:67:6C:6E:2E:CC:D8:B6:E5:A5:C2:0D
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       7D
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa
Signing time:             Fri 01 Aug 2025 01:29:23 +0000
ROA not before:           Fri 01 Aug 2025 01:29:23 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18144
IP address blocks:        121.200.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug  1 01:29:23 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=994EABEE0E9F4AF742676C6E2ECCD8B6E5A5C20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:4e:cd:1d:9b:cd:02:15:e8:db:41:ed:37:
                    6c:a5:2f:ab:5f:56:74:ec:63:86:18:eb:07:bf:51:
                    9d:b2:19:df:bf:66:33:5f:c5:f4:a7:c8:ab:50:d1:
                    fe:b6:f6:18:6d:aa:67:3b:a0:8e:be:a1:f9:59:95:
                    01:7d:e1:82:31:5d:25:9f:c9:04:70:fc:6a:34:aa:
                    7b:3f:8d:6f:96:ff:fa:61:f6:f4:2a:d9:cb:05:d1:
                    45:6b:b6:ba:33:29:0e:76:06:a8:37:ba:b9:a8:74:
                    fc:b1:32:8e:93:19:52:37:81:9a:98:2f:c2:7d:ae:
                    97:55:27:57:e8:2a:27:a0:27:63:48:ed:ac:4a:2d:
                    a1:b5:66:be:24:a8:01:59:ed:59:69:e9:1b:2e:50:
                    fd:0c:12:21:a4:fd:27:da:d0:18:e8:82:bf:af:af:
                    f2:26:20:82:43:b9:06:b9:38:0f:0f:2d:e4:8f:67:
                    f9:4e:66:a9:a7:53:7e:59:7d:59:01:0f:a0:e7:cd:
                    d0:e1:5e:13:2d:79:06:a1:77:ba:e8:6c:37:83:97:
                    d5:49:87:d8:a5:81:94:22:ab:1e:c8:5e:74:b6:c9:
                    70:99:aa:32:36:5b:cb:c0:53:71:56:b3:91:3a:07:
                    e9:25:5e:71:3d:c0:cb:99:78:36:01:da:c3:f9:e7:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:AB:EE:0E:9F:4A:F7:42:67:6C:6E:2E:CC:D8:B6:E5:A5:C2:0D
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.200.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:a4:93:5d:65:32:8a:ff:be:dc:eb:95:7b:53:9c:cb:cf:
         f4:08:a9:f4:04:1c:d9:41:13:56:fd:6f:c5:85:1f:c4:f4:b5:
         27:e9:0c:c6:48:86:3e:8e:10:cc:34:6a:0b:f2:7f:2c:05:f1:
         9b:df:10:fc:e4:07:fe:aa:d1:d1:a7:f6:ed:1a:0e:23:80:50:
         ad:ff:7c:0e:fe:aa:e6:e7:2c:4b:6f:33:c6:00:fa:82:45:dd:
         dc:dc:fc:7d:76:60:74:91:64:72:77:96:3e:91:a0:07:a7:6a:
         3a:16:c2:b8:e5:8e:88:86:67:17:d2:e4:35:53:ef:a6:89:a3:
         7c:08:a2:ca:31:b7:bb:4b:83:ce:d0:c1:8d:ec:a6:87:c8:0e:
         f9:22:31:c7:97:51:c3:06:db:95:6b:3c:76:0b:9c:0a:35:d8:
         4e:57:00:ff:02:61:5f:ea:78:5d:24:c4:9c:b6:5b:c5:43:fc:
         e3:39:34:e1:10:0c:78:db:93:17:07:8e:74:5b:05:a3:1d:64:
         f1:53:f9:74:0e:1b:c3:13:08:a6:bb:7f:94:a4:19:f7:51:0e:
         84:73:93:e6:be:ff:2c:1a:33:72:a7:fa:56:59:71:9b:8c:9f:
         55:ed:1c:26:7e:9c:31:96:be:45:18:73:90:39:31:b5:ad:26:
         52:87:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:28 2025 by rpki-client