Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/gakL-QE1u-CG170F0ufqULiAOBw.roa
File:                     gakL-QE1u-CG170F0ufqULiAOBw.roa (raw, json)
Hash identifier:          WIL+EPwfgGZwDluEle4i5FBU7Uzpfy2zba44MjGx7Zg=
Subject key identifier:   81:A9:0B:F9:01:35:BB:E0:86:D7:BD:05:D2:E7:EA:50:B8:80:38:1C
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       46
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/gakL-QE1u-CG170F0ufqULiAOBw.roa
Signing time:             Fri 01 Aug 2025 01:30:36 +0000
ROA not before:           Fri 01 Aug 2025 01:30:36 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18274
IP address blocks:        219.122.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Aug  1 01:30:36 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=81A90BF90135BBE086D7BD05D2E7EA50B880381C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:86:74:7e:22:3e:66:ee:51:be:af:94:b1:
                    b8:ae:23:7a:0a:52:7d:99:87:f0:f6:ab:50:d5:97:
                    55:36:bf:d0:04:d3:5e:f3:34:5c:31:d0:5d:3c:ea:
                    bd:c7:82:c8:02:93:67:06:58:cd:d7:03:60:76:97:
                    2f:54:2c:3f:5c:7e:3e:63:0e:ec:22:d1:db:f3:f3:
                    79:80:9a:47:de:68:f5:1f:c0:8e:6d:23:f3:13:ef:
                    0f:97:79:e1:dd:c7:97:e0:b1:cf:ae:14:6e:57:c7:
                    a3:6c:6b:db:91:31:0e:f2:50:bd:a5:c4:ed:33:b7:
                    15:e8:c3:a5:ef:1e:69:75:4f:19:6b:d1:27:d5:8a:
                    67:43:a0:cf:c8:24:ae:64:c3:ec:1e:7b:94:bb:66:
                    95:f1:ec:ec:b0:9d:41:fa:e6:c7:d9:0c:c5:ab:74:
                    5b:b1:6b:e2:6b:7d:f1:6b:72:cc:1e:ab:28:3c:ca:
                    71:c1:bb:ee:02:ee:72:15:7b:ec:aa:b9:cd:06:ff:
                    53:b8:89:3a:34:d4:0e:16:00:f2:ba:2a:1a:a4:fa:
                    3a:43:ff:2f:9d:f0:76:35:a7:01:45:6d:cb:59:e4:
                    cc:93:52:1d:56:5d:36:8c:f8:2b:ed:4c:96:03:f4:
                    9b:d7:8b:44:97:c1:1d:26:3a:b4:1e:4f:de:70:25:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:0B:F9:01:35:BB:E0:86:D7:BD:05:D2:E7:EA:50:B8:80:38:1C
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/gakL-QE1u-CG170F0ufqULiAOBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:76:7d:07:51:5d:49:5e:58:4c:ba:9f:c1:3c:bc:1f:a8:6f:
         b2:87:94:c6:f5:ad:31:d5:43:ca:6c:14:b1:7b:03:24:36:50:
         32:b4:51:ed:cb:94:53:39:be:2f:ee:e9:55:93:d0:d9:c0:c1:
         ec:6e:33:97:e3:5a:af:9d:38:ef:c4:24:ef:df:0e:75:fb:c1:
         bb:fd:2a:6b:31:d3:87:b7:7a:d8:d4:e2:9a:3f:b1:48:7c:41:
         42:c8:6a:b9:be:69:2a:24:4c:26:9e:49:2b:32:69:3f:b1:d1:
         db:1b:5d:a5:89:7d:fd:ce:33:53:4c:0d:42:c0:37:79:1a:53:
         55:ce:7e:cc:20:25:f7:a0:b9:78:21:b7:88:3e:ee:04:7b:bc:
         60:aa:6a:e9:42:8d:eb:4a:0f:13:0f:a0:a9:c0:c3:b7:db:be:
         48:a8:ed:e7:5d:7e:2b:2e:ec:4a:43:85:4a:02:c6:80:fc:b5:
         ea:bf:a8:e3:99:00:99:d5:b3:5a:c9:86:6b:29:2e:9c:90:4d:
         7f:1f:8f:e4:cb:7a:3f:e7:ca:69:dc:2e:46:8b:8e:65:bc:9c:
         0e:36:e4:c7:5c:12:d8:b9:44:28:fe:c0:3b:4f:95:cb:e2:a1:
         fc:29:45:50:97:b2:62:1b:94:89:08:21:bb:aa:ab:ce:b0:35:
         a2:85:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:44 2025 by rpki-client