Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/G1Gu586J-BPJFtNrSWBbzKxcQDY.roa
File:                     G1Gu586J-BPJFtNrSWBbzKxcQDY.roa (raw, json)
Hash identifier:          81WpMwoEKKZgvPLCl04YeQXQva8Kl9KihU6P7GL35eI=
Subject key identifier:   1B:51:AE:E7:CE:89:F8:13:C9:16:D3:6B:49:60:5B:CC:AC:5C:40:36
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0479
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/G1Gu586J-BPJFtNrSWBbzKxcQDY.roa
Signing time:             Wed 01 Oct 2025 01:34:54 +0000
ROA not before:           Wed 01 Oct 2025 01:34:54 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:54 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=1B51AEE7CE89F813C916D36B49605BCCAC5C4036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:81:8a:0a:aa:3b:83:a9:dd:db:bb:9e:4a:ad:
                    9c:fe:02:a3:b3:21:49:7e:2e:39:d6:33:d5:22:c3:
                    4e:42:1c:80:e3:30:5a:4c:f6:57:9e:b9:ec:b4:48:
                    cc:5f:57:a2:ef:48:23:97:88:24:fc:98:f0:05:33:
                    78:b9:a1:7e:f5:71:ef:14:a1:da:f3:af:b5:48:d0:
                    c7:e8:3a:37:7f:5b:f0:90:96:0e:ed:6d:7b:65:52:
                    2f:cf:60:69:c3:e9:43:b1:dc:81:8d:dd:2d:b7:6e:
                    00:38:5d:00:5a:a3:6a:43:8d:3f:36:1a:45:db:93:
                    40:29:7a:36:2b:78:99:d0:06:af:69:a7:53:21:8d:
                    34:47:6a:38:cc:26:8d:a4:49:64:8c:70:78:7a:cd:
                    64:c4:0a:76:b7:bb:18:7e:40:67:0d:b4:09:39:2f:
                    0c:f2:b2:34:81:60:05:b0:41:e9:b6:69:6c:ae:94:
                    2e:88:e8:9d:53:f7:78:5e:77:ed:a6:73:1f:ac:4f:
                    56:98:00:e8:9b:be:a4:de:2c:f9:fc:d1:74:32:d8:
                    8f:f8:2c:44:a4:61:3f:20:07:90:bd:fa:66:37:78:
                    12:bf:10:b3:c2:89:1e:f7:48:da:3c:64:ae:cd:d2:
                    8d:6a:f7:05:76:ed:dc:84:d3:8f:eb:05:51:a0:c9:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:AE:E7:CE:89:F8:13:C9:16:D3:6B:49:60:5B:CC:AC:5C:40:36
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/G1Gu586J-BPJFtNrSWBbzKxcQDY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:c1:14:9e:59:98:1e:48:de:a2:0a:e9:3f:d2:45:86:51:
         97:e6:be:85:8a:3d:04:fd:23:f5:32:af:e0:42:79:c5:47:17:
         9c:7b:73:2f:ae:2f:cc:95:57:6b:e2:57:15:99:b9:29:54:a3:
         36:5c:f9:89:11:63:02:0e:49:83:9f:d7:fc:1f:cc:59:d0:14:
         8c:9e:e2:4b:5b:8b:04:6a:91:6c:a4:4b:25:eb:71:7a:ef:b1:
         06:c3:da:b8:57:ab:28:ef:7f:96:f7:ee:21:ab:9b:9b:a3:dd:
         28:22:78:38:69:52:37:aa:61:98:ef:c7:a5:34:42:f5:c7:b2:
         4e:09:c6:b1:05:44:2b:59:80:83:2e:64:5c:6b:df:11:80:5e:
         de:b3:34:09:c1:8a:a5:17:de:53:8f:d2:0d:72:e9:74:a2:97:
         ec:99:30:ee:de:a1:75:b3:3a:16:02:3e:e6:11:e2:8c:00:41:
         17:47:97:ab:95:9c:e2:20:ef:5d:0c:ea:f0:48:55:da:f9:ac:
         d8:48:c1:69:4b:f9:ed:98:6a:7e:d1:4e:b0:0e:f1:b6:10:d8:
         cf:5e:1c:57:57:62:55:97:10:32:07:7e:c6:09:96:ab:1c:62:
         3c:3d:0c:95:71:0f:79:83:bc:3f:eb:4f:b5:fe:67:71:2b:3a:
         de:af:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:05 2025 by rpki-client