Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Hf9IJIAwpFXoliD6mNT8B6GPmkU.roa
File:                     Hf9IJIAwpFXoliD6mNT8B6GPmkU.roa (raw, json)
Hash identifier:          +/vYfuXdvpX2j5HzSlQSIBIBcCeLejdsUKzc1jx4wV8=
Subject key identifier:   1D:FF:48:24:80:30:A4:55:E8:96:20:FA:98:D4:FC:07:A1:8F:9A:45
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       BA
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Hf9IJIAwpFXoliD6mNT8B6GPmkU.roa
Signing time:             Fri 01 Aug 2025 01:31:45 +0000
ROA not before:           Fri 01 Aug 2025 01:31:45 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        122.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:45 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1DFF48248030A455E89620FA98D4FC07A18F9A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:92:08:7c:72:59:ae:6f:b9:b5:0c:d0:98:
                    4c:78:50:b7:ad:3f:4e:15:46:66:90:5f:a6:ef:43:
                    32:12:0a:7d:27:47:83:e1:24:e2:08:96:65:63:37:
                    ce:69:2d:ed:0a:55:c4:43:b5:e7:e4:c2:85:51:61:
                    e2:29:98:09:9e:ea:3d:a2:a1:a3:ef:41:d9:f0:8b:
                    dc:a4:31:64:8e:04:29:c4:7a:68:27:d4:22:da:47:
                    92:d7:27:d7:3d:d3:b1:50:20:38:31:30:aa:bb:ad:
                    f5:2d:b2:00:27:03:58:22:72:0c:57:ae:c2:68:ce:
                    6b:c1:03:ea:60:0c:66:ac:cb:63:ad:2d:e4:53:2f:
                    82:a4:a3:37:b3:b3:3e:a8:c7:40:10:39:5a:a2:bf:
                    1c:1e:1b:57:bf:73:61:98:b8:48:d4:85:f9:bb:e8:
                    ad:d9:b3:a2:90:93:9a:4e:81:d5:ad:92:87:c5:b9:
                    e4:36:73:39:b8:b3:7d:78:ab:f1:d0:37:c8:be:6a:
                    4d:75:81:6b:87:f4:51:18:da:f0:1c:fb:15:f7:4c:
                    21:66:f0:fa:43:7e:98:6a:16:2a:bd:07:91:a8:89:
                    6e:6c:20:c9:6d:aa:18:21:a7:77:4e:a9:21:de:a3:
                    02:95:b6:86:35:cd:b5:7f:3a:aa:cb:df:6f:e5:16:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:48:24:80:30:A4:55:E8:96:20:FA:98:D4:FC:07:A1:8F:9A:45
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Hf9IJIAwpFXoliD6mNT8B6GPmkU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:04:98:b3:ab:cb:00:e4:67:60:9c:2a:fc:eb:9f:2b:41:
         1b:e2:8f:2b:13:1f:e1:df:e3:e3:72:ef:08:f9:53:ac:77:8f:
         44:89:d4:48:bc:0a:3e:f2:9a:e3:5c:2e:50:b9:5e:3a:82:cd:
         51:99:81:b8:09:29:17:e2:4f:23:49:3a:eb:14:dd:68:92:92:
         de:bf:95:64:20:17:a1:01:10:49:b3:e5:25:c9:e9:5a:f8:d6:
         e8:00:74:73:70:c7:af:fe:df:07:05:66:ee:78:f9:88:bb:50:
         cd:39:92:d5:55:60:a3:4b:c6:6e:77:00:84:39:f2:5b:40:1a:
         16:5a:23:09:35:10:79:13:4a:97:34:3c:18:40:da:2e:1e:cc:
         55:07:f2:c8:b9:5e:21:1b:f6:08:c0:49:93:56:2f:0e:a3:19:
         06:4b:1d:d4:eb:d1:19:72:a7:db:bf:50:6b:61:29:33:79:30:
         58:f9:fd:32:cf:5c:d7:88:0d:6b:e0:3c:75:4d:13:f6:3d:b9:
         a5:22:25:86:6d:6a:bf:77:95:27:63:54:26:f3:bd:a7:d1:1b:
         1c:e0:9d:eb:45:54:59:af:5d:2f:71:e8:a1:2b:b6:b9:65:ac:
         35:09:e0:c8:29:22:78:c9:a3:99:6b:b0:a4:8f:45:ee:68:0d:
         96:e0:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:39:28 2025 by rpki-client