Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/SfsvuD-SVMJ1gz964ntumGN4npU.roa
File:                     SfsvuD-SVMJ1gz964ntumGN4npU.roa (raw, json)
Hash identifier:          frg83BmTPV/cnMchfgs6dNF0BE2qIbmYQH1KMYWEsTQ=
Subject key identifier:   49:FB:2F:B8:3F:92:54:C2:75:83:3F:7A:E2:7B:6E:98:63:78:9E:95
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       B9
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/SfsvuD-SVMJ1gz964ntumGN4npU.roa
Signing time:             Fri 01 Aug 2025 01:31:44 +0000
ROA not before:           Fri 01 Aug 2025 01:31:44 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        122.145.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:44 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=49FB2FB83F9254C275833F7AE27B6E9863789E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:48:bf:5d:4f:cf:86:91:6a:58:dd:30:7b:
                    8e:8d:9e:2f:22:c1:58:94:f0:2e:cb:0f:9d:d7:27:
                    b6:e7:92:e2:d0:c6:ce:e3:63:e9:82:d2:04:26:c7:
                    2d:96:eb:29:60:cd:4a:18:67:d4:02:07:d2:f9:c5:
                    e2:13:39:3f:c5:1d:f4:c5:74:07:02:1e:74:11:86:
                    b3:7e:ba:5f:e8:40:d9:1d:b0:0f:06:74:57:af:61:
                    96:30:91:95:3a:ac:47:5b:79:33:54:aa:9e:37:60:
                    56:16:0c:35:36:00:27:bb:d4:9a:a5:de:55:69:43:
                    11:2f:4f:5f:39:f0:23:95:4f:45:84:cc:9d:58:f4:
                    64:68:48:c4:d0:59:fc:3a:4f:f8:53:d4:ed:9c:94:
                    9d:01:bc:fd:d8:2e:65:8f:e7:89:4f:a1:f5:34:d1:
                    51:d6:bb:2d:ce:25:bb:32:61:a5:30:e0:8e:47:ef:
                    7f:cc:79:c8:33:f3:94:c2:b7:cd:26:9b:20:71:a1:
                    0f:07:1c:d2:4d:d2:7f:34:45:ff:03:58:a3:4a:76:
                    03:16:e1:f0:8b:51:af:ef:07:fb:e1:f1:b5:15:32:
                    b3:71:25:07:29:81:5e:39:97:82:67:a5:d7:65:bc:
                    f5:e1:df:13:2b:12:2c:40:c8:60:b6:74:3e:70:3d:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:2F:B8:3F:92:54:C2:75:83:3F:7A:E2:7B:6E:98:63:78:9E:95
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/SfsvuD-SVMJ1gz964ntumGN4npU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:34:be:66:94:e6:21:6a:b3:f5:05:ac:13:15:61:45:56:
         f1:c5:f9:93:87:7e:f4:41:52:13:e9:e7:b1:ee:5b:f8:38:ce:
         02:6e:90:ee:c0:32:06:1d:6d:29:70:92:e7:66:87:7f:4c:e9:
         b4:cf:47:02:29:b4:c1:3c:99:b6:28:86:3b:6a:54:02:fc:a1:
         fb:58:ee:16:71:0c:f3:c1:d9:8d:f0:f0:5d:81:4c:03:91:4d:
         4c:29:e2:26:b9:66:be:ec:53:6c:c3:15:2b:76:5f:15:0a:77:
         59:7d:94:db:4e:52:26:f3:25:3c:bb:11:51:44:c6:ed:b8:80:
         18:17:30:6d:56:cd:a5:ab:84:f2:65:9c:22:40:6a:a2:16:25:
         bc:c6:12:dd:c6:9e:3a:cf:fd:36:fd:23:18:08:ac:eb:26:15:
         e4:d7:0b:28:ab:1e:12:cd:32:b8:4e:75:1e:d9:65:2e:da:19:
         7f:ed:5f:18:25:f6:58:38:e0:9f:71:3e:2c:a8:a9:43:42:70:
         a8:c5:47:76:a7:b5:dc:67:71:e2:db:b5:ef:91:f2:6c:e8:95:
         5f:43:8a:f4:26:e0:35:53:95:cc:6c:b2:37:37:1e:c1:ee:e6:
         53:54:b6:43:0a:b3:b3:42:cd:02:fd:1d:20:df:49:bd:e7:17:
         1a:f4:2c:e9
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICALkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw
MTMxNDRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDQ5RkIyRkI4M0Y5MjU0
QzI3NTgzM0Y3QUUyN0I2RTk4NjM3ODlFOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdoUi/XU/PhpFqWN0we46Nni8iwViU8C7LD53XJ7bnkuLQxs7j
Y+mC0gQmxy2W6ylgzUoYZ9QCB9L5xeITOT/FHfTFdAcCHnQRhrN+ul/oQNkdsA8G
dFevYZYwkZU6rEdbeTNUqp43YFYWDDU2ACe71Jql3lVpQxEvT1858COVT0WEzJ1Y
9GRoSMTQWfw6T/hT1O2clJ0BvP3YLmWP54lPofU00VHWuy3OJbsyYaUw4I5H73/M
ecgz85TCt80mmyBxoQ8HHNJN0n80Rf8DWKNKdgMW4fCLUa/vB/vh8bUVMrNxJQcp
gV45l4JnpddlvPXh3xMrEixAyGC2dD5wPUe/AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUSfsvuD+SVMJ1gz964ntumGN4npUwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9TZnN2dUQtU1ZNSjFnejk2NG50dW1HTjRucFUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFepHgMA0GCSqGSIb3DQEBCwUAA4IBAQAfFDS+ZpTmIWqz9QWsExVhRVbxxfmT
h370QVIT6eex7lv4OM4CbpDuwDIGHW0pcJLnZod/TOm0z0cCKbTBPJm2KIY7alQC
/KH7WO4WcQzzwdmN8PBdgUwDkU1MKeImuWa+7FNswxUrdl8VCndZfZTbTlIm8yU8
uxFRRMbtuIAYFzBtVs2lq4TyZZwiQGqiFiW8xhLdxp46z/02/SMYCKzrJhXk1wso
qx4SzTK4TnUe2WUu2hl/7V8YJfZYOOCfcT4sqKlDQnCoxUd2p7XcZ3Hi27XvkfJs
6JVfQ4r0JuA1U5XMbLI3Nx7B7uZTVLZDCrOzQs0C/R0g30m95xca9Czp
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:39:36 2025 by rpki-client