Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
File:                     tDLifovo9oB3fnmMT0YOngCEFUo.roa (raw, json)
Hash identifier:          tqxtZkp8pDrSqw9lHAEyVxiM1A1e3YEtvUNaDT+vR+I=
Subject key identifier:   B4:32:E2:7E:8B:E8:F6:80:77:7E:79:8C:4F:46:0E:9E:00:84:15:4A
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       72
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
Signing time:             Wed 01 Oct 2025 01:29:44 +0000
ROA not before:           Wed 01 Oct 2025 01:29:44 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     131925
IP address blocks:        219.100.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Oct  1 01:29:44 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=B432E27E8BE8F680777E798C4F460E9E0084154A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:34:24:91:c2:76:b5:46:14:92:84:c4:03:
                    b7:a8:0c:9e:4a:0f:77:cb:5d:e5:ef:ed:65:44:98:
                    e6:11:43:b7:ae:48:fa:e9:d2:22:5f:36:48:6e:45:
                    48:89:78:6d:67:46:31:ee:12:97:c2:1c:1b:e2:42:
                    4d:4e:c0:47:d0:f5:9d:2f:8a:ae:e4:0c:69:f7:f4:
                    fa:5a:40:b7:01:ad:65:01:aa:7d:c0:86:7d:c2:c8:
                    79:0b:ed:89:a8:90:15:e8:f5:0b:db:85:bf:ea:d8:
                    c3:eb:ae:89:21:2a:05:bf:2a:05:0b:7e:1d:4d:a7:
                    96:81:56:b7:01:40:22:5d:d9:96:59:cc:d0:d9:fe:
                    6e:34:7f:bc:a2:9f:96:ca:b7:22:95:8e:6a:c0:25:
                    08:b0:57:b8:7c:c6:b9:02:42:92:07:7a:47:27:2a:
                    1a:85:16:5c:88:28:98:7b:90:03:de:aa:77:49:ac:
                    96:27:5f:8a:3a:7f:b0:15:97:6b:d4:9f:15:7f:f3:
                    71:2b:40:dc:0c:57:d4:3f:ab:49:61:78:22:ae:30:
                    e1:41:e9:a4:ae:42:16:7c:31:8b:65:32:2b:04:a6:
                    1e:8b:de:46:b7:90:57:0e:e6:60:2d:73:ca:0c:75:
                    9f:d3:17:ec:f9:ef:d7:14:32:96:40:50:14:d5:d6:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:E2:7E:8B:E8:F6:80:77:7E:79:8C:4F:46:0E:9E:00:84:15:4A
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/tDLifovo9oB3fnmMT0YOngCEFUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:50:fc:f8:4d:e3:d9:d0:25:42:a9:9a:3c:cc:da:86:05:a7:
         87:25:55:84:c9:63:23:99:ae:db:bb:82:bd:5b:f7:7f:7c:6d:
         1d:6a:eb:70:fa:20:e9:98:1a:87:41:0f:d5:d6:d4:ee:e1:e8:
         e6:d1:35:98:01:c1:9e:75:50:26:44:6c:6c:a2:c7:f9:e9:90:
         4c:ee:8d:79:1c:8d:0d:a6:41:89:e1:a4:ea:52:05:53:a6:a8:
         5a:6e:64:18:e2:37:5c:90:16:32:8a:e8:cb:39:c4:01:66:bc:
         5c:94:ba:29:5f:6b:53:d1:a4:44:30:e8:c4:8f:86:bd:bf:f2:
         4a:e2:10:4b:5f:44:b9:7d:2a:b7:bb:e8:82:79:95:9c:a5:ac:
         f8:a4:26:a8:8e:11:8a:3a:ba:f1:5c:c4:38:f6:d6:0d:8b:84:
         49:e2:ba:d6:6f:71:c7:37:b9:bf:7c:31:6b:68:54:f2:88:14:
         c7:63:73:71:41:02:9a:73:44:9b:c0:c4:57:c0:9e:d6:f2:08:
         01:fa:e5:39:e1:5c:b0:2e:72:86:12:4d:f0:8a:a1:ac:a9:8d:
         f6:65:1f:42:3c:7b:91:2e:1e:36:80:b0:72:e0:2a:3f:0c:c0:
         1c:5f:0a:19:69:08:9d:5e:0e:8b:ce:86:42:1e:4c:b4:6e:5f:
         6e:28:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:13:55 2025 by rpki-client