Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/GuM-eVB4VhzV4sLR3492yzny04o.roa
File:                     GuM-eVB4VhzV4sLR3492yzny04o.roa (raw, json)
Hash identifier:          955uRxDy+2p+hS0LqJiwXB8CPTJu/Y/fDcBdf9vg4bE=
Subject key identifier:   1A:E3:3E:79:50:78:56:1C:D5:E2:C2:D1:DF:8F:76:CB:39:F2:D3:8A
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       6D
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GuM-eVB4VhzV4sLR3492yzny04o.roa
Signing time:             Mon 01 Sep 2025 01:33:23 +0000
ROA not before:           Mon 01 Sep 2025 01:33:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        210.137.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1AE33E795078561CD5E2C2D1DF8F76CB39F2D38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:12:ef:dd:52:54:c2:ff:d8:63:aa:d4:38:
                    47:f9:41:21:5a:5c:71:06:a7:73:77:9a:e1:75:a7:
                    6d:bb:9a:3a:5b:f1:3d:c8:6c:d8:ed:89:52:f5:ff:
                    c8:ce:ff:c4:a9:0c:cf:f6:ac:57:ff:08:01:49:97:
                    28:08:43:44:2e:32:09:57:c3:d8:57:63:88:9a:63:
                    9e:9b:14:61:39:79:75:8d:b0:8f:35:57:3e:cb:8d:
                    db:b9:56:4f:fe:db:3f:7a:22:64:5f:eb:f3:1f:b6:
                    69:3a:7d:0c:67:21:c8:85:62:d9:6b:36:92:96:8a:
                    07:1c:19:ef:26:a0:22:89:be:8b:5a:37:d7:60:ad:
                    c2:a2:f3:21:bb:20:6e:6c:f4:9a:e8:94:a6:a8:f2:
                    29:23:80:e2:e7:dc:7f:46:0a:22:ec:f9:bc:4f:4e:
                    d5:40:a9:08:41:c1:6d:57:4b:05:27:e2:87:69:61:
                    3a:fd:96:fc:32:55:8c:f6:34:c7:e3:75:ab:5d:9e:
                    1a:40:a9:02:3d:8c:f3:66:f3:8b:7e:10:f4:b0:0d:
                    75:bf:66:b6:01:15:c2:00:3c:f4:3a:cd:22:76:46:
                    c6:a2:26:1c:2a:69:e1:64:38:86:3c:f1:e7:ec:d7:
                    e8:9d:ab:76:73:81:8f:c2:66:3f:ce:34:91:2b:d0:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:3E:79:50:78:56:1C:D5:E2:C2:D1:DF:8F:76:CB:39:F2:D3:8A
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GuM-eVB4VhzV4sLR3492yzny04o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:83:fd:16:c5:89:07:67:8d:6f:4a:e9:78:a4:a5:a9:4e:
         6c:44:ad:0c:26:ef:b6:e7:17:af:c1:ef:92:89:29:72:9b:15:
         e6:97:ed:7a:66:31:a1:f4:f8:05:ea:b8:2d:f7:7d:50:b0:d9:
         7e:af:02:18:ec:b1:0f:f7:e8:b5:47:6a:c8:68:ad:3a:db:4a:
         bd:5b:58:de:d8:85:e2:30:62:99:b0:92:b1:93:6c:e6:74:17:
         69:ac:73:08:b9:6e:79:09:f9:4a:f4:bb:fb:b2:d0:89:0a:61:
         32:1b:84:bb:81:0b:3a:76:01:06:33:ca:82:b6:39:58:30:67:
         5d:5d:e4:eb:27:34:d5:8b:c1:5a:02:3b:19:cc:1f:e2:04:6d:
         4c:1e:1e:72:7e:52:6c:ea:97:67:40:83:43:87:05:18:4b:98:
         e5:f7:5e:8e:cc:e5:5b:cd:79:be:21:ab:6e:9b:fb:ee:74:04:
         b8:62:34:5e:d4:d1:c3:4d:75:ae:a5:f2:10:ea:b4:62:7a:94:
         30:8c:b0:b3:83:6c:93:96:30:ae:ea:8b:08:1c:20:97:36:63:
         cb:84:3b:12:70:26:76:ac:24:f1:90:9b:5f:1f:7e:ed:df:b6:
         27:4f:77:d9:5b:ae:6e:eb:17:16:d7:2f:4a:5a:36:f3:ae:12:
         17:4b:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:23:28 2025 by rpki-client