Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/MhOACiY00CvcJWyNCauPjvgGjYM.roa
File:                     MhOACiY00CvcJWyNCauPjvgGjYM.roa (raw, json)
Hash identifier:          62FIfgASjlIGWIiLMwjydwOLjZBp4EJyXDL5C2NcSws=
Subject key identifier:   32:13:80:0A:26:34:D0:2B:DC:25:6C:8D:09:AB:8F:8E:F8:06:8D:83
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       26
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/MhOACiY00CvcJWyNCauPjvgGjYM.roa
Signing time:             Mon 01 Sep 2025 01:34:31 +0000
ROA not before:           Mon 01 Sep 2025 01:34:31 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     63772
IP address blocks:        219.100.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Sep  1 01:34:31 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=3213800A2634D02BDC256C8D09AB8F8EF8068D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:76:c9:f8:a7:04:46:0a:6e:e2:b3:68:97:
                    4e:c0:d6:e4:71:4b:40:3e:ac:12:63:a4:91:bd:b3:
                    fe:ce:53:8e:1a:af:c3:82:5c:2c:80:d7:f2:fb:d1:
                    72:50:db:45:08:ee:81:d4:24:63:87:cd:ee:6a:c5:
                    92:1c:9e:ed:43:5f:9a:fe:ec:3e:82:10:59:c8:0b:
                    af:7b:71:3d:b9:ef:5a:9b:80:65:9e:b6:fc:37:e9:
                    ed:d7:04:b8:ae:9a:69:09:5c:c7:ec:11:91:eb:97:
                    2d:b8:75:fe:4d:3a:e2:e3:5a:7f:82:e9:b9:bf:03:
                    91:d6:4b:00:e0:30:8f:f3:55:96:97:3d:bf:1a:b3:
                    00:51:a3:3d:82:12:0c:c6:67:04:00:cc:b4:65:7d:
                    82:f3:dd:05:df:6f:2b:f0:78:ea:e7:d8:0a:42:6b:
                    44:82:86:70:5b:d2:e1:51:bd:d8:b3:76:56:27:9f:
                    6b:cb:3a:26:ee:43:d9:d7:fe:95:b4:eb:09:4f:84:
                    dc:29:ad:41:2c:7a:44:94:75:4d:4f:40:34:60:09:
                    7b:aa:4a:31:24:7f:27:7b:96:25:72:41:bc:35:64:
                    a6:02:a2:6b:61:bf:e9:80:d2:87:35:45:e7:34:73:
                    ef:1e:c7:a7:d6:b9:f9:3d:7f:c8:f0:fe:d5:85:3a:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:80:0A:26:34:D0:2B:DC:25:6C:8D:09:AB:8F:8E:F8:06:8D:83
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/MhOACiY00CvcJWyNCauPjvgGjYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:47:af:28:4f:59:d9:99:7a:51:d1:d2:79:ad:81:11:ce:14:
         6a:a8:ef:3c:72:66:53:83:d6:f1:70:66:9d:ce:2c:2e:97:31:
         a9:31:80:6b:64:20:2e:94:1e:c2:f4:c4:2a:9b:77:17:f8:f2:
         9c:a0:0a:ef:94:03:5d:75:87:35:90:ba:4c:9c:13:99:96:a5:
         8a:25:1a:2a:bb:29:db:4b:37:6e:eb:64:aa:fd:f0:c2:62:50:
         4e:fa:ff:0b:59:28:93:33:cd:52:14:fb:34:e7:70:47:93:14:
         80:47:55:aa:fd:34:f4:ac:bb:0d:97:1b:0d:b6:b1:a9:95:72:
         49:ed:b0:28:f8:89:f1:52:a6:a7:06:58:29:f7:82:a6:c1:92:
         a5:21:b9:6c:75:f5:d1:b8:8c:69:7e:cd:99:03:3d:30:6a:3e:
         c3:af:bd:a0:4d:4b:77:db:78:2d:1f:21:d7:fe:e1:24:fb:33:
         82:80:cc:1b:1c:87:6d:c9:37:49:29:11:01:99:1e:94:23:04:
         ea:49:0b:ab:0d:67:89:00:ff:0f:16:82:fb:db:0a:18:22:17:
         85:c6:55:09:19:86:fb:5c:19:85:78:b9:e6:d3:e5:30:e5:bd:
         25:38:1c:0e:e2:bc:8c:0a:bc:1b:23:9d:73:eb:d1:c0:e1:5d:
         c5:2d:e2:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 8 17:39:44 2025 by rpki-client