Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
File:                     -R1pp-DwL7hv1DnKmrsbAMlJz44.roa (raw, json)
Hash identifier:          9+4rdRyOpoKwjNYj4EzPqD1RZP0mBU4vfETzgLUn1Mg=
Subject key identifier:   F9:1D:69:A7:E0:F0:2F:B8:6F:D4:39:CA:9A:BB:1B:00:C9:49:CF:8E
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       1E
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
Signing time:             Mon 01 Sep 2025 01:31:51 +0000
ROA not before:           Mon 01 Sep 2025 01:31:51 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        211.1.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep  1 01:31:51 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=F91D69A7E0F02FB86FD439CA9ABB1B00C949CF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:09:3b:e0:54:b6:fb:44:af:fa:e2:78:15:
                    43:c4:d4:9b:a1:9c:81:c5:a7:76:27:3c:a7:b3:14:
                    3d:16:55:44:d8:2c:84:51:e5:cc:d8:bb:07:f4:ab:
                    2c:2e:34:a5:2d:7d:23:22:83:20:23:90:98:06:6b:
                    46:a3:52:22:b3:39:15:8d:5e:ea:9f:6d:09:7b:16:
                    f1:5b:a2:48:44:b7:93:fe:21:d2:86:6e:f4:1d:1d:
                    8a:6e:69:37:c5:99:b6:06:83:59:d5:c1:71:c3:9e:
                    c4:a8:84:ce:62:55:75:b4:2a:5d:17:2b:58:95:e1:
                    7d:8e:a9:4a:2a:91:36:b7:0f:2d:2f:27:54:23:e4:
                    40:93:1d:2d:f2:79:96:84:21:c1:a8:d9:b1:c9:23:
                    69:34:b1:d7:6f:45:e5:f6:34:bb:ad:0a:50:46:3f:
                    66:74:ab:50:27:6a:ab:13:d6:9d:37:0c:8f:1b:83:
                    a8:fe:43:81:f5:6c:c1:0b:f6:8d:d5:63:59:36:7e:
                    db:55:69:81:dc:1c:d8:50:cb:2d:b7:40:fb:38:1c:
                    8e:4f:7d:d9:34:62:54:89:85:de:f3:34:03:2d:f5:
                    57:74:a9:47:8a:a4:e3:dd:df:11:fd:bb:c7:03:c0:
                    9b:31:7f:ae:fc:c7:b4:20:de:98:75:c6:d3:62:7d:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:69:A7:E0:F0:2F:B8:6F:D4:39:CA:9A:BB:1B:00:C9:49:CF:8E
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-R1pp-DwL7hv1DnKmrsbAMlJz44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:73:ad:5d:85:69:ab:fe:2c:93:b1:6f:1f:d1:b5:7d:11:c4:
         d4:48:45:84:b7:1f:1c:71:2f:47:e7:dc:d9:32:7c:96:04:19:
         8d:28:34:17:37:a2:ad:41:6a:58:d9:cf:74:7e:94:c8:04:7a:
         34:ea:55:b2:c0:34:d0:73:38:b0:e9:42:43:6c:5d:f5:a9:9b:
         0b:d6:25:97:e6:a0:78:73:b8:f2:a2:3c:db:83:bf:d1:39:d5:
         52:53:9b:1a:df:94:ae:1b:b4:61:32:66:30:df:d0:9a:2d:e0:
         7c:69:21:43:e9:93:56:df:66:e0:50:a6:bf:4e:d9:3f:c2:44:
         9e:d8:f9:4b:0b:ff:a2:55:b8:96:40:0a:16:cf:5c:46:32:17:
         f9:85:95:ba:df:e6:e7:ff:2b:19:79:c8:79:19:1f:6d:6a:f7:
         a2:68:de:08:fc:5b:9b:13:b4:39:55:af:62:02:01:17:18:f7:
         bb:22:09:4e:12:29:8d:bd:22:66:f2:f1:a2:cb:53:ec:5e:db:
         10:7a:83:46:bc:0a:dc:8e:1d:ad:d9:64:27:52:bc:23:43:9f:
         76:90:96:68:5b:d7:98:82:87:96:8e:19:61:a0:1f:d0:e7:bf:
         2a:fb:b0:d9:b0:d0:f8:59:b2:cd:e7:c7:87:6f:7a:b0:23:3b:
         42:58:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:28:18 2025 by rpki-client