Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/TzJwiI6WtZxBejBChsXRRqKW0gU.roa
File:                     TzJwiI6WtZxBejBChsXRRqKW0gU.roa (raw, json)
Hash identifier:          mO5vu9scwNK3aqM+4UQ3FyToHMLkIo7DOZ5ZLfICecg=
Subject key identifier:   4F:32:70:88:8E:96:B5:9C:41:7A:30:42:86:C5:D1:46:A2:96:D2:05
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       8C
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/TzJwiI6WtZxBejBChsXRRqKW0gU.roa
Signing time:             Mon 01 Sep 2025 01:29:32 +0000
ROA not before:           Mon 01 Sep 2025 01:29:32 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     32787
IP address blocks:        219.113.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Sep  1 01:29:32 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=4F3270888E96B59C417A304286C5D146A296D205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:b3:ac:4d:e6:72:d6:eb:49:e0:db:22:d6:
                    66:45:4d:05:1f:4e:f4:46:00:a7:cd:c7:55:a9:2a:
                    85:08:99:42:53:8a:ea:9c:d7:4d:62:82:6f:35:d5:
                    b9:88:a7:e6:98:ea:41:31:16:8d:09:f1:27:05:4a:
                    9a:7d:0d:a4:9d:76:7f:ef:d4:2e:08:58:a4:00:f9:
                    33:10:86:2e:d5:e9:11:c4:d5:12:d7:11:13:36:07:
                    ae:58:d6:07:65:79:69:8d:e5:7c:6e:54:63:98:9f:
                    20:a1:7f:4d:d5:0f:da:53:00:2c:c1:85:94:7b:17:
                    2f:2e:a4:2e:b4:a1:99:88:29:a4:86:5e:41:31:a4:
                    f2:ee:70:ea:d9:a4:e3:4f:92:f0:8e:f4:9a:5b:82:
                    d0:92:54:b9:08:7b:5b:1a:a3:ab:86:c2:73:80:aa:
                    b1:7a:c6:67:7b:70:0a:ec:90:a1:7f:07:e6:72:c5:
                    9a:b1:98:95:7f:66:72:36:07:d1:e6:78:53:ae:fd:
                    69:2c:29:1c:83:42:76:6f:34:30:3e:47:6a:56:b8:
                    c1:75:24:1c:1c:15:a6:92:51:bd:99:04:eb:02:4e:
                    d1:aa:30:42:fb:06:93:1c:b5:12:47:ca:63:9f:9f:
                    c0:b8:fb:dd:96:c9:88:4d:ff:74:1b:b3:45:4e:8e:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:70:88:8E:96:B5:9C:41:7A:30:42:86:C5:D1:46:A2:96:D2:05
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/TzJwiI6WtZxBejBChsXRRqKW0gU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:49:ef:2d:8c:f8:8f:6f:5a:a4:b5:a7:27:5a:9f:27:46:
         01:a6:74:eb:78:9a:97:bd:94:77:9c:99:37:1e:5b:b6:a6:31:
         27:28:9a:64:bf:93:69:f4:10:f4:eb:3c:48:8d:a6:84:72:9b:
         18:f7:4f:a1:9c:36:cf:61:fb:f2:9c:6d:8b:dd:d9:14:29:28:
         31:c2:5e:2f:5b:fb:5b:63:ee:8c:c1:45:54:f7:84:4a:19:7e:
         9a:96:b8:2e:05:8b:d7:d5:05:ff:65:cf:d8:f1:b4:5f:aa:2b:
         c1:b8:9b:ad:fb:3f:02:4c:0b:59:52:29:b6:9c:12:03:d8:04:
         75:8b:30:fc:9b:a8:01:5a:42:32:5b:aa:bd:e2:7b:34:8b:cf:
         81:c5:fd:08:02:5a:e5:14:ef:38:e8:59:1e:36:b2:cf:61:76:
         b8:be:02:8f:38:78:79:ae:68:e7:3c:0f:17:df:49:45:a2:42:
         64:fb:78:3d:cd:28:12:3b:c0:39:8b:0d:b9:be:48:cc:35:7b:
         f0:f4:7c:4a:dc:5c:d8:94:c8:b3:48:66:5c:12:57:d6:f2:c6:
         db:39:00:69:be:5f:9b:31:47:14:95:44:6c:a4:44:8a:09:d3:
         a0:ed:49:8e:16:86:02:d9:5b:f5:1e:4b:e9:6e:bd:ff:2a:4e:
         73:39:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:53:03 2025 by rpki-client