Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/VyPU5k-H1-6mxfe6Z2Kt5fraZrU.roa
File:                     VyPU5k-H1-6mxfe6Z2Kt5fraZrU.roa (raw, json)
Hash identifier:          MKFvlAR8k/py5yFRQmtPR8wXAUZJX2vbyEvlZXLvDbs=
Subject key identifier:   57:23:D4:E6:4F:87:D7:EE:A6:C5:F7:BA:67:62:AD:E5:FA:DA:66:B5
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       44
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/VyPU5k-H1-6mxfe6Z2Kt5fraZrU.roa
Signing time:             Wed 01 Oct 2025 01:32:05 +0000
ROA not before:           Wed 01 Oct 2025 01:32:05 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     23783
IP address blocks:        27.110.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct  1 01:32:05 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5723D4E64F87D7EEA6C5F7BA6762ADE5FADA66B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:63:78:74:60:1c:eb:48:39:99:4c:25:ba:
                    a4:f3:7d:9f:2c:e1:a7:c5:f2:8a:f6:9d:ab:35:f3:
                    d2:99:6f:2e:a5:5f:9b:86:08:20:3d:26:44:5f:4b:
                    01:5b:50:7f:87:29:42:38:9d:59:60:22:5e:61:24:
                    41:be:42:00:a9:81:d3:ec:01:e8:b1:bf:48:8e:9d:
                    37:6c:6b:70:e8:ad:83:c6:e8:ed:8f:e9:20:a3:88:
                    fd:92:86:c4:41:b0:aa:29:29:f6:74:b4:4a:e0:12:
                    ab:d7:a8:06:34:0f:3c:a0:e7:d2:fc:8a:4d:49:9b:
                    26:09:98:8d:ea:00:66:bc:da:86:b2:ae:b4:42:5b:
                    9d:06:a5:df:40:bf:0a:0c:87:58:c5:9c:7e:08:d7:
                    aa:85:bb:40:42:1b:64:70:37:98:20:6b:55:c4:55:
                    30:44:5c:5f:c8:b1:98:e5:ce:83:2b:fc:ae:90:c6:
                    b7:7f:c4:bf:d8:8e:71:dc:34:16:88:ff:26:e2:fe:
                    ce:b6:f1:0f:85:76:23:2d:d9:0b:bc:65:ac:52:7a:
                    bd:86:18:b4:0e:d5:06:39:9f:12:52:41:d0:87:b7:
                    3a:17:ee:79:9f:2a:e6:cb:f8:ce:b2:1c:7a:fc:51:
                    40:43:fe:49:f1:b3:b7:87:4e:4b:76:ed:d6:93:bc:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:D4:E6:4F:87:D7:EE:A6:C5:F7:BA:67:62:AD:E5:FA:DA:66:B5
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/VyPU5k-H1-6mxfe6Z2Kt5fraZrU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c9:30:b3:84:d0:c1:e1:76:d4:ab:d3:e9:2f:5b:d1:48:60:b7:
         4f:16:29:be:f5:0a:1e:30:e2:3b:e9:47:56:bf:1c:02:d2:3d:
         35:4a:96:96:1f:10:17:e1:09:4f:91:ef:1a:da:90:f8:69:70:
         57:43:5a:81:a3:16:68:ee:5e:75:b5:bc:84:40:a0:bc:c7:35:
         e0:b7:6c:11:19:2f:c3:c9:5f:e4:08:b1:6e:b6:94:42:19:c1:
         db:14:45:f9:82:a7:07:52:90:fe:22:6f:08:f8:c6:8d:40:75:
         b9:4d:b2:e8:8e:bd:03:d0:29:65:6b:c4:3c:c9:c7:b3:61:bd:
         30:a1:aa:7e:e3:e1:f5:f6:02:3f:02:65:4e:6e:4f:96:9d:e5:
         71:a1:62:fb:77:e6:59:74:c3:30:30:0e:97:e0:1e:7e:8d:4f:
         3d:6f:f2:90:63:6a:7e:0d:21:22:cb:a1:1f:ee:60:4c:88:bf:
         0c:e3:a5:7b:6b:db:5f:1c:3d:34:ef:cb:5a:0d:2c:1d:a0:83:
         e7:a0:75:aa:19:83:74:ed:96:16:91:6a:c7:03:11:92:2a:f9:
         81:af:c1:37:10:b1:68:de:de:f0:02:aa:ba:a3:c3:65:9e:b7:
         2a:9e:02:96:c8:b2:ad:e2:b9:0a:65:ff:80:63:c1:7a:5f:8e:
         56:a3:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:26 2025 by rpki-client