Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
File:                     z8HoENtJisPgFrkEFMc_W9yuIfQ.roa (raw, json)
Hash identifier:          Bt3a6ql9jLOPV+pplQBFQRjTHUtTOZxbLXb2suMD0bY=
Subject key identifier:   CF:C1:E8:10:DB:49:8A:C3:E0:16:B9:04:14:C7:3F:5B:DC:AE:21:F4
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       4C
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
Signing time:             Wed 01 Oct 2025 01:32:10 +0000
ROA not before:           Wed 01 Oct 2025 01:32:10 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     23783
IP address blocks:        203.179.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct  1 01:32:10 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=CFC1E810DB498AC3E016B90414C73F5BDCAE21F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:f0:d4:14:94:70:27:ea:22:2b:cc:cb:53:
                    32:47:04:68:9e:99:62:19:00:70:0a:94:4d:29:bd:
                    70:cb:8a:aa:a1:6a:ee:13:d7:2b:8b:61:96:63:2e:
                    27:38:cd:d6:8b:6d:53:f8:29:ac:23:e6:7e:a9:8f:
                    f1:b1:5b:a7:ab:70:08:be:7b:96:4b:6a:64:51:b5:
                    9c:f6:32:37:6d:25:65:4a:e8:3a:38:79:60:a9:19:
                    ed:b3:d2:06:e6:fd:5f:43:79:21:62:31:72:98:69:
                    f5:fb:85:5e:ea:77:fc:7e:65:57:80:d5:dd:0a:25:
                    2d:f6:79:54:bf:1d:18:71:87:bd:3d:c2:5b:94:5c:
                    93:41:d1:6d:d4:f8:da:13:d6:31:cc:99:fa:75:70:
                    ad:ff:08:cd:6e:8b:80:6f:56:15:1f:cb:8c:c5:f5:
                    52:1a:3d:00:c3:a1:8e:75:5f:86:68:d6:01:7d:f8:
                    91:03:5e:11:c6:c5:f6:9d:a7:3b:5e:11:ea:56:30:
                    2b:47:c0:18:b6:a5:03:ee:70:b5:da:a2:bd:f6:89:
                    16:de:b1:8e:3a:1b:65:46:e1:76:40:1f:86:8b:db:
                    db:9c:56:47:d1:3b:1b:02:a6:80:15:21:e3:a5:f7:
                    08:43:60:19:85:67:6e:2b:5c:3f:8d:41:ef:47:a1:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C1:E8:10:DB:49:8A:C3:E0:16:B9:04:14:C7:3F:5B:DC:AE:21:F4
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/z8HoENtJisPgFrkEFMc_W9yuIfQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:5b:1e:9b:4f:50:c8:f5:5c:0d:f1:f1:1d:e4:a1:81:6e:
         53:39:fc:60:15:9a:01:75:ee:7e:b0:45:9f:79:81:2d:e2:40:
         6a:85:8d:e8:98:55:c3:55:e4:b6:49:97:1c:55:6e:6c:c8:51:
         46:1b:b1:80:01:b5:6f:b5:84:92:6c:dd:51:c7:e2:c3:96:f3:
         d6:7f:e2:6a:13:5a:51:cf:01:fa:fe:9d:da:80:fd:d7:19:5c:
         11:82:85:88:d1:af:72:b9:4d:b9:ce:32:eb:21:a6:d9:e2:4d:
         62:1d:01:b8:da:01:78:64:e3:69:65:f7:43:0b:cc:52:c9:01:
         fd:96:28:1a:fb:44:9e:cf:1e:b2:a0:8e:9e:03:54:b7:31:f1:
         f5:2b:e7:01:50:ce:68:fa:7f:62:86:5e:b0:1d:77:bb:64:ee:
         0e:69:f5:2a:fd:cf:3d:a2:41:cb:ee:9a:a9:f9:a3:93:b1:7d:
         b0:0e:4f:74:c5:14:08:4a:55:eb:d7:e9:97:ee:16:00:8b:48:
         dd:42:ac:73:9a:cd:5d:89:a1:3f:f8:9e:e1:2e:3b:37:52:77:
         82:70:6c:b6:b4:96:b8:42:a1:73:54:14:ea:7c:a4:8b:e5:29:
         85:19:f3:e7:e2:81:b3:22:a9:ae:09:6c:86:60:a6:8b:f1:94:
         22:be:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:23 2025 by rpki-client