Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/526/vhkcuXdbvoQioB75D1Nzo2Hn9Hw.roa
File:                     vhkcuXdbvoQioB75D1Nzo2Hn9Hw.roa (raw, json)
Hash identifier:          6gbAknzJwMDh4eNVpg5rCRWO84+JSDzGLULOeLWOOKU=
Subject key identifier:   BE:19:1C:B9:77:5B:BE:84:22:A0:1E:F9:0F:53:73:A3:61:E7:F4:7C
Certificate issuer:       /CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Certificate serial:       05
Authority key identifier: 8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/vhkcuXdbvoQioB75D1Nzo2Hn9Hw.roa
Signing time:             Fri 26 Sep 2025 06:31:49 +0000
ROA not before:           Fri 26 Sep 2025 06:31:49 +0000
ROA not after:            Sat 26 Sep 2026 04:32:34 +0000
asID:                     215029
IP address blocks:        119.15.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
        Validity
            Not Before: Sep 26 06:31:49 2025 GMT
            Not After : Sep 26 04:32:34 2026 GMT
        Subject: CN=BE191CB9775BBE8422A01EF90F5373A361E7F47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:d6:ca:af:ac:07:fc:9d:ec:17:e0:22:e6:
                    54:18:0d:83:fc:6b:41:22:36:cb:0c:aa:20:e9:cb:
                    f6:18:79:9e:89:0b:b7:9b:fc:1d:ea:f0:fc:6d:e4:
                    86:b9:11:88:3d:f0:bb:2b:5c:b8:6f:32:7f:f7:34:
                    fe:09:d1:3c:9e:cf:8b:57:ac:cd:31:14:86:97:f2:
                    ca:d8:9d:d4:6b:f9:f9:fb:90:60:9f:8c:58:b6:7a:
                    ba:1a:54:be:f7:29:9e:c8:5e:c1:25:4c:2e:54:9f:
                    10:58:8d:52:18:1f:e6:4c:43:ac:79:68:d2:21:79:
                    51:7e:8d:e3:43:7e:7a:cd:9d:fa:d8:d1:44:48:03:
                    7a:6a:d2:10:a9:11:83:f8:c8:7a:16:41:65:3d:63:
                    1b:72:18:85:ad:13:0f:6f:46:13:d8:c7:2c:cf:f5:
                    ed:54:e3:11:80:f7:af:90:cb:fe:28:98:2e:e7:a6:
                    49:2f:cb:94:ae:a5:37:5b:66:36:03:2c:47:8b:9f:
                    3f:17:71:b8:73:96:ef:32:85:3b:25:6e:bc:a2:8c:
                    1a:fe:f9:bf:ea:88:69:f4:15:f1:53:3b:d6:f0:8b:
                    24:1a:42:29:1b:c1:0f:3f:62:73:2c:1b:51:07:d6:
                    c6:3a:34:d8:c9:2c:f2:ce:58:9c:8a:b4:57:9b:0a:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:19:1C:B9:77:5B:BE:84:22:A0:1E:F9:0F:53:73:A3:61:E7:F4:7C
            X509v3 Authority Key Identifier:
                keyid:8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/vhkcuXdbvoQioB75D1Nzo2Hn9Hw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:6e:d5:d0:b3:b7:06:8c:36:9a:c6:ad:65:16:13:ca:58:
         91:17:5e:24:2e:65:80:1a:34:8c:a0:46:44:d2:76:b5:41:de:
         6f:51:18:18:55:6f:50:25:42:0d:04:07:af:91:c1:dd:a4:a1:
         c1:cf:ad:2e:93:7f:d0:20:f5:8e:eb:08:8f:3c:ae:42:18:23:
         77:c5:99:2e:0e:72:82:43:a4:c0:f2:73:97:ac:db:b3:c2:42:
         d6:97:26:e4:95:92:eb:cb:6a:23:d9:2c:76:3c:8e:3c:83:b8:
         8a:2d:9f:6a:3e:63:01:61:d1:d7:46:f2:57:c9:d5:65:26:bb:
         5b:b1:4e:76:e8:61:82:fb:61:d3:ab:a2:18:6b:e6:c4:51:38:
         f0:e5:70:28:73:a4:1a:f9:25:ce:b5:51:e8:08:42:30:e8:5f:
         42:27:ba:90:35:eb:59:04:c3:98:19:be:05:40:77:38:4f:c1:
         19:86:4a:59:4f:d4:74:c1:a1:15:4a:86:35:f9:10:f7:4e:4a:
         ad:e2:9e:8e:30:52:ee:21:61:1a:69:2b:67:3e:fb:0c:a7:39:
         55:05:07:dd:59:49:b0:68:be:eb:da:0b:82:79:ee:87:e1:a3:
         52:de:85:19:74:46:42:92:e6:d6:68:b4:4a:82:14:8d:b1:15:
         4c:73:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:34:31 2025 by rpki-client