Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5648/NOUi-IHO6imKGEhQtvJ6broJ_Oo.roa
File:                     NOUi-IHO6imKGEhQtvJ6broJ_Oo.roa (raw, json)
Hash identifier:          9gBSu6nGKuYjecVk8tbRctAYh1W+Ii5t+izM0DTKbYA=
Subject key identifier:   34:E5:22:F8:81:CE:EA:29:8A:18:48:50:B6:F2:7A:6E:BA:09:FC:EA
Certificate issuer:       /CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
Certificate serial:       23
Authority key identifier: 81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/NOUi-IHO6imKGEhQtvJ6broJ_Oo.roa
Signing time:             Wed 01 Oct 2025 01:32:20 +0000
ROA not before:           Wed 01 Oct 2025 01:32:20 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     63806
IP address blocks:        43.228.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
        Validity
            Not Before: Oct  1 01:32:20 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=34E522F881CEEA298A184850B6F27A6EBA09FCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:71:d6:00:e5:6f:a0:94:40:8f:f4:f4:00:
                    30:fe:50:5d:23:36:91:39:cb:22:10:6d:a8:9d:28:
                    31:68:c7:17:de:dc:56:ed:96:36:a9:6c:e2:a6:ff:
                    4e:14:68:c5:5f:b1:ff:d2:21:b0:45:e2:6e:c2:e1:
                    9c:90:48:ba:ac:37:60:37:84:20:50:de:f9:00:ca:
                    6d:fa:21:87:db:f5:42:4b:d2:8a:a6:4a:f1:f7:40:
                    ac:e2:43:44:9a:d4:a8:50:a8:5b:15:25:00:bd:3c:
                    5a:5d:1f:0a:de:c8:88:d4:6c:89:83:0a:37:d8:e7:
                    e1:fd:5d:df:ea:1f:de:25:60:01:48:0b:34:46:a3:
                    e8:1e:7d:9d:bd:71:e4:56:ac:cf:a4:d7:32:78:71:
                    3d:a8:37:63:45:1e:e5:aa:d8:c8:5a:ee:64:0c:64:
                    a2:e0:5f:ce:28:28:7a:92:ce:ce:f6:02:3d:a5:7a:
                    52:e8:73:6e:89:33:b4:41:4c:a9:57:c8:8b:01:d7:
                    09:67:e9:22:c2:c8:f3:51:71:98:91:8f:16:9a:86:
                    fe:b5:47:73:b5:5e:de:a7:9b:c7:4c:65:f4:83:a9:
                    33:09:da:e6:1c:d8:d1:b2:f1:de:6f:11:a7:84:86:
                    11:c2:af:09:1d:b8:d4:59:3f:a5:f4:18:8e:02:ac:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E5:22:F8:81:CE:EA:29:8A:18:48:50:B6:F2:7A:6E:BA:09:FC:EA
            X509v3 Authority Key Identifier:
                keyid:81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/NOUi-IHO6imKGEhQtvJ6broJ_Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:af:66:08:56:fd:0e:1b:27:c4:a6:a2:9a:b4:9b:cc:0f:46:
         40:75:55:97:7b:4c:c6:a7:78:af:46:78:48:7e:d7:5e:53:be:
         67:6b:f0:4a:d9:e5:be:ca:26:62:76:17:b0:28:eb:8d:6f:01:
         30:8f:18:fb:15:94:1b:92:ed:62:c3:0e:e5:cd:cf:d1:10:b6:
         ff:4e:d6:87:d4:0f:61:25:0f:6f:d5:5c:c0:ad:5c:3c:b4:6b:
         91:89:5a:8c:51:70:75:24:e8:ad:99:e8:47:fb:ee:4b:da:5a:
         7c:55:54:11:14:94:d6:3f:ab:74:0e:20:b6:38:43:f0:94:d3:
         1c:15:a1:c8:2a:59:21:74:3f:32:e2:5e:83:54:ce:5f:d7:bf:
         0c:e0:c0:78:92:ca:69:7e:e6:f4:ee:2e:b1:a6:51:d9:53:37:
         cb:bb:3a:92:7e:29:55:50:76:84:1e:2d:8a:e0:10:ca:99:af:
         8d:3c:17:18:08:c3:ef:45:35:3b:18:e8:85:bf:71:95:13:2e:
         05:fa:f9:a7:d3:b4:e7:96:98:86:a8:7d:29:94:4a:85:20:51:
         a1:00:97:43:66:c2:0f:65:ca:f4:84:bc:b7:5f:cd:46:f8:b4:
         9a:82:dd:8b:c7:97:78:7c:3a:11:4e:28:fa:d8:4b:ea:5b:2e:
         55:75:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:32 2025 by rpki-client