Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5729/AAGuofKfWODNDSUkbdUdnJawEac.roa
File:                     AAGuofKfWODNDSUkbdUdnJawEac.roa (raw, json)
Hash identifier:          dePIw0vwBePo6tVaHoqKibiReRgXe9UO9gdsWHMGWk8=
Subject key identifier:   00:01:AE:A1:F2:9F:58:E0:CD:0D:25:24:6D:D5:1D:9C:96:B0:11:A7
Certificate issuer:       /CN=0A007FEFD74356279C944B5F48CC036268C4962D
Certificate serial:       02
Authority key identifier: 0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/AAGuofKfWODNDSUkbdUdnJawEac.roa
Signing time:             Sat 04 Oct 2025 07:54:04 +0000
ROA not before:           Sat 04 Oct 2025 07:54:04 +0000
ROA not after:            Sat 03 Oct 2026 08:49:24 +0000
asID:                     152869
IP address blocks:        163.61.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A007FEFD74356279C944B5F48CC036268C4962D
        Validity
            Not Before: Oct  4 07:54:04 2025 GMT
            Not After : Oct  3 08:49:24 2026 GMT
        Subject: CN=0001AEA1F29F58E0CD0D25246DD51D9C96B011A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:43:6a:19:e3:4b:f1:06:94:79:bb:94:e8:
                    ed:0a:e1:fc:e0:89:5a:76:33:3e:b9:21:81:a4:40:
                    3a:d3:0a:5b:c5:6d:ac:ef:59:78:95:eb:ab:7f:0e:
                    79:15:41:cc:f7:f1:8c:03:66:aa:7b:20:ca:6e:89:
                    0a:3a:9e:88:0e:e8:fb:c6:51:63:d4:d8:9b:4b:47:
                    dc:a8:5f:41:2d:2c:6f:78:b6:d2:5b:78:22:1c:04:
                    1b:dc:8e:2f:82:67:ba:5b:6c:87:23:b6:01:cc:c3:
                    b0:05:cc:83:d9:80:a7:a5:68:af:e7:71:16:05:a4:
                    8c:ee:9d:4c:ff:0c:77:f5:15:b0:0b:76:f9:33:53:
                    97:87:71:8c:4b:68:a7:7d:3e:66:a0:21:b9:0b:0b:
                    8a:0a:49:34:15:67:21:cf:be:05:bb:16:5a:a1:57:
                    57:ad:e7:6f:e2:90:2e:ad:6b:a5:56:88:6d:46:ac:
                    bd:7c:1d:57:38:b3:a0:c2:e6:5d:ca:1d:b6:15:84:
                    40:fd:e8:5d:f0:29:97:d8:37:18:9b:b5:53:01:c8:
                    c9:7c:85:f7:14:55:20:e8:b4:3e:07:99:6c:e2:f8:
                    d1:90:37:fc:25:ec:48:55:fc:c5:7d:47:19:8f:1b:
                    05:6c:2b:81:b0:4c:e4:25:8c:6f:c7:d2:99:df:bf:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:AE:A1:F2:9F:58:E0:CD:0D:25:24:6D:D5:1D:9C:96:B0:11:A7
            X509v3 Authority Key Identifier:
                keyid:0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/AAGuofKfWODNDSUkbdUdnJawEac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:dd:fb:ee:c2:0a:64:50:9c:8c:62:cc:51:db:3b:46:50:
         c7:e1:3a:a3:8d:29:2e:3d:e3:9d:e2:57:24:24:0a:d6:88:03:
         14:bc:05:f1:50:37:73:12:ab:f3:20:89:32:6d:37:12:95:ee:
         36:6c:de:7f:0d:50:92:f9:e8:95:bc:93:5a:1c:54:4e:fd:9a:
         65:f8:8b:63:3b:9d:9a:06:1f:ec:11:fa:42:48:74:5b:26:5d:
         05:85:e2:49:89:b8:7e:dc:1f:60:fb:26:cb:33:8f:35:15:c3:
         26:28:ff:4a:5b:1a:2d:4a:a9:a0:54:39:ee:ca:f9:d4:c1:8d:
         69:99:e1:19:31:38:dc:09:e2:c8:c9:ca:42:3e:e2:7f:2c:bc:
         9c:0b:c7:e7:04:26:ae:47:cd:1b:b9:e0:98:c0:1f:55:3a:7d:
         9d:66:ba:bc:9a:26:05:98:ca:a5:aa:31:56:63:f3:b0:2c:55:
         b8:3a:e0:2a:e3:7a:d2:2f:98:97:94:da:ab:6f:8e:a8:aa:2c:
         c7:da:18:87:4f:92:5f:8b:e0:81:a4:e7:e7:29:18:a1:d4:d0:
         04:38:22:a0:32:a9:4c:56:5e:22:b6:ed:c5:93:59:bc:2f:ad:
         13:27:96:9b:7c:5a:15:c9:9b:51:a4:ff:09:b0:a1:67:49:59:
         b1:1c:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:34:32 2025 by rpki-client