Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/kTorv00EPredTahsseVweqYnos4.roa
File:                     kTorv00EPredTahsseVweqYnos4.roa (raw, json)
Hash identifier:          Lp7w1Q5Ipqk7pbnXkoNQCzSHLQ3O8I6vZ4yuZDVjhRs=
Subject key identifier:   91:3A:2B:BF:4D:04:3E:B7:9D:4D:A8:6C:B1:E5:70:7A:A6:27:A2:CE
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       33
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/kTorv00EPredTahsseVweqYnos4.roa
Signing time:             Wed 01 Oct 2025 01:31:54 +0000
ROA not before:           Wed 01 Oct 2025 01:31:54 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18278
IP address blocks:        103.92.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct  1 01:31:54 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=913A2BBF4D043EB79D4DA86CB1E5707AA627A2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:39:db:87:7d:d9:6b:17:1e:a4:81:d3:57:
                    67:28:28:01:7f:4f:8c:6b:3b:cc:62:f5:b0:18:73:
                    47:a0:9d:53:64:ec:73:c3:4e:69:14:d1:c0:f0:19:
                    44:24:21:74:c8:60:b8:61:95:8d:24:17:e0:c7:0b:
                    25:88:93:ec:1b:b9:f4:73:c7:1a:dc:a3:07:a0:4d:
                    66:9d:04:89:dd:99:ca:ec:7a:17:5a:1a:da:7a:c2:
                    3e:22:b0:03:f7:8d:59:0b:86:c6:82:94:88:ff:ce:
                    34:2c:d1:26:09:98:e1:4e:fe:a3:c1:e9:d5:4c:40:
                    37:9f:de:e6:4a:c1:f3:78:7f:1f:3f:b3:f5:c4:6f:
                    6f:be:0f:a5:83:52:72:97:83:20:78:2c:00:19:f7:
                    6c:ad:dc:26:e2:94:b6:36:fd:de:de:3e:4a:1a:3a:
                    3c:fd:7c:3d:e3:e8:c6:da:fd:6f:dc:b1:e7:34:ab:
                    30:82:77:f5:95:24:eb:30:5a:ed:61:66:c1:44:a1:
                    24:83:00:4f:17:a9:4e:0c:33:d9:27:92:85:fd:08:
                    af:22:b5:f6:05:fe:09:c8:8c:2c:2a:df:23:64:db:
                    e0:58:94:b7:de:7f:8a:66:53:09:d5:84:6e:31:de:
                    69:d1:2e:c5:a1:6d:0b:56:1d:37:cf:be:4f:e5:57:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3A:2B:BF:4D:04:3E:B7:9D:4D:A8:6C:B1:E5:70:7A:A6:27:A2:CE
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/kTorv00EPredTahsseVweqYnos4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:39:9a:24:35:fd:74:c3:ac:f3:93:5f:cd:75:1c:a2:34:
         29:15:e9:ec:d5:5f:d4:2a:02:4d:fc:49:33:6f:f8:28:cb:77:
         65:19:2c:4c:b6:ec:e0:11:f6:39:f2:35:22:63:a6:84:d3:2c:
         c6:58:a0:95:30:7e:63:e7:f2:9c:4d:a5:bf:3a:2c:e5:ad:f1:
         74:47:17:b3:84:5a:94:47:eb:bf:9a:43:06:9a:f3:5f:ca:92:
         fa:ac:d7:62:00:3a:69:61:c4:9f:02:9e:44:0f:0c:0e:a2:98:
         a4:3b:8b:71:14:5e:81:4f:3e:c3:1b:76:9a:32:cb:52:06:0c:
         1e:02:a0:7f:46:ac:e3:c1:95:21:8d:75:f8:45:73:fa:8f:95:
         2f:9d:9e:d6:6a:15:19:9f:d7:fd:0f:00:cd:a4:6a:13:a3:c1:
         a0:89:ed:1e:61:cd:28:67:16:ea:d0:97:ee:21:41:c7:d7:e0:
         56:0f:58:5b:01:17:ed:ec:fd:13:a6:e1:99:bb:d5:7e:bf:e5:
         ce:b3:70:16:0b:00:1c:54:a1:22:ef:4c:95:29:4c:ec:e6:0f:
         ed:d6:75:1b:f9:66:b5:c5:55:c3:54:7e:15:3a:c2:f7:a7:09:
         da:22:2c:35:bd:71:12:e3:e0:4f:0b:a8:d1:f8:70:bb:69:e0:
         a1:95:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:17 2025 by rpki-client