Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa
File:                     JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa (raw, json)
Hash identifier:          8+vo5IF7IAJcBRRMfobsE1oIyMdnOG6lysoJuzNrA4I=
Subject key identifier:   26:7A:44:54:48:B4:80:B2:A4:57:5B:42:3E:21:8F:14:CB:47:D2:B7
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       44
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa
Signing time:             Wed 01 Oct 2025 01:28:20 +0000
ROA not before:           Wed 01 Oct 2025 01:28:20 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     55385
IP address blocks:        133.247.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Oct  1 01:28:20 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=267A445448B480B2A4575B423E218F14CB47D2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ac:7a:ce:fe:58:78:2e:de:f0:ce:c4:74:
                    67:58:50:0d:17:80:22:f0:10:c2:34:61:e1:07:43:
                    1f:31:b2:2d:73:41:6b:94:8d:bc:1b:f2:33:7b:bd:
                    27:9c:74:d5:dc:2a:57:94:d1:72:b3:74:a1:c1:83:
                    a8:9a:11:b1:d1:d9:21:f2:eb:50:42:25:84:1d:ae:
                    9e:b3:62:9e:8b:5f:d5:8b:71:f2:01:b2:ec:18:5d:
                    7a:ec:aa:72:38:73:f6:e4:8e:d2:69:37:86:84:83:
                    72:32:9d:8b:bc:de:3e:e9:aa:44:24:5a:1d:f3:0e:
                    09:47:25:5c:01:08:fc:e3:ea:11:51:08:a9:28:25:
                    dc:60:3d:ad:d4:a1:94:c1:1a:5a:79:7b:99:9c:26:
                    b9:7a:ee:13:7a:cc:0e:d0:f8:6d:da:a0:61:ee:51:
                    74:39:8e:b6:e7:a7:82:7c:ab:9d:5c:56:ca:ed:84:
                    f9:3b:fc:a6:d8:dc:5f:97:22:19:2e:a4:93:94:cc:
                    5a:99:68:3b:8d:91:2b:c3:29:09:dc:65:55:e3:3a:
                    82:d7:0a:1e:98:89:04:1d:bf:45:20:4d:39:43:ad:
                    46:4a:79:44:41:5a:7a:bc:51:5e:6c:ff:fc:66:33:
                    74:df:83:b1:c7:8d:82:f5:7e:df:0a:12:b6:99:7c:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:44:54:48:B4:80:B2:A4:57:5B:42:3E:21:8F:14:CB:47:D2:B7
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:ea:ea:4d:a9:e1:6b:ec:24:5c:fe:86:e3:3a:cf:d8:af:
         91:6c:88:c2:b7:fd:d5:a2:db:47:30:4b:86:7b:00:3b:b7:b6:
         05:7a:c4:eb:c6:e0:1b:50:fd:09:50:23:24:42:cd:ab:16:eb:
         50:39:0b:98:2d:95:bc:78:e3:59:03:bf:51:5d:4e:41:e1:aa:
         b3:a3:2b:7f:24:ee:f5:d3:66:a9:14:ef:5b:cb:eb:89:9d:00:
         8a:41:9c:be:3c:50:45:c6:2d:a2:33:d3:98:75:c1:ff:18:f5:
         e9:88:7d:ff:ab:a6:bc:c9:17:63:24:2a:65:81:db:d6:17:94:
         d0:09:d7:51:a1:f0:0f:40:b1:cf:31:ec:13:6c:54:ad:b7:ec:
         30:9a:60:54:0c:89:66:39:d8:95:2c:89:29:03:36:3d:cb:43:
         c3:86:62:3f:db:26:04:6e:79:63:9e:17:94:48:44:46:c0:0d:
         9e:94:9f:81:37:93:15:00:af:2b:69:86:80:ea:23:97:fe:a6:
         82:0d:3d:7a:36:fd:c3:bd:ed:ff:c3:c6:25:ab:50:d3:d9:f8:
         42:fa:11:09:e6:3a:21:f3:3b:94:a9:42:aa:4a:28:58:42:c1:
         b5:5f:2a:a0:e4:86:0d:53:c0:79:d0:18:89:ca:f6:61:98:4a:
         aa:e7:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:23 2025 by rpki-client