Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8pHUS4lwXU7NtzvaexhQoV7N5qg.roa
File:                     8pHUS4lwXU7NtzvaexhQoV7N5qg.roa (raw, json)
Hash identifier:          QYtQjNVp28H/4A6E0hwPfz4dJqsmOAbTLINutHHPQ0c=
Subject key identifier:   F2:91:D4:4B:89:70:5D:4E:CD:B7:3B:DA:7B:18:50:A1:5E:CD:E6:A8
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       64
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8pHUS4lwXU7NtzvaexhQoV7N5qg.roa
Signing time:             Mon 01 Sep 2025 01:29:00 +0000
ROA not before:           Mon 01 Sep 2025 01:29:00 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        160.27.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 02:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Sep  1 01:29:00 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=F291D44B89705D4ECDB73BDA7B1850A15ECDE6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:82:a1:4b:6a:3b:b1:91:5c:02:f6:7d:ac:1e:
                    ae:34:8f:48:a4:46:fb:6d:3d:4d:d5:db:24:ca:18:
                    ef:45:34:d4:f1:70:86:6f:09:61:7f:2e:d8:02:2b:
                    41:5d:31:1b:d8:97:2e:df:cf:5c:7b:fe:36:27:bb:
                    b6:29:2e:71:1d:c3:21:5b:ca:8c:33:90:c0:49:86:
                    2f:e7:fe:47:8b:c3:19:03:f8:e7:0d:cd:62:e3:fd:
                    6a:43:cd:32:c8:1c:bf:41:92:b4:48:b7:ba:e5:68:
                    71:9b:b0:a6:10:f8:d1:8f:e8:b8:e3:c7:79:59:54:
                    84:01:2f:1c:e0:75:ed:d8:a0:03:7b:af:f7:41:a4:
                    6e:f5:09:0f:42:57:8f:10:28:81:20:e5:5c:4c:bf:
                    c3:97:37:31:85:4d:d2:8a:a9:74:14:3f:92:d3:b1:
                    67:0a:38:0c:c1:33:ee:86:6e:72:bb:c6:8b:62:fa:
                    cd:35:57:49:2b:af:f4:9e:f7:27:6c:07:f8:d2:52:
                    4f:c5:11:c6:20:f6:1a:bd:5e:92:52:3f:c3:96:25:
                    76:cb:0e:be:10:31:f9:51:85:f5:d8:af:e5:48:31:
                    a4:66:7e:3d:9c:09:a1:38:16:86:f9:e1:63:e6:24:
                    3c:09:e6:2f:94:07:55:32:e8:a5:54:b3:6e:6a:4e:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:D4:4B:89:70:5D:4E:CD:B7:3B:DA:7B:18:50:A1:5E:CD:E6:A8
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8pHUS4lwXU7NtzvaexhQoV7N5qg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:a2:6d:b4:f1:c1:91:5a:0b:b1:42:f0:2d:48:06:a4:c8:10:
         91:ee:df:8e:c5:57:9a:1d:be:8a:de:8e:2f:d5:ff:82:b9:e3:
         b5:88:2a:3d:e6:7a:68:02:2d:76:0d:d9:55:33:38:54:89:7e:
         86:78:bf:08:c6:a7:47:3e:0d:d9:9e:6b:e2:e3:f1:81:db:1e:
         70:c6:68:c3:94:b4:d8:41:ab:52:5b:82:9d:c3:8f:35:83:38:
         54:65:8e:cd:2a:4a:27:bc:bc:82:65:89:95:53:cf:f1:79:1f:
         6b:69:00:57:6f:83:2b:f5:68:5d:af:b9:29:6d:7f:42:10:36:
         f6:15:ca:62:06:d9:2f:c6:6a:e9:6b:54:2d:37:96:a8:22:b7:
         14:f9:75:4a:71:f5:48:ea:2c:9f:c5:81:c9:bf:ad:6b:7b:9c:
         92:86:78:87:5e:db:22:dd:c0:ce:a4:2b:8a:ae:aa:c6:62:b5:
         92:e6:26:44:e9:b4:0c:73:2d:49:94:53:90:ee:d2:72:2c:4a:
         df:9b:f1:ed:3d:fd:e9:44:9b:f2:e5:31:72:21:f9:70:b0:a4:
         29:8e:26:30:2b:2b:80:58:dd:7b:1e:9a:05:87:68:d7:57:0d:
         8c:8a:9a:9e:d1:5e:45:ee:ed:6f:e7:c8:c6:be:93:49:5c:18:
         85:cb:d0:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 10 09:13:19 2025 by rpki-client