Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dWoFbcKhHqjJRYXX6CslBarQi7Q.roa
File:                     dWoFbcKhHqjJRYXX6CslBarQi7Q.roa (raw, json)
Hash identifier:          gtdjAG9tHa7nKIsBHhMmF+l/GxzLTvEKZntbf+jXMF8=
Subject key identifier:   75:6A:05:6D:C2:A1:1E:A8:C9:45:85:D7:E8:2B:25:05:AA:D0:8B:B4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0265
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dWoFbcKhHqjJRYXX6CslBarQi7Q.roa
Signing time:             Mon 01 Sep 2025 01:29:14 +0000
ROA not before:           Mon 01 Sep 2025 01:29:14 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:14 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=756A056DC2A11EA8C94585D7E82B2505AAD08BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:c5:7b:b5:74:2a:d7:a0:59:9a:b9:e4:80:
                    1a:d3:41:35:16:a0:96:79:21:dd:22:60:84:5e:74:
                    ee:f9:78:95:bf:ed:47:56:75:1c:32:e9:d8:0a:01:
                    1d:37:5a:bd:f3:bc:7f:36:99:5f:aa:a8:53:9e:ed:
                    38:ee:88:87:7a:aa:09:30:91:35:e6:cf:1d:89:95:
                    85:05:89:c0:d4:f8:ee:9a:06:5e:bf:37:6c:cd:d7:
                    17:59:2e:92:65:a1:63:d3:04:99:d4:83:32:4b:c0:
                    17:8e:01:84:96:13:15:b1:b4:e9:44:04:64:df:c5:
                    73:83:c0:4a:9b:0a:91:6d:98:3c:0e:c0:94:85:8c:
                    15:05:de:e0:f8:2d:9b:1d:bd:e0:10:c2:06:0e:6e:
                    4a:d2:b5:00:a8:f1:b1:99:e7:0b:60:f1:12:61:7c:
                    8e:0b:56:04:36:b0:b8:87:75:29:f1:d4:dd:b7:84:
                    bf:37:00:38:40:82:4d:01:50:e4:07:ca:eb:ca:5b:
                    d0:de:da:b9:7d:dd:b2:83:b0:12:89:20:7b:57:e9:
                    b2:41:b1:6b:08:28:12:95:0c:f7:63:95:2f:36:31:
                    0b:ba:b0:12:3c:3a:9f:7a:ef:78:7e:d6:91:d1:2c:
                    e4:95:e2:ed:42:a3:3f:25:03:81:1e:b4:c7:2b:b4:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:05:6D:C2:A1:1E:A8:C9:45:85:D7:E8:2B:25:05:AA:D0:8B:B4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dWoFbcKhHqjJRYXX6CslBarQi7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:44:0b:01:c9:89:f7:16:a7:82:74:f7:6a:3b:53:fb:35:c2:
         f3:37:e7:4d:0a:0d:a6:d3:18:06:e7:f4:9d:34:b0:36:17:93:
         fb:5d:bb:2b:5e:6f:0a:40:cf:7d:12:07:8c:02:75:74:55:aa:
         50:27:64:17:0b:0e:3a:4e:80:86:29:23:c0:10:0b:2d:86:97:
         f3:21:61:28:6e:83:79:43:c3:e4:5f:86:cb:34:64:9d:6a:ec:
         a3:14:e6:1a:1d:14:d6:28:f3:b8:1e:22:5e:8b:b4:3e:ab:c5:
         ce:6e:bf:71:d6:28:d9:4e:bc:a8:b2:31:89:fe:85:44:f7:7e:
         3e:ae:ca:74:9f:4d:2b:30:7f:71:6f:ae:12:f9:1c:9f:61:74:
         76:f9:86:23:f8:fd:b7:31:54:9d:7f:48:ea:e2:6a:1d:79:0c:
         9e:34:85:0c:1f:47:c7:a4:20:44:27:60:a8:82:5c:7d:d8:97:
         86:63:bc:df:56:7b:8f:47:86:91:a6:a6:ac:1b:a9:6a:ab:8b:
         98:8b:8e:37:44:ae:70:e2:b6:76:d5:dc:bd:a7:c7:76:26:1b:
         32:c1:c6:f6:1f:f8:38:50:e0:ac:ae:9c:6d:a7:b6:6e:fe:47:
         18:67:53:84:c9:5f:d1:0f:a5:95:ba:6b:12:3a:4a:77:db:a9:
         13:a6:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:44:53 2025 by rpki-client