Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qwF_BiGllmXlv6wXdgpSnq_4mXo.roa
File:                     qwF_BiGllmXlv6wXdgpSnq_4mXo.roa (raw, json)
Hash identifier:          i1LeH78/sAdYyAvZPJ6+DTnLITSsKP1cLSqRQtv4hnA=
Subject key identifier:   AB:01:7F:06:21:A5:96:65:E5:BF:AC:17:76:0A:52:9E:AF:F8:99:7A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0254
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qwF_BiGllmXlv6wXdgpSnq_4mXo.roa
Signing time:             Mon 01 Sep 2025 01:29:02 +0000
ROA not before:           Mon 01 Sep 2025 01:29:01 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:01 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=AB017F0621A59665E5BFAC17760A529EAFF8997A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:ca:0c:cd:98:f5:46:f2:89:32:ed:3a:8c:
                    4e:bc:fc:d8:d5:7d:83:e8:e6:d2:77:93:1a:05:3d:
                    2f:c4:e1:51:9b:85:42:9e:07:67:c2:a9:13:15:b2:
                    7a:82:e7:d9:64:0d:00:bd:73:5d:8a:16:c7:d3:19:
                    5a:3d:df:23:fc:b7:31:91:19:11:e7:a1:c0:99:9c:
                    88:44:fc:2b:6a:e8:f0:f7:23:bd:00:8d:66:93:9f:
                    74:f1:bb:d4:8e:38:d7:e8:80:e4:90:15:b6:2a:cc:
                    60:b6:8a:f3:2d:41:65:cd:8f:16:93:94:8d:fb:74:
                    d2:94:1a:fb:0b:56:7d:1f:b4:51:76:f1:5b:3d:d1:
                    05:83:30:47:b7:f5:18:3c:74:eb:95:ad:79:91:43:
                    44:e6:e4:d1:29:29:67:2d:5f:37:ac:d6:22:78:e8:
                    b9:4e:1c:49:93:f8:06:77:ac:6c:87:40:1f:fa:fa:
                    a3:a2:92:34:40:b0:db:68:21:94:75:d5:15:d6:7e:
                    0b:e8:bb:4d:fc:c2:7a:82:08:ed:83:36:50:04:ea:
                    6a:38:4a:56:a2:32:19:22:3f:f8:5d:b0:e5:5d:1c:
                    db:b4:44:9f:84:24:1b:5b:ef:ca:4a:87:12:66:72:
                    b3:15:08:65:26:6a:f7:6a:02:c4:4c:bc:5d:8a:75:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:7F:06:21:A5:96:65:E5:BF:AC:17:76:0A:52:9E:AF:F8:99:7A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qwF_BiGllmXlv6wXdgpSnq_4mXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:da:02:6d:ba:81:8e:20:25:08:44:43:17:cf:8d:71:9c:90:
         f6:67:53:7f:e1:bb:b8:36:a3:96:59:ca:e0:0c:70:58:84:a6:
         60:ef:c7:b4:99:3b:8d:32:a8:0f:3a:cc:c0:ef:76:84:22:a4:
         67:d2:76:72:24:66:82:bc:03:0b:ff:7f:31:3e:46:b1:e4:10:
         6d:b4:5b:d6:08:bb:c9:aa:7b:aa:69:db:3a:e0:23:bf:b0:40:
         70:c2:19:81:1c:64:eb:70:8e:33:f4:f7:13:e0:38:e6:7f:b2:
         36:e9:87:29:fd:0f:2b:a6:db:9c:cf:bb:46:f0:64:ba:40:2e:
         53:10:37:0f:06:d9:78:6b:30:6a:5a:27:f0:cc:38:d3:5b:06:
         d2:ce:c0:5d:db:ad:ff:cc:2c:c9:39:66:0f:92:1d:b8:d7:04:
         50:2a:d3:7a:f0:87:ec:19:50:84:d3:89:34:b9:bd:7e:80:a5:
         be:d9:70:47:55:79:92:de:87:8d:00:6a:ac:b1:f9:42:88:ce:
         bf:93:40:0f:79:84:a2:09:88:e7:f2:8b:0c:89:51:f7:f3:6d:
         0f:29:ba:fd:c7:8b:62:a2:5c:3a:c7:de:77:0f:ed:cd:9b:17:
         60:84:a9:f0:6b:4a:27:25:29:9e:b5:ab:b0:e4:a5:41:73:fd:
         0e:dd:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:03:00 2025 by rpki-client