Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rhn1szzlHvHnRfwTlcFgRiBPdPY.roa
File:                     rhn1szzlHvHnRfwTlcFgRiBPdPY.roa (raw, json)
Hash identifier:          b3wyBqtXxuavIp49RCL2gE2y/Q+Xkoif3vdoPZnz+t4=
Subject key identifier:   AE:19:F5:B3:3C:E5:1E:F1:E7:45:FC:13:95:C1:60:46:20:4F:74:F6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0267
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rhn1szzlHvHnRfwTlcFgRiBPdPY.roa
Signing time:             Mon 01 Sep 2025 01:35:14 +0000
ROA not before:           Mon 01 Sep 2025 01:35:14 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        182.163.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:14 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=AE19F5B33CE51EF1E745FC1395C16046204F74F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:74:54:d3:eb:9b:ad:09:24:1d:37:3e:34:
                    1c:36:17:7c:c1:af:65:fb:c2:5b:b5:92:1c:f0:52:
                    52:09:cc:62:bb:ea:96:93:6e:e6:4e:d5:74:a1:0a:
                    36:75:d8:3b:8b:0f:29:af:fa:a2:3a:d8:b6:82:10:
                    a2:9f:62:09:23:f6:1f:79:ee:97:b6:35:e8:9a:5a:
                    19:e9:f4:27:8e:0f:44:75:51:4a:ef:84:a1:a1:35:
                    ca:3a:b9:c3:a6:ee:b1:f9:64:50:6d:4d:d3:70:77:
                    5d:80:9a:5b:f7:ef:4d:27:ae:8a:5c:ca:9a:c1:6f:
                    95:70:f6:8e:1a:04:c5:3d:9f:91:16:7c:cf:50:3f:
                    29:ab:85:a9:e9:0a:84:0a:08:1e:d1:5b:87:ee:58:
                    76:39:42:90:a0:7c:ca:26:4f:63:a1:36:96:72:11:
                    1e:ac:74:b0:12:8d:6e:2c:83:27:21:00:2f:27:5e:
                    e8:35:8e:c5:74:27:9d:93:6c:82:33:45:77:4a:15:
                    a8:31:bf:79:f4:63:24:53:9f:61:93:02:16:92:bd:
                    10:1c:51:49:20:6b:fd:ea:1f:9f:b5:0e:42:a7:ee:
                    50:a0:dc:09:c0:94:96:4d:df:40:00:a5:52:28:6c:
                    8d:24:37:3f:ab:06:6f:13:56:d6:43:9d:8e:95:1a:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:F5:B3:3C:E5:1E:F1:E7:45:FC:13:95:C1:60:46:20:4F:74:F6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/rhn1szzlHvHnRfwTlcFgRiBPdPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:b2:2c:4d:51:95:28:52:13:38:a2:10:e1:22:02:54:74:
         24:3f:69:cd:c1:77:d2:17:df:c0:fd:7e:97:e1:76:6f:de:56:
         78:71:4c:16:db:22:5b:d5:49:23:47:ce:93:90:39:82:4e:38:
         3c:16:70:97:80:fe:8c:86:89:51:75:72:af:10:6e:82:1c:d1:
         1b:5b:49:44:51:e5:0b:f1:e7:43:ee:97:91:f3:48:53:d5:47:
         00:f5:63:61:7b:84:5d:89:ce:ad:68:7d:16:80:c2:7b:dc:00:
         7d:6f:21:a1:06:ca:ff:83:15:11:e4:c0:ff:72:65:28:73:08:
         95:23:52:3b:8f:34:4a:b2:33:b2:03:f6:7f:df:6f:e4:83:33:
         09:4f:08:33:bc:48:2b:81:92:cf:65:a5:b6:c5:8a:d2:79:e9:
         a5:8f:72:06:df:e0:9e:2b:32:66:32:e8:3e:ed:0e:3b:9a:fa:
         e7:be:2b:03:ac:9c:da:6f:09:cc:ba:74:07:7c:06:0d:26:f0:
         60:70:37:05:eb:41:df:f7:32:c8:ae:41:8b:18:15:9f:8b:32:
         5e:88:d5:f7:ab:c6:69:84:2f:eb:f2:eb:2a:a6:50:83:e0:a5:
         0d:de:15:5e:ef:ff:99:92:84:da:a9:0b:54:81:80:91:00:87:
         b2:1e:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:11 2025 by rpki-client