Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/tUbdeXbrttkBYDcUxP5p9arNoh0.roa
File:                     tUbdeXbrttkBYDcUxP5p9arNoh0.roa (raw, json)
Hash identifier:          Oyogm2fOwO/AC/V6y82B+G0OwHwPguMkjSAR/wu7c08=
Subject key identifier:   B5:46:DD:79:76:EB:B6:D9:01:60:37:14:C4:FE:69:F5:AA:CD:A2:1D
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       66
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/tUbdeXbrttkBYDcUxP5p9arNoh0.roa
Signing time:             Mon 01 Sep 2025 01:33:18 +0000
ROA not before:           Mon 01 Sep 2025 01:33:18 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.145.24.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:18 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=B546DD7976EBB6D901603714C4FE69F5AACDA21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:ab:c9:bb:91:8d:5d:94:8f:49:b6:86:31:
                    cd:2f:1a:8c:27:1c:c4:0b:04:a9:82:72:0f:bf:8e:
                    c4:45:5a:b7:fd:5a:e7:7c:c2:04:3d:31:5d:8e:aa:
                    73:62:62:bb:7e:26:1d:d2:c4:25:b8:fc:27:4d:5a:
                    47:e1:61:a0:83:a0:91:45:9e:be:27:37:4c:9a:1a:
                    c8:a9:bd:cf:7f:58:7d:75:75:ce:f3:f2:1f:0a:53:
                    93:5a:bf:86:e7:2c:ef:24:e7:f1:e8:0d:70:33:58:
                    d8:07:56:16:57:30:36:3b:20:08:18:36:02:ea:0c:
                    aa:9f:70:b5:fb:c6:8b:3d:7d:de:0e:6b:c3:f6:ac:
                    e6:06:11:c0:bf:f5:4d:1b:a3:27:3f:80:8f:f9:13:
                    e5:3c:ed:1c:6a:07:4c:46:3a:c2:03:bc:33:3a:34:
                    7d:3d:a0:e7:a8:8b:60:82:53:88:8e:e8:ed:8b:02:
                    0e:0d:4f:8b:d4:9e:0e:dc:6e:83:d0:6f:19:e4:35:
                    81:5e:bd:69:91:0f:49:97:0b:04:96:3a:11:3d:ed:
                    b0:20:48:f8:4c:58:4b:c2:34:3a:79:2b:b2:69:a7:
                    b5:36:61:41:21:e9:62:b8:fb:07:39:9d:98:59:b9:
                    00:62:f0:fe:11:66:11:c5:23:0a:9c:89:39:d0:da:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:DD:79:76:EB:B6:D9:01:60:37:14:C4:FE:69:F5:AA:CD:A2:1D
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/tUbdeXbrttkBYDcUxP5p9arNoh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:dd:e9:a7:e9:fd:1a:5d:ec:13:65:4e:59:6c:ac:48:51:
         e8:fe:67:e2:02:80:8f:a9:1a:15:9e:e6:7d:fa:2a:84:77:28:
         6a:8f:df:dc:3e:b1:d2:ce:49:6d:10:8d:9e:91:34:a4:19:1a:
         f8:46:4b:2a:5e:c3:94:64:5a:27:6e:c4:f3:26:91:b2:dd:30:
         1f:17:a6:f0:f3:c9:1f:ed:6c:f7:8b:de:bf:e1:6d:7a:91:8c:
         6d:74:95:ba:8e:c2:41:86:0c:e1:e6:ed:0d:e0:cf:cb:d8:84:
         58:45:29:4a:dd:55:ad:2a:2c:0b:7d:a1:e0:4d:e6:88:e8:29:
         dc:8c:b4:be:59:46:b1:e3:4d:c0:52:30:b6:0b:0a:f3:3e:28:
         fd:9c:48:a0:78:6a:68:2a:e4:7b:c9:f1:09:3d:81:2c:db:5e:
         cd:79:3a:4d:68:43:ad:78:e3:c1:f4:2c:94:5e:d5:f7:45:91:
         c2:b1:4b:0e:a1:b0:57:b4:ab:01:df:bf:31:cb:15:38:f0:8b:
         55:76:6f:54:d7:79:46:8f:af:dd:4f:b7:ba:03:87:17:c3:ff:
         17:55:74:e3:88:ba:9a:75:2a:b6:39:26:1d:1a:2c:ea:16:e6:
         45:fd:4e:74:76:26:8d:2f:a5:e9:8d:39:1c:ec:2c:b8:da:89:
         70:7f:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:20:30 2025 by rpki-client