Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
File:                     mZUMqduKynIs3cpAyNZYQr4qDsE.roa (raw, json)
Hash identifier:          SwnCLF0+WVK36UYf4ZLjkYxjn5hy7mFwrjCp/LVVZto=
Subject key identifier:   99:95:0C:A9:DB:8A:CA:72:2C:DD:CA:40:C8:D6:58:42:BE:2A:0E:C1
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       39
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
Signing time:             Mon 01 Sep 2025 01:30:15 +0000
ROA not before:           Mon 01 Sep 2025 01:30:15 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        133.88.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep  1 01:30:15 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=99950CA9DB8ACA722CDDCA40C8D65842BE2A0EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:d5:2c:16:70:4b:3d:06:c6:85:44:c5:5e:
                    2b:72:f2:21:98:a0:f6:5f:34:c8:48:25:54:0f:ba:
                    19:16:bd:50:c6:c6:77:fc:46:66:0c:17:d8:d5:8a:
                    d4:67:20:aa:3f:14:41:ae:84:8a:31:31:11:67:6a:
                    79:e2:e6:52:6f:7e:bb:29:d2:f3:74:92:ae:cb:84:
                    76:a6:60:53:9c:c8:61:9d:7f:b1:21:ef:65:94:46:
                    70:37:7d:23:55:55:2f:6e:a0:de:33:9c:e5:85:a4:
                    fe:a7:93:c2:39:77:24:d0:5d:15:81:20:7f:37:27:
                    41:b3:9a:04:bf:3e:f2:b3:3e:a1:f1:60:52:17:49:
                    a0:35:34:88:ee:93:8a:41:da:a0:fc:e1:86:5d:12:
                    a3:35:de:cc:7d:30:02:a9:ac:3a:b2:c8:32:55:ab:
                    de:6e:f2:9a:53:44:6c:e9:23:11:b2:b3:7b:b9:c3:
                    a9:48:98:04:22:f5:4a:73:e3:7e:1b:05:17:1d:17:
                    57:d4:07:fd:ab:94:a2:94:e6:06:c2:56:37:d1:cf:
                    c5:b4:8b:0a:bb:48:e4:fc:c2:5b:08:8a:66:f8:88:
                    68:ac:52:59:a8:bd:91:01:33:5f:2f:b5:59:c8:ee:
                    c2:2d:5c:09:dd:c1:cc:7e:f1:4e:b8:c8:f8:9a:2c:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:0C:A9:DB:8A:CA:72:2C:DD:CA:40:C8:D6:58:42:BE:2A:0E:C1
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/mZUMqduKynIs3cpAyNZYQr4qDsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:0c:97:32:eb:a0:67:c8:ae:a4:f5:0e:8d:1b:1e:7f:4f:
         6d:61:5b:fd:40:7e:3e:87:cc:31:67:30:fa:e5:7b:f6:31:4f:
         de:0b:b9:ab:e3:c9:c8:6c:b4:dc:4e:18:af:98:8d:a1:60:8a:
         ee:d9:31:23:7a:65:a9:e4:4c:7b:71:4c:da:d2:fb:6b:43:cf:
         bf:2b:b7:92:9c:a7:6b:ce:23:7e:9a:42:f6:11:58:0d:d2:ed:
         16:ce:c3:ce:35:fd:f7:84:d6:d0:7f:68:15:33:c1:e4:c6:64:
         03:71:c9:f6:56:96:ca:70:44:82:3d:76:2b:1e:22:a3:5b:5a:
         80:6f:92:50:5c:88:a3:40:9e:c4:20:b5:c3:f8:a3:d1:6b:c5:
         56:19:53:50:65:5f:0f:b4:44:53:54:34:86:42:c8:fa:84:9a:
         47:36:3c:9d:d6:65:a9:35:2a:aa:88:c9:a6:ce:54:f0:b1:fe:
         b7:3c:72:45:ef:d7:2d:b8:28:ff:de:05:6e:23:ea:f1:ca:3c:
         5c:f1:5d:6b:7c:bf:36:8b:ba:52:f6:c7:82:65:c1:31:72:9b:
         06:e6:e7:90:4e:4a:f0:e2:38:e4:95:5c:a9:31:69:b8:c3:3d:
         d4:8e:27:f9:8e:91:be:bd:f1:5b:40:eb:cc:80:73:36:69:1a:
         49:cb:b1:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:42 2025 by rpki-client