Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20098/wghH3pFHDcdVZB63cJZaX-PKgA8.roa
File:                     wghH3pFHDcdVZB63cJZaX-PKgA8.roa (raw, json)
Hash identifier:          PkEdWuf5SZj7o5WAo8nE/wDExC5MtekKNPmnzi34WtY=
Subject key identifier:   C2:08:47:DE:91:47:0D:C7:55:64:1E:B7:70:96:5A:5F:E3:CA:80:0F
Certificate issuer:       /CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
Certificate serial:       02
Authority key identifier: DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/wghH3pFHDcdVZB63cJZaX-PKgA8.roa
Signing time:             Thu 19 Jun 2025 06:15:27 +0000
ROA not before:           Thu 19 Jun 2025 06:15:27 +0000
ROA not after:            Fri 19 Jun 2026 06:04:14 +0000
asID:                     131982
IP address blocks:        103.140.118.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
        Validity
            Not Before: Jun 19 06:15:27 2025 GMT
            Not After : Jun 19 06:04:14 2026 GMT
        Subject: CN=C20847DE91470DC755641EB770965A5FE3CA800F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:9b:85:fe:7a:01:f4:7b:cd:60:fd:39:4b:
                    c4:00:ff:ce:9d:39:10:97:3d:d7:41:28:d8:88:6f:
                    d5:cf:73:e6:ea:a5:ca:b0:87:ef:3c:9e:ee:0f:7b:
                    26:3e:d5:f7:53:eb:76:a9:c3:a6:36:9c:66:50:ef:
                    6d:e1:56:ac:35:01:f3:18:20:6d:00:f9:9f:a5:1d:
                    4b:13:18:80:08:ab:9a:7f:ca:38:e4:e4:71:3b:7f:
                    f8:eb:56:0c:57:ea:6e:49:55:d9:36:09:3d:52:5d:
                    15:a3:60:5d:79:95:23:07:03:ed:f2:fe:f8:07:69:
                    f6:34:e1:8e:20:df:c7:05:8b:2c:30:57:3d:1f:20:
                    45:97:8c:1f:c6:56:d5:13:ec:17:4d:bd:5a:54:ab:
                    3b:bf:78:b0:6b:22:51:40:d2:b8:8d:a6:fd:a5:a0:
                    a7:ab:a2:f5:f1:7e:18:61:7b:6d:c3:91:9e:5c:8d:
                    3f:9e:14:e9:16:61:70:2b:5a:91:c9:72:2a:a5:7a:
                    91:ad:ad:97:8f:46:41:f5:38:8d:10:0a:85:82:d9:
                    43:10:ef:20:05:71:4c:45:ad:4c:5a:f9:f7:98:f5:
                    04:b6:90:a3:8b:1e:33:a1:78:9d:90:27:dc:2f:0d:
                    a6:d8:cd:b3:89:3d:1c:89:76:f7:df:cb:1d:fc:f2:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:47:DE:91:47:0D:C7:55:64:1E:B7:70:96:5A:5F:E3:CA:80:0F
            X509v3 Authority Key Identifier:
                keyid:DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/wghH3pFHDcdVZB63cJZaX-PKgA8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:c8:db:45:1c:26:f4:a4:4c:ff:28:93:dd:be:71:61:64:
         aa:6c:e0:23:68:a2:36:13:c6:1d:bb:f6:b2:f5:ef:fc:21:c0:
         73:92:11:fd:1e:d3:42:8e:da:7e:55:97:f3:5b:be:8b:d3:a8:
         e6:f1:70:89:47:ef:3a:a8:9a:2a:67:0f:51:a7:26:53:11:af:
         0f:52:f1:2d:3d:b6:34:2a:2c:87:46:53:84:33:43:3a:df:69:
         88:47:8c:67:ba:66:05:75:b6:9b:21:e9:18:6e:52:67:e3:e1:
         d2:57:e3:8e:3c:24:15:f5:f1:6e:a5:9c:39:0e:a7:03:33:ff:
         73:42:03:ac:3a:41:49:a1:e8:12:66:a3:83:00:50:3f:60:38:
         a0:1c:df:0b:66:03:0e:a2:f0:72:64:82:67:6b:08:21:6a:e6:
         6c:8f:6c:62:dc:08:ca:47:c0:1e:fa:ae:5b:c8:86:5c:dd:55:
         26:da:4d:b5:f3:11:60:8a:55:ec:60:2c:5f:f5:fa:38:15:91:
         5e:37:cb:ec:17:3b:01:59:13:e2:06:ab:f2:36:1b:b5:c5:de:
         02:69:c1:fa:d9:9a:14:d6:ed:d9:1d:79:f3:fd:b3:a1:72:c5:
         d8:1d:31:c9:16:a6:dc:de:3e:6a:b9:c6:de:d4:ab:9d:9b:2d:
         ff:c7:6b:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:12:24 2025 by rpki-client