Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/yuP4A5VlcGlma6_lhwqZ95yv2rw.roa
File:                     yuP4A5VlcGlma6_lhwqZ95yv2rw.roa (raw, json)
Hash identifier:          dB/vooaE9Erb1preHCfvcYGr2UEdXkHbyd6DGVe8+NI=
Subject key identifier:   CA:E3:F8:03:95:65:70:69:66:6B:AF:E5:87:0A:99:F7:9C:AF:DA:BC
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       49
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/yuP4A5VlcGlma6_lhwqZ95yv2rw.roa
Signing time:             Thu 18 Sep 2025 01:36:42 +0000
ROA not before:           Thu 18 Sep 2025 01:36:42 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        117.58.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 18 01:36:42 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=CAE3F80395657069666BAFE5870A99F79CAFDABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:4f:9a:1b:00:38:b2:14:b8:d5:69:55:23:
                    56:6f:58:b6:2d:52:c2:d5:49:bc:aa:09:d2:4f:48:
                    bb:41:2c:19:a1:c9:3f:7b:1d:48:f2:00:62:b2:35:
                    a2:d6:97:62:f8:3e:12:43:34:51:a6:6e:20:30:38:
                    f1:1f:98:f1:da:32:68:88:74:b4:fd:ab:4d:32:a9:
                    4f:be:fb:35:42:bc:59:fe:bf:41:e6:14:8a:40:98:
                    c6:60:c3:2c:00:38:cd:4b:85:e7:50:7f:a2:1b:a1:
                    33:88:cd:7b:a3:17:a9:18:6e:52:30:cc:81:ab:50:
                    09:01:48:3d:28:53:d0:93:c0:04:99:4b:a3:73:77:
                    00:b4:c8:4e:fb:8f:3a:6b:18:d5:ba:11:9a:2e:db:
                    43:fb:ff:e6:bd:50:80:96:79:06:be:54:d9:a9:74:
                    af:7a:ef:a4:9f:24:8d:36:bc:11:7a:b6:ee:80:7e:
                    e5:af:05:b5:5d:40:4b:9f:62:2a:84:51:49:e7:02:
                    4c:7c:e5:59:8d:79:f1:b2:ee:73:63:ee:5a:4e:45:
                    de:23:75:be:33:2e:33:ae:fe:05:dc:d8:15:b8:b9:
                    b6:99:9d:b1:ef:26:21:0d:7f:13:a3:46:45:4d:7d:
                    72:8c:78:9c:cd:af:49:02:3c:f1:05:a0:df:be:bd:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:F8:03:95:65:70:69:66:6B:AF:E5:87:0A:99:F7:9C:AF:DA:BC
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/yuP4A5VlcGlma6_lhwqZ95yv2rw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.58.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:80:48:ad:dd:61:76:cc:b2:aa:a1:00:3e:6e:ef:10:80:
         2f:af:c0:2e:a4:6a:b8:77:99:31:c2:07:0b:e5:d3:b2:93:70:
         1b:28:a5:1b:50:5c:bd:e0:94:70:76:df:5b:01:98:1e:18:4f:
         ad:ea:13:ce:a0:59:3d:63:20:50:8f:b7:a9:48:50:a7:19:51:
         7e:b3:3a:77:21:ff:da:34:70:de:63:84:12:69:cf:cb:0d:48:
         a7:8d:ee:45:af:2b:a9:1f:88:42:54:59:03:1c:20:b8:16:00:
         0c:4d:1e:e1:7a:a1:7f:a9:49:92:1a:8d:60:5b:6b:0a:ad:16:
         17:50:d3:1c:e6:a2:f3:63:11:6c:49:b6:5a:fe:c7:4f:ea:1e:
         52:80:28:8e:e5:f7:bc:b7:ca:da:42:f6:3e:33:c7:89:95:e5:
         ec:dd:62:7e:7a:f1:16:d4:7b:43:88:26:92:c3:bb:4a:8f:8d:
         33:9d:3a:62:34:91:7d:cd:e6:84:58:45:ec:60:ef:71:a1:86:
         63:32:df:e8:80:17:77:2e:bb:e6:31:41:a6:e9:ad:05:05:b7:
         c4:a3:7a:52:fb:1b:2a:ee:fe:85:e1:05:11:8b:1c:59:5f:03:
         e7:51:55:cf:91:b3:e5:a3:9a:0d:37:8b:8b:5e:b0:4d:2c:0d:
         d0:d8:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:36:22 2025 by rpki-client