Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
File:                     IKMpfJ1buva90jHKeigYuGnsKFM.roa (raw, json)
Hash identifier:          eU3H4B6blasU1u2HSbdO/asDsUM49opuKvXXVOLRI5c=
Subject key identifier:   20:A3:29:7C:9D:5B:BA:F6:BD:D2:31:CA:7A:28:18:B8:69:EC:28:53
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0464
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
Signing time:             Mon 01 Sep 2025 01:38:25 +0000
ROA not before:           Mon 01 Sep 2025 01:38:25 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep  1 01:38:25 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=20A3297C9D5BBAF6BDD231CA7A2818B869EC2853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:26:97:91:10:1f:e5:a9:1f:6a:8e:25:a5:
                    b4:d9:2b:1b:0f:3c:6f:b9:65:d4:bc:5f:b2:af:51:
                    2b:7a:b4:e1:8b:e8:48:38:0f:12:29:39:f3:da:96:
                    93:05:9f:02:9a:e5:b3:c6:60:b7:c1:be:ab:d3:da:
                    9a:f5:4a:ee:19:bc:36:f2:4d:b7:f3:e4:ab:07:85:
                    42:8e:0c:2a:bb:29:8a:c3:55:a7:75:f4:2d:6b:94:
                    e1:64:2d:61:62:e3:1c:e4:b9:5e:c1:e8:a3:5a:2f:
                    8c:81:47:af:d9:f6:89:c0:78:ec:5c:ea:c4:89:69:
                    61:5e:93:0d:d1:ba:fd:41:8b:35:f8:40:80:68:a9:
                    76:e6:82:22:c6:59:d0:9d:87:80:26:6a:5b:1d:11:
                    ea:73:7c:25:34:85:e5:6c:53:d0:02:36:ef:4a:6c:
                    f1:7d:13:79:93:52:a3:0f:71:b2:17:33:ba:d0:59:
                    11:a6:ea:52:9e:c0:f9:6c:ed:4c:05:45:61:e7:5b:
                    36:1b:5d:e9:56:d6:7c:4d:0d:d7:fb:ec:48:e6:ba:
                    e6:ac:2b:35:53:3d:7f:63:e1:64:6b:7a:af:6c:24:
                    e0:81:d8:0e:3f:a8:ef:c1:cf:8e:b9:1d:26:a1:c6:
                    0d:58:de:e6:6d:c6:9e:31:10:48:d3:63:a2:6a:27:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A3:29:7C:9D:5B:BA:F6:BD:D2:31:CA:7A:28:18:B8:69:EC:28:53
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IKMpfJ1buva90jHKeigYuGnsKFM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:62:38:b1:92:72:9b:cb:c5:7e:dd:ac:8a:11:68:08:35:42:
         5a:4f:5c:fb:bf:60:ad:55:dd:ab:25:e3:06:e8:64:ad:13:54:
         ac:f3:07:bc:9d:88:5f:eb:e3:6b:13:9c:5f:17:2a:ed:98:8a:
         18:79:28:92:69:98:e1:a1:a0:75:f5:fa:cc:06:d1:ce:c4:9e:
         53:24:25:c1:dc:22:c5:2d:15:24:4d:40:82:3e:63:67:4b:74:
         b1:64:6b:ef:a1:3a:e8:48:4e:11:55:41:bb:4a:3c:eb:df:55:
         1e:4f:fb:58:56:ea:53:76:98:36:ce:44:fb:3c:78:58:d1:35:
         c7:63:e6:9d:f2:ef:19:fe:ba:83:f1:ea:41:d0:a5:8b:08:5c:
         c9:db:d2:59:4b:04:15:3d:1e:e0:76:b3:65:a4:1f:fc:70:61:
         59:41:6c:6a:96:31:ad:94:d8:1f:0e:50:30:f6:e9:b5:9f:7d:
         00:90:76:c4:1a:71:cb:83:8e:1b:56:d6:d9:1b:c4:48:db:df:
         a6:30:56:97:e7:8e:d1:65:9e:50:ab:6e:10:22:2f:c9:32:26:
         55:f7:33:bf:a9:3c:d8:c2:89:8b:ad:ef:c8:b2:be:97:46:6a:
         a0:a3:04:c8:7c:31:4a:51:47:ac:e0:a4:33:f2:77:50:3c:79:
         d3:fb:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:12:34 2025 by rpki-client