Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZX2wSzi74tnrlkBaBIA_AmyLWw.roa
File:                     XZX2wSzi74tnrlkBaBIA_AmyLWw.roa (raw, json)
Hash identifier:          p6amXBUbM7F12pNXKwLSjqUjSQowtgjDIUH+hwVhWCE=
Subject key identifier:   5D:95:F6:C1:2C:E2:EF:8B:67:AE:59:01:68:12:00:FC:09:B2:2D:6C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0460
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZX2wSzi74tnrlkBaBIA_AmyLWw.roa
Signing time:             Mon 01 Sep 2025 01:38:22 +0000
ROA not before:           Mon 01 Sep 2025 01:38:22 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep  1 01:38:22 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=5D95F6C12CE2EF8B67AE5901681200FC09B22D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:ef:8b:30:a7:88:f8:f3:1d:8c:75:1c:8c:
                    1c:bb:37:0e:5c:5f:c1:ef:75:5f:10:40:f9:46:b6:
                    50:1a:1b:33:78:bc:cf:15:91:3d:8d:5b:4c:58:9e:
                    cd:66:c6:71:09:0d:fb:89:8e:00:79:d1:1a:0b:ad:
                    11:74:23:13:b8:19:27:a8:33:46:9f:2c:75:4c:10:
                    9c:72:f3:a0:3a:96:39:32:e3:ca:5a:f4:fe:13:c2:
                    7c:1a:79:0b:75:1a:e5:24:ab:e2:1e:f9:a6:f0:a1:
                    e3:cd:81:2a:6a:c1:20:9f:99:85:14:b5:21:f7:23:
                    24:8c:33:a9:86:3a:18:5b:e8:d1:b4:51:a2:e8:92:
                    72:c9:86:20:7b:a5:1b:bb:50:d4:31:63:e5:b8:5a:
                    92:8a:de:14:56:0d:fc:33:45:f6:ef:cb:e8:07:c5:
                    84:e2:27:44:bb:f3:80:77:2d:bc:e5:aa:48:de:29:
                    07:6d:c2:2c:88:b2:50:3a:3d:c1:04:7e:67:2e:13:
                    95:de:5c:90:0c:a7:90:ba:41:ee:0d:5e:d4:2f:47:
                    99:74:98:6d:49:cf:99:a3:fa:f3:fa:78:b7:ca:f0:
                    20:6c:c1:92:2b:05:64:41:46:5b:ab:b6:ff:35:5e:
                    c8:03:ab:1f:cb:ed:b7:4f:7c:a7:60:30:57:89:ef:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:95:F6:C1:2C:E2:EF:8B:67:AE:59:01:68:12:00:FC:09:B2:2D:6C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZX2wSzi74tnrlkBaBIA_AmyLWw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:a3:c6:b7:ca:72:f6:43:29:f6:b3:99:66:94:31:d1:1c:
         7b:14:4e:50:06:ce:3c:63:f5:94:0d:4b:e4:bd:24:90:4a:04:
         67:57:db:b1:ec:2f:0b:b0:ca:2a:89:9b:ec:58:45:ea:c2:6f:
         6d:9b:79:3d:3c:75:da:43:ac:1c:53:d0:b0:6e:b0:d7:b5:af:
         65:35:0a:d1:ef:46:ab:6d:dc:8d:f3:13:94:b6:f5:1c:0a:d6:
         d6:e5:32:58:2a:88:e3:68:d6:cc:83:3d:5e:88:28:62:3a:88:
         78:1e:c8:74:37:9e:88:5e:75:cb:20:7a:84:20:e3:b1:5c:c7:
         9c:03:1e:2b:57:25:aa:5a:10:35:b2:e2:10:ce:da:d2:79:b8:
         a6:2a:5a:e6:06:85:fd:d7:94:f7:bf:fc:3e:9a:31:85:db:23:
         21:1b:cf:82:d0:fa:50:74:42:02:c4:82:ab:4b:80:e8:b1:1c:
         a2:7c:e3:00:23:b0:dc:12:ca:53:46:1c:2c:35:44:b1:49:c4:
         32:98:62:ab:ac:20:0a:da:b2:be:49:e0:98:3b:ec:4d:81:7c:
         30:fd:92:65:20:46:0a:d5:81:a0:2c:3f:3d:f6:90:f7:fd:71:
         f9:7d:8d:1c:e6:65:9c:95:4d:07:2e:49:5b:c2:6a:ae:d3:dc:
         2d:03:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:12:33 2025 by rpki-client