Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa
File:                     knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa (raw, json)
Hash identifier:          M1jqaFxbgjOSnj64nCUZBx6+OJuaa7dzTUUC4g3spxs=
Subject key identifier:   92:74:2B:EB:3F:34:25:79:20:B5:97:7C:43:7B:33:F9:88:E0:F8:09
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       54
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa
Signing time:             Thu 03 Jul 2025 05:42:32 +0000
ROA not before:           Thu 03 Jul 2025 05:42:32 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4675
IP address blocks:        202.73.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Jul  3 05:42:32 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=92742BEB3F34257920B5977C437B33F988E0F809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:99:52:33:29:03:c0:a6:a5:be:b7:07:cd:
                    cd:82:6e:88:4e:eb:9f:f7:ef:48:90:50:f3:9e:23:
                    c8:7e:ce:40:c4:e4:84:1a:9f:10:2e:4a:c3:9d:0f:
                    a3:13:30:32:82:84:aa:11:44:52:a7:ff:c6:28:47:
                    b4:98:f0:bb:4c:54:72:fc:6f:8b:e4:cf:78:71:bf:
                    f7:6b:b2:7d:b1:89:ff:eb:b8:ef:17:42:36:a1:a3:
                    8e:ac:85:c5:4b:9b:b4:85:df:22:6d:34:45:67:c6:
                    52:f7:12:56:55:9a:69:34:dc:c9:da:dc:6e:7a:71:
                    2a:cf:2a:c0:18:7a:d0:42:62:29:c5:74:6f:76:b6:
                    d8:77:de:45:51:8e:8e:fa:fd:5c:66:f9:29:c9:0b:
                    75:f7:e6:a2:8a:c0:49:22:0a:b1:bf:4b:b2:fa:32:
                    19:56:c8:54:df:06:6d:50:0d:8d:8e:93:94:03:74:
                    07:5d:92:fa:ac:3d:77:e1:4d:08:7e:bd:cf:33:51:
                    7d:28:04:1c:fa:52:f1:67:fe:59:b3:c8:61:65:d8:
                    ab:9f:44:6a:4a:be:26:1a:be:32:43:90:43:db:b4:
                    c3:74:f3:de:23:dc:f5:98:dc:0e:5d:d2:82:a4:38:
                    a5:6f:70:84:f2:65:99:4c:22:eb:0c:5a:ac:c0:b8:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:2B:EB:3F:34:25:79:20:B5:97:7C:43:7B:33:F9:88:E0:F8:09
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:23:eb:28:43:e7:6d:23:b5:ca:ca:f7:db:78:b1:19:f2:
         52:83:02:34:15:02:f3:46:2e:50:04:4b:db:cf:1e:fc:48:81:
         a6:46:ea:03:99:e3:30:2a:f6:4c:e4:f8:be:a2:9d:65:93:93:
         96:9a:53:5c:a2:2f:31:ea:0f:dc:df:cb:b6:31:f3:97:8d:e3:
         2f:58:a4:5b:41:0e:ac:0d:a4:97:0d:86:99:6c:d1:df:5d:01:
         e4:3d:b9:52:ef:45:9e:94:d0:0a:30:31:2d:34:02:fa:67:b5:
         3b:21:a1:6b:38:c3:76:b9:77:71:79:fd:11:82:b5:d9:65:d2:
         48:8d:02:e3:f1:fa:f8:4c:cf:1e:0f:05:13:cb:cb:9f:10:d9:
         3a:0b:a5:89:1d:d2:89:e8:67:4d:71:e9:3c:e2:7b:d3:07:18:
         f7:19:9e:2f:2c:7c:f9:d6:49:4a:a8:f0:88:98:4e:10:57:ce:
         67:3b:a8:6c:a8:db:8f:7e:01:3c:b3:39:20:35:e9:4c:8e:e9:
         31:42:f5:78:f3:66:5d:4e:35:8f:f8:c1:8d:6e:3f:bc:89:a9:
         0e:8d:6c:07:4e:0c:37:30:8c:7c:ac:9c:c8:85:8d:64:dd:8a:
         95:90:d2:20:1b:bf:ab:9c:89:18:fd:fc:b0:80:44:c1:6e:f8:
         18:a3:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:40:56 2025 by rpki-client