Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/vpqLmM9mNR7UJcNiUR0fR0S0Huo.roa
File:                     vpqLmM9mNR7UJcNiUR0fR0S0Huo.roa (raw, json)
Hash identifier:          3LO2B3tXnP2Q+MQ2t7cGrQkgkTNaZFweac1Snv+cIDQ=
Subject key identifier:   BE:9A:8B:98:CF:66:35:1E:D4:25:C3:62:51:1D:1F:47:44:B4:1E:EA
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01F7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/vpqLmM9mNR7UJcNiUR0fR0S0Huo.roa
Signing time:             Mon 01 Sep 2025 01:29:23 +0000
ROA not before:           Mon 01 Sep 2025 01:29:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=BE9A8B98CF66351ED425C362511D1F4744B41EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7d:d2:30:bc:e2:05:f0:71:fa:08:42:f3:70:
                    04:e6:c2:a0:7a:10:ac:1d:d0:dd:c4:2f:34:14:4c:
                    60:69:c3:a7:aa:6d:3e:7e:d1:d8:25:03:02:ed:fc:
                    48:de:a8:95:95:b6:35:4d:35:e2:61:a6:ba:c5:7b:
                    a4:fe:1f:d6:a7:d9:14:b8:31:e0:d8:c3:19:ea:3a:
                    0a:ae:2e:12:db:84:e9:d6:65:91:c0:e2:5a:53:f7:
                    fc:39:cb:03:0a:de:89:eb:ac:70:2e:d4:97:c8:b4:
                    be:a1:27:b9:38:67:0e:34:b5:2c:c2:9c:99:8b:f0:
                    ff:e5:7c:ca:b7:24:d3:21:17:e9:e5:e7:c9:75:e5:
                    db:d5:60:ba:c9:4a:50:65:3f:61:4c:27:10:b7:74:
                    d9:7f:cb:0d:8d:98:3b:a0:77:07:6e:7b:45:05:ef:
                    8a:31:9d:d3:fb:2f:28:e8:fc:de:f5:f8:c2:46:8b:
                    ec:a0:68:95:c7:64:03:dc:da:22:8e:00:1b:cd:29:
                    ea:66:91:2f:b9:27:bd:84:ec:1a:93:b5:bb:05:5a:
                    f5:2d:8e:82:53:c1:21:26:00:5d:70:b1:84:5c:3f:
                    24:fe:8b:d2:f3:76:7e:1e:21:fa:f9:80:1e:6f:50:
                    fd:24:c3:7c:f2:e5:b8:bf:27:16:74:28:66:9f:f7:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:8B:98:CF:66:35:1E:D4:25:C3:62:51:1D:1F:47:44:B4:1E:EA
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/vpqLmM9mNR7UJcNiUR0fR0S0Huo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:e3:d6:73:54:7e:72:a6:8d:28:90:3f:dd:e8:2a:a1:35:
         e1:bf:4d:84:18:69:ad:ba:28:47:2d:c5:a0:f2:09:8e:ee:b4:
         92:f1:02:ed:0d:f2:de:70:df:0a:56:20:38:36:7c:31:36:af:
         66:b5:15:80:99:de:7b:09:43:d8:ae:42:ce:f6:9c:31:8c:44:
         f5:78:2a:d8:0e:dc:73:fa:6c:bf:03:13:b8:86:c3:c0:3f:eb:
         e1:14:84:b7:4f:14:b0:ca:72:3c:99:03:a3:21:8c:9d:07:44:
         c3:cb:22:85:f9:65:d7:bd:6b:de:8e:7a:98:94:69:4a:73:fc:
         0f:ef:47:c6:37:2e:fe:e3:39:16:97:de:6d:45:b6:ea:dd:2d:
         96:d3:9c:d2:aa:da:20:b1:be:3e:de:88:06:a9:dd:72:03:e0:
         0c:b3:95:da:e9:09:49:4e:5e:93:f1:f8:01:98:23:31:5d:48:
         de:ef:31:72:c8:bc:0e:bf:21:88:34:6c:0d:4c:18:70:c8:6b:
         5f:82:4b:73:0a:ec:be:17:ba:1f:dd:97:99:24:c1:7f:03:14:
         3d:2e:35:5b:2c:26:18:0f:0c:bc:5c:22:a9:1b:88:18:eb:47:
         f2:16:76:64:df:7b:bb:09:59:f2:9e:4e:49:a8:b1:7e:1a:d8:
         e3:fd:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:53:06 2025 by rpki-client