Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/GI8XLErSQrbTzXWZDhZVixYUS8U.roa
File:                     GI8XLErSQrbTzXWZDhZVixYUS8U.roa (raw, json)
Hash identifier:          vRuLrD9I7WNQGjEm594teOOCxjwPizgQOOwE/dOkRc8=
Subject key identifier:   18:8F:17:2C:4A:D2:42:B6:D3:CD:75:99:0E:16:55:8B:16:14:4B:C5
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       53
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/GI8XLErSQrbTzXWZDhZVixYUS8U.roa
Signing time:             Mon 01 Sep 2025 01:29:53 +0000
ROA not before:           Mon 01 Sep 2025 01:29:53 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 09:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Sep  1 01:29:53 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=188F172C4AD242B6D3CD75990E16558B16144BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4a:8b:80:79:40:ab:e7:b9:76:ee:71:7e:b4:
                    49:a1:a4:cd:15:54:28:85:c9:32:fe:54:84:77:bf:
                    d9:3b:63:21:dd:bf:79:60:99:18:32:3d:03:93:e8:
                    46:c9:97:4f:b1:95:c9:b7:97:6b:e3:6b:4a:43:af:
                    ff:24:d7:47:cc:9b:08:82:10:1a:28:b4:cc:29:2d:
                    a6:5d:d0:b8:b3:57:e7:98:b6:a8:d2:06:63:2e:d7:
                    4a:3f:e9:d3:35:58:75:a5:96:59:05:4f:37:a7:69:
                    4d:14:64:c3:75:d1:98:87:bd:12:25:d6:a2:c0:55:
                    f1:08:28:3a:2f:ca:75:25:46:2f:11:0b:5d:55:d0:
                    f0:bd:4a:41:dc:cc:bf:a1:49:51:c9:12:d3:e1:bf:
                    9a:f3:6f:f8:15:56:24:54:b2:7f:9a:ff:db:bd:08:
                    67:8b:b6:70:7a:d0:84:c2:6e:0f:0e:f6:b7:1c:5e:
                    38:10:25:a2:b9:41:59:25:1c:9f:e1:b1:c8:19:48:
                    fb:be:d6:b4:99:e5:bd:40:4f:1d:ed:d5:ff:7c:79:
                    b6:83:1d:f9:83:0c:5d:1f:31:a7:78:5c:a7:4e:1b:
                    b6:17:6d:1a:ee:fb:58:8e:31:78:ef:64:2e:b9:2e:
                    1e:da:93:6c:3e:a1:6e:cf:bf:1e:42:fb:10:b7:7a:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8F:17:2C:4A:D2:42:B6:D3:CD:75:99:0E:16:55:8B:16:14:4B:C5
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/GI8XLErSQrbTzXWZDhZVixYUS8U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:85:7e:9e:d0:df:b3:d3:27:3b:69:5b:68:9d:53:c5:48:56:
         4a:ce:45:0d:a4:eb:f4:d7:37:2d:da:88:e2:4a:49:65:88:1a:
         80:15:68:33:56:9d:ad:c1:60:29:99:1a:63:0e:b7:e4:f5:d5:
         09:98:d5:8a:e2:69:7f:26:26:b2:0a:93:f1:34:4e:c5:bb:d1:
         8f:93:23:09:18:6b:4c:68:01:58:33:0c:5f:4c:95:df:e3:bc:
         1a:f2:4e:4a:0b:99:3d:17:d0:d1:61:86:6f:94:55:f7:6a:cb:
         24:e4:cd:24:d5:d8:de:fd:4e:d7:ab:ba:8d:ea:5e:ad:79:a2:
         e9:96:e7:1b:59:14:9d:4b:a5:51:7b:9a:47:2e:ef:53:35:5d:
         1a:17:ff:22:23:46:85:50:8d:e1:2c:81:b0:ea:68:be:7d:0f:
         29:8d:60:ac:14:89:33:d6:93:0c:2e:4d:27:dd:f1:bb:d2:70:
         42:3f:d1:2b:03:88:70:7d:25:24:23:d6:0a:c8:e0:11:99:6d:
         6f:cb:d1:15:2c:a8:09:d5:f9:bd:09:4e:8d:8b:5a:a7:39:9e:
         c9:a1:a3:8b:10:dd:87:14:89:c4:d7:3b:f0:53:0b:6a:2a:d4:
         63:d8:f6:db:40:fa:7a:5f:b2:e3:e1:67:e1:c1:fe:74:26:48:
         04:99:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:45:10 2025 by rpki-client