Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
File:                     E3yF2Eiheb8smGPJm6UbeodcVtI.roa (raw, json)
Hash identifier:          +R52vOTBiNRtSNMMw439QaYUn3GZuHNIlvuXij3pLbo=
Subject key identifier:   13:7C:85:D8:48:A1:79:BF:2C:98:63:C9:9B:A5:1B:7A:87:5C:56:D2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0250
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
Signing time:             Fri 01 Aug 2025 01:28:39 +0000
ROA not before:           Fri 01 Aug 2025 01:28:39 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9371
IP address blocks:        133.167.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:39 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=137C85D848A179BF2C9863C99BA51B7A875C56D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:7f:42:5a:cc:31:e7:46:0c:5d:d1:42:c9:
                    7a:a9:34:48:be:e4:54:0c:ea:48:e4:2b:5c:4d:80:
                    9f:a7:ef:56:c5:30:28:1d:50:06:e7:90:fb:a9:7f:
                    55:4b:e0:6a:ac:f4:ca:f0:98:f9:fc:40:44:7c:94:
                    15:b4:5c:1a:07:c5:77:ad:92:09:68:a7:59:9c:17:
                    88:96:05:42:16:20:9e:f8:84:e3:25:65:ff:56:21:
                    55:6a:68:a2:60:b3:d7:18:50:1b:b1:0a:c3:b1:b3:
                    13:8c:e2:d7:b5:bc:92:7c:73:fd:32:fe:e1:ac:fd:
                    b2:0e:df:af:e8:8f:a6:bd:71:26:7f:8e:89:35:46:
                    e8:85:c8:30:ec:9b:fe:61:7f:ee:e9:94:2e:05:75:
                    a1:d7:4d:a5:97:5a:dd:a3:5c:d5:2e:cd:85:c3:6a:
                    68:35:64:54:07:6e:f0:0a:54:f7:e5:16:0a:31:85:
                    e1:cd:f2:0a:fe:4b:91:ac:d1:2d:11:21:2a:2e:8c:
                    7f:34:b0:42:a5:65:1f:cb:ca:b3:d1:b9:f4:c5:7e:
                    23:fe:4e:0f:2c:4f:b1:a1:c6:00:af:0b:a4:20:84:
                    1d:44:4d:2d:e7:e5:a3:03:6b:c3:1a:f4:ad:73:9f:
                    b2:43:69:4c:e1:a5:d3:0e:fd:be:88:58:78:51:71:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7C:85:D8:48:A1:79:BF:2C:98:63:C9:9B:A5:1B:7A:87:5C:56:D2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3yF2Eiheb8smGPJm6UbeodcVtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:b8:0c:94:10:b5:d4:08:7a:38:47:76:2a:73:f5:cb:7e:
         c4:0d:b0:b0:27:af:ad:57:aa:19:99:8f:1c:24:50:0d:95:07:
         3f:b7:c3:8f:a7:da:18:d4:dc:37:36:27:ab:26:b2:e5:5d:67:
         de:27:be:be:80:87:b1:de:7c:c6:89:38:d6:3d:24:c4:b2:c9:
         93:1b:2c:14:51:8a:6b:dd:5b:f1:1a:17:d4:1e:7d:ef:0e:f6:
         24:3c:9b:3b:2a:bd:a9:df:23:30:36:e1:cf:55:34:54:74:4d:
         f9:f4:b7:48:3c:81:fe:1b:f8:46:c8:0a:06:5c:26:aa:ea:f1:
         65:78:74:d4:bd:12:04:e4:0c:3c:e6:77:7e:9b:e6:d6:0e:c5:
         ba:e2:5b:cb:d7:df:54:78:11:18:6e:25:bf:e9:88:12:26:89:
         ed:6d:d7:93:a9:56:6f:1b:e1:1c:a9:e3:f9:3b:d3:c7:1d:4f:
         55:bc:9e:1a:ee:74:8e:de:b8:5e:18:8c:60:23:52:56:98:c7:
         21:33:d2:ab:66:dd:3d:2a:1d:74:ff:66:d0:62:e9:53:61:e1:
         86:a2:da:9b:1f:48:f1:2a:ad:31:e8:16:36:4b:51:0b:65:35:
         72:2e:db:6f:95:cf:cd:d6:4b:47:ce:e1:24:7e:ad:b9:cd:a9:
         c4:46:e5:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:17:24 2025 by rpki-client