Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/jHKCTpUAqhDeBXY2ABJvTIEwzm0.roa
File:                     jHKCTpUAqhDeBXY2ABJvTIEwzm0.roa (raw, json)
Hash identifier:          KHJssq5TGW0O2DVhPG+QOLdmXIMxowX4A+oALDtE48o=
Subject key identifier:   8C:72:82:4E:95:00:AA:10:DE:05:76:36:00:12:6F:4C:81:30:CE:6D
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       88
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/jHKCTpUAqhDeBXY2ABJvTIEwzm0.roa
Signing time:             Wed 01 Oct 2025 01:34:15 +0000
ROA not before:           Wed 01 Oct 2025 01:34:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7514
IP address blocks:        210.198.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct  1 01:34:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=8C72824E9500AA10DE05763600126F4C8130CE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:7b:06:1e:6f:ca:ed:54:c9:34:fd:86:06:
                    99:7f:23:de:ce:1d:62:3e:8b:4f:6f:80:2e:5f:e8:
                    5a:83:0a:7f:8e:c4:f8:c5:db:f1:26:a5:af:9a:2a:
                    c0:5a:d9:53:41:16:10:00:34:a9:d6:fb:26:8b:1c:
                    60:b5:61:52:64:c4:a9:16:df:b3:c1:b1:69:bf:e5:
                    4d:6f:b6:dc:00:77:52:50:44:9f:8e:bf:df:da:8e:
                    fe:76:d7:8d:10:0b:57:ad:8a:62:01:a4:82:56:96:
                    e3:d9:fd:58:00:a3:5c:66:67:cf:2d:0f:c7:0e:7f:
                    26:f5:66:e2:22:b9:4d:c1:0e:c2:21:b1:a6:7b:1f:
                    86:4e:77:55:9e:d3:03:3c:0f:e1:c7:19:be:78:fe:
                    58:bd:d8:15:15:a1:aa:44:a8:31:7c:57:39:73:37:
                    59:b5:32:e6:8a:10:fc:cd:d4:c6:d7:29:64:83:d2:
                    64:a7:cb:35:2f:5f:c0:f4:71:47:80:17:6d:c5:e3:
                    7f:08:42:dd:d1:93:f1:7e:1a:e9:47:1c:c5:17:48:
                    4e:bf:b2:80:7c:07:2c:fe:2c:9f:d4:39:75:47:f9:
                    9c:e2:8f:1a:6b:dd:38:4b:34:61:e1:c0:2c:71:b5:
                    c2:57:e8:9d:33:5e:1f:44:a6:45:1b:2a:b1:ba:8f:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:72:82:4E:95:00:AA:10:DE:05:76:36:00:12:6F:4C:81:30:CE:6D
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/jHKCTpUAqhDeBXY2ABJvTIEwzm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:28:fa:fa:52:b7:6b:89:d9:ca:7a:1a:8b:b3:86:1c:27:
         b4:59:34:16:c2:3b:3b:86:f5:c3:e8:45:67:61:70:c7:db:c8:
         fc:3c:98:01:15:8b:57:27:a9:09:5b:36:3c:12:09:c7:1d:d0:
         14:92:81:a1:9c:1d:d1:22:52:eb:12:f3:60:c1:c6:69:25:9e:
         dc:67:aa:e3:26:d9:3b:44:3e:df:f2:9e:99:11:ad:29:ae:04:
         b4:2b:56:31:0f:14:68:26:73:87:70:4c:78:70:5e:05:1a:ef:
         5e:75:2e:24:84:8e:b9:bb:3c:d3:25:54:fa:a3:f0:1b:db:73:
         ca:1e:0a:9b:17:f0:16:6e:16:61:9e:8f:70:3d:46:04:5f:c4:
         e0:3d:26:f1:6b:84:b7:13:a3:2a:ff:5e:10:b8:f9:d0:50:a6:
         35:8c:00:89:6d:43:03:1e:ef:ae:94:c4:ad:3c:0e:ab:fb:4c:
         3e:45:2d:4c:0d:9a:30:77:46:ea:13:4c:e7:4f:4c:c0:42:75:
         0b:88:89:7b:3f:12:76:fd:a0:a4:b0:e8:7d:cc:80:63:e5:a8:
         ee:09:df:ae:e5:73:0c:9c:99:bc:a9:ea:71:ff:1f:bb:60:df:
         78:f0:36:2c:f8:d6:a4:9e:71:65:32:5f:32:8d:e9:d7:88:c3:
         4a:1e:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:10 2025 by rpki-client