Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wVwO-lUYvoLKL2gj1BHhShuw8ko.roa
File:                     wVwO-lUYvoLKL2gj1BHhShuw8ko.roa (raw, json)
Hash identifier:          eu627SCg6cADw00f92fAOY7i1gRxjJDuw3qv1TVOqXw=
Subject key identifier:   C1:5C:0E:FA:55:18:BE:82:CA:2F:68:23:D4:11:E1:4A:1B:B0:F2:4A
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       43
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wVwO-lUYvoLKL2gj1BHhShuw8ko.roa
Signing time:             Tue 01 Jul 2025 01:32:46 +0000
ROA not before:           Tue 01 Jul 2025 01:32:46 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul  1 01:32:46 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C15C0EFA5518BE82CA2F6823D411E14A1BB0F24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:b3:b8:50:96:ca:07:49:e5:d0:a7:cd:3b:
                    a5:0f:d1:78:2b:09:03:6c:4b:b8:45:ef:23:5d:9d:
                    1f:78:da:65:14:36:64:f2:68:a7:76:f8:00:0f:51:
                    d8:4b:d9:a2:ea:37:1b:d9:9c:01:24:f1:ba:83:8f:
                    e0:d7:db:bd:82:a1:a9:8a:e5:42:5c:e7:a2:01:7a:
                    e9:97:42:94:1c:c3:b3:14:fb:81:4a:5d:e4:a9:1a:
                    5a:f7:87:01:2c:73:9d:8d:5c:d6:c6:51:c8:0d:46:
                    d3:61:26:1a:da:4b:73:4a:31:25:38:93:2d:d1:0c:
                    f4:23:57:5b:7d:70:46:c8:c7:eb:0c:76:7f:b0:89:
                    7c:10:b5:9b:47:61:31:8a:02:55:1b:f6:57:09:e9:
                    6a:f4:10:97:8d:86:9e:15:6f:9d:29:03:46:b7:58:
                    ab:fe:3f:b6:c9:6e:9c:c9:7f:7b:a9:a6:b4:3a:0f:
                    6b:45:c2:74:0f:28:6c:52:6e:78:36:73:8e:32:51:
                    79:fc:a8:b3:7f:08:ae:43:12:ec:70:0f:47:3d:68:
                    72:9f:e0:43:0f:78:9c:c5:9e:98:6a:a7:67:bb:f0:
                    9d:c2:67:61:f4:54:a7:48:28:0c:69:86:ca:fd:e8:
                    f0:a1:bb:76:8e:b0:4f:a5:a7:e6:1c:67:86:90:27:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:0E:FA:55:18:BE:82:CA:2F:68:23:D4:11:E1:4A:1B:B0:F2:4A
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/wVwO-lUYvoLKL2gj1BHhShuw8ko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:49:e6:11:02:c0:de:5e:46:f6:a9:07:7c:27:5e:fb:d2:f5:
         e7:50:3d:f4:88:cf:f7:8b:16:d7:c4:f9:87:d0:df:80:8d:b4:
         d4:2c:7b:6d:0d:6b:62:ed:63:23:ef:ab:ad:2d:b8:80:27:19:
         45:ed:05:19:aa:0d:e9:73:e5:f8:dd:62:8b:ad:2d:9e:d8:c0:
         1c:c6:b8:05:42:f8:88:a3:6f:d2:3f:6d:fe:c0:f8:fd:f4:17:
         27:0c:84:23:c9:21:a5:36:f5:1f:24:b0:9e:0a:7a:73:8a:18:
         0c:e6:78:52:02:0f:23:5e:c5:c9:f6:b5:d3:fe:64:70:20:f2:
         72:e8:3b:24:f8:03:f7:c8:25:d9:e6:6f:31:37:50:c0:bc:37:
         ea:20:80:05:77:23:c0:9d:09:6e:02:b3:a9:04:1d:42:eb:8f:
         44:01:f6:96:1e:8d:94:0a:5f:7d:63:7f:15:eb:e5:42:bc:4c:
         2d:b1:d9:06:eb:5a:51:8b:7a:6c:21:03:b1:c6:f1:f0:97:d9:
         c4:20:e2:b6:63:42:6a:64:d1:13:c6:e2:95:58:81:2f:d5:e1:
         7f:a9:cf:96:82:10:06:36:fc:29:9b:5f:4f:8d:63:c5:96:89:
         e8:3a:b7:b6:69:e6:47:f2:ac:22:d3:14:d7:0d:90:1b:ad:4c:
         fd:f4:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:03:55 2025 by rpki-client