Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jqYVkx97uG1MP5WxXglDj5WtU10.roa
File:                     jqYVkx97uG1MP5WxXglDj5WtU10.roa (raw, json)
Hash identifier:          qpw6UxmFO0nD/8FBjzP0YhGdim/pEgOEaUJY80ayj0s=
Subject key identifier:   8E:A6:15:93:1F:7B:B8:6D:4C:3F:95:B1:5E:09:43:8F:95:AD:53:5D
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       8D
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jqYVkx97uG1MP5WxXglDj5WtU10.roa
Signing time:             Tue 10 Jun 2025 10:50:51 +0000
ROA not before:           Tue 10 Jun 2025 10:50:51 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     38631
IP address blocks:        203.104.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:51 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=8EA615931F7BB86D4C3F95B15E09438F95AD535D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:14:12:59:1a:33:fb:b3:e2:a4:cc:d0:18:
                    2c:57:cb:03:a4:e1:65:32:a1:9f:22:69:cb:54:1f:
                    74:4e:89:5e:5b:7d:65:1c:8a:9c:87:7a:61:a5:77:
                    4d:41:79:08:65:1a:fd:f6:66:b3:1d:e8:07:23:b0:
                    88:b4:13:63:14:48:98:65:03:10:2d:16:16:ec:93:
                    a8:be:aa:6f:40:5d:fc:f5:26:17:3f:6c:b2:8a:01:
                    96:62:b8:c4:b3:e9:b5:60:65:c0:f8:02:d6:82:91:
                    8c:56:38:09:79:3d:d3:2c:4b:80:73:1c:e0:5b:f9:
                    46:6e:c1:56:03:0f:8f:9f:bd:84:34:46:2a:38:6d:
                    9e:e9:98:c6:3b:11:b1:17:41:78:72:e7:f1:bb:7c:
                    ac:17:76:ef:b7:52:8a:f8:91:5d:8b:58:12:c3:11:
                    b0:ef:e2:d4:a5:b7:7e:e2:b4:58:7a:8e:01:b5:c2:
                    ac:bc:52:36:38:3e:6e:0d:8f:fd:03:f7:c2:15:e2:
                    1d:74:c0:cf:47:da:21:b4:d5:7a:cc:42:a1:e4:da:
                    9e:b7:42:b3:e4:47:96:ad:4e:89:c9:1e:31:18:58:
                    5b:cd:33:7f:a7:2e:e4:af:18:8f:cf:39:21:1d:aa:
                    00:bf:dd:47:8e:f2:2e:a8:c3:78:97:f7:aa:08:aa:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:15:93:1F:7B:B8:6D:4C:3F:95:B1:5E:09:43:8F:95:AD:53:5D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jqYVkx97uG1MP5WxXglDj5WtU10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:cb:bb:8a:a0:f2:46:8d:f2:65:8f:7a:90:49:ad:08:14:
         b1:7c:52:8b:75:bf:f0:a0:a7:25:44:c2:e0:46:b7:22:d2:8b:
         04:35:74:02:5f:35:37:d5:76:20:13:2f:bd:3e:f2:67:1e:01:
         c4:08:0d:40:86:7d:e4:ba:ba:f2:01:3a:71:76:96:bb:6f:5a:
         7e:3b:16:46:fd:e8:2d:ae:fe:01:77:30:a4:2b:23:ae:d7:d3:
         83:91:85:09:82:f3:ca:b5:89:36:b8:63:23:9f:d8:46:d1:4d:
         cb:3b:aa:f6:e2:83:29:66:0e:a4:42:be:33:86:87:f9:60:df:
         df:65:f0:65:22:0d:12:2c:79:dd:27:54:23:4e:de:0d:07:7b:
         70:2a:8e:5c:64:80:60:c0:cd:78:4d:fc:65:07:b9:6f:4c:c3:
         e1:9c:68:0f:73:fb:56:a4:78:49:28:08:c4:9a:fd:bf:33:fd:
         5d:51:6d:85:8e:75:af:b0:23:d5:d3:df:b2:bf:96:10:ef:e9:
         e9:d9:ed:6f:bc:9b:39:65:f7:76:dc:d3:42:c8:32:0e:5c:16:
         7d:5f:97:63:0a:d4:84:d1:2b:2a:b7:47:e5:76:15:50:ae:a1:
         d8:87:45:1e:24:a7:42:41:1a:a4:6c:ae:3b:8f:4a:cb:a4:03:
         97:83:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 19:02:09 2025 by rpki-client