Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/D-MR3jmB3PVQOwhN0eTaRBw-Twc.roa
File:                     D-MR3jmB3PVQOwhN0eTaRBw-Twc.roa (raw, json)
Hash identifier:          CA3tMkOzpNIUwtMn24XNswDn0W0asSWIEozHWEJ8iFQ=
Subject key identifier:   0F:E3:11:DE:39:81:DC:F5:50:3B:08:4D:D1:E4:DA:44:1C:3E:4F:07
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       21
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/D-MR3jmB3PVQOwhN0eTaRBw-Twc.roa
Signing time:             Thu 19 Jun 2025 05:03:08 +0000
ROA not before:           Thu 19 Jun 2025 05:03:08 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        202.163.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:03:08 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0FE311DE3981DCF5503B084DD1E4DA441C3E4F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:71:4d:d8:36:18:bb:d8:a7:e2:e0:b3:0c:
                    f0:d7:43:aa:79:21:79:27:d1:af:b5:ea:ca:5b:0f:
                    d0:39:04:ff:04:c4:42:e0:65:cb:9d:34:9e:8f:cd:
                    54:50:c6:e1:42:a4:d6:38:62:ba:49:5c:84:3d:51:
                    f2:e5:97:45:9f:13:15:95:c7:c8:2a:19:10:ca:94:
                    49:e2:21:c8:d3:88:35:c5:13:90:9e:b6:27:00:78:
                    50:7f:cd:5b:ae:33:7d:41:bc:2a:06:b3:fd:cf:5d:
                    b2:e6:82:54:ad:5e:87:38:35:ea:af:ca:8d:6e:85:
                    88:70:2e:3d:6e:36:74:c9:af:43:1c:63:16:f1:59:
                    ea:49:42:99:9f:21:00:97:25:f6:0f:4e:11:a3:91:
                    a3:8a:e7:37:e0:e3:8d:81:cc:78:b0:71:35:7e:72:
                    57:82:2f:0c:ae:fb:3c:fe:28:15:1d:fe:6b:a4:4a:
                    65:0e:ab:42:55:6a:dd:92:58:18:f1:af:08:d2:3c:
                    18:06:90:3e:23:33:7b:f8:37:c7:3b:ec:12:32:bf:
                    91:b1:ba:50:e0:3c:ef:34:5d:fd:a3:cc:ec:49:41:
                    1b:42:44:ba:5f:f2:85:64:4d:50:f1:db:ed:ec:65:
                    84:17:98:6c:46:19:8e:79:f2:69:52:be:5b:25:b0:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E3:11:DE:39:81:DC:F5:50:3B:08:4D:D1:E4:DA:44:1C:3E:4F:07
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/D-MR3jmB3PVQOwhN0eTaRBw-Twc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.163.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:39:a4:55:2e:7d:ac:1a:70:d0:7c:dc:53:65:c7:09:44:
         09:1e:32:3d:02:93:46:e1:19:33:83:64:2b:12:17:10:f6:6e:
         b5:fe:ee:de:14:04:df:57:f4:b1:08:53:33:ae:3f:ce:9d:e7:
         21:6c:07:f2:bc:c5:c9:e1:2b:dc:90:67:92:69:f1:e1:eb:30:
         b6:26:b6:b5:13:8f:0d:33:de:86:61:f1:d0:75:5f:98:14:f8:
         a8:9b:07:ae:c7:b5:e0:40:21:cd:74:03:f5:49:53:00:7d:31:
         03:e7:c7:14:37:9e:49:59:b3:9d:11:45:ff:08:d2:6d:95:0c:
         6e:ee:58:e9:9f:f9:66:49:e6:74:a7:1e:4b:04:52:de:a6:a9:
         b1:4f:60:8e:eb:cb:29:d9:9d:b6:1e:76:8b:6a:96:fa:54:72:
         41:24:1f:6f:fb:19:7f:8c:00:0f:95:ef:ae:5a:f2:5a:9f:7b:
         62:29:02:ef:78:a1:32:d8:76:66:ce:80:fc:c4:da:03:97:98:
         8a:5b:7b:33:57:0f:60:cd:86:8a:a8:53:4f:fd:1e:52:5b:e9:
         ae:20:9d:b4:63:29:c3:d4:12:a5:3f:90:f8:40:67:fa:c9:d8:
         0a:3a:37:45:ef:38:ad:13:84:a8:aa:f2:f6:bb:00:11:89:23:
         f2:f4:c9:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:47:16 2025 by rpki-client