Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/d3mbVMN0Qzqh-2QxkObue-IY_a8.roa
File:                     d3mbVMN0Qzqh-2QxkObue-IY_a8.roa (raw, json)
Hash identifier:          T1rUIoEzbES/C5loyS6Rr3VmP6dDR+wucwIlJBa4jV0=
Subject key identifier:   77:79:9B:54:C3:74:43:3A:A1:FB:64:31:90:E6:EE:7B:E2:18:FD:AF
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       24
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/d3mbVMN0Qzqh-2QxkObue-IY_a8.roa
Signing time:             Thu 19 Jun 2025 05:03:10 +0000
ROA not before:           Thu 19 Jun 2025 05:03:10 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        210.79.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:03:10 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=77799B54C374433AA1FB643190E6EE7BE218FDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:db:df:d5:d0:01:d0:76:8b:9f:ab:71:33:
                    12:9a:8e:b5:2a:25:f2:37:84:aa:91:f1:34:27:f2:
                    82:82:09:e4:d1:1a:fa:02:0e:19:d3:f0:dc:d0:91:
                    18:df:83:d2:ee:25:bf:43:8c:43:64:e0:71:07:31:
                    9b:98:21:56:db:ae:c1:7c:87:7e:0c:28:a2:e1:91:
                    1a:91:36:d3:d2:cd:d6:0d:0d:79:f9:d0:f5:cc:3d:
                    be:98:e7:15:63:50:71:5f:20:0b:da:0f:58:5c:c4:
                    f8:5a:b6:d1:45:84:21:fd:c4:a7:c6:7d:6f:0b:15:
                    5a:04:df:c1:7d:4c:5c:8d:dc:8a:17:28:6e:a6:f5:
                    a0:62:f3:a2:e3:8c:52:82:a4:42:41:40:42:8b:c0:
                    7d:74:26:74:17:fc:56:7c:c4:b4:9e:4e:c8:f2:30:
                    90:36:23:65:6b:90:79:fb:3c:d5:5b:49:df:0b:90:
                    09:e1:da:5a:6f:36:dc:87:7b:f7:29:e3:c3:20:b2:
                    cf:be:a4:bf:31:22:fc:9c:e3:8f:01:18:51:a3:66:
                    54:96:e4:7c:63:2d:60:e1:9e:41:f8:96:b0:46:a3:
                    8f:29:b2:37:eb:9b:4e:f2:52:8f:9e:6b:ee:5d:f5:
                    3f:d9:c6:0e:2d:49:3e:ef:a1:f6:83:af:b7:d0:0a:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:9B:54:C3:74:43:3A:A1:FB:64:31:90:E6:EE:7B:E2:18:FD:AF
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/d3mbVMN0Qzqh-2QxkObue-IY_a8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:8b:1d:ec:6a:4e:3c:ae:c6:53:86:2c:3f:ac:fb:31:ba:e0:
         5d:9c:dd:bc:89:34:06:ef:10:4e:41:78:1a:21:8e:98:86:e1:
         db:d5:7f:5d:63:9a:53:ae:88:61:c5:42:85:b5:05:e0:80:03:
         d0:5b:55:83:d7:27:5e:f8:58:e3:f4:c7:a6:6b:81:10:bc:7e:
         c7:40:8b:9f:83:46:bb:6d:e8:0f:e9:d5:22:2f:88:92:2a:2b:
         ee:40:1b:53:af:13:da:bf:7d:f9:90:9e:1e:62:d9:4a:35:1c:
         a2:de:96:1a:cb:ae:f8:74:e6:43:f6:b1:22:16:a3:f4:ca:b7:
         2c:2a:c5:41:5a:22:8d:fe:59:f0:b5:08:27:fa:c5:0a:fe:42:
         11:b4:3b:17:b1:ba:0b:e9:d2:f6:d6:eb:7a:3a:23:cf:13:9b:
         f6:7d:82:44:c3:3c:2c:f0:1f:53:ef:67:85:7c:22:80:e8:37:
         b4:d9:d4:f2:3f:00:bb:91:04:c1:f3:68:2c:ad:9c:cf:cf:a8:
         4a:e2:00:e6:92:6c:d9:9c:bf:f3:48:8c:2f:29:db:ff:f7:28:
         b2:a9:bc:6d:8f:c7:29:b5:ce:b3:35:7f:41:d7:9f:b2:e6:d0:
         9e:77:1f:19:72:f6:33:51:cd:10:79:14:9b:c4:e2:12:d1:ce:
         84:1c:1e:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:48:04 2025 by rpki-client