Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ufJU44qyB6nA36wnGCwOs4vig7E.roa
File:                     ufJU44qyB6nA36wnGCwOs4vig7E.roa (raw, json)
Hash identifier:          /Rh5w9nk42S0872H1rmYxQBlXLizxAoxQ+qltFiQKIE=
Subject key identifier:   B9:F2:54:E3:8A:B2:07:A9:C0:DF:AC:27:18:2C:0E:B3:8B:E2:83:B1
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       22
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ufJU44qyB6nA36wnGCwOs4vig7E.roa
Signing time:             Thu 19 Jun 2025 05:03:09 +0000
ROA not before:           Thu 19 Jun 2025 05:03:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        202.226.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:03:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B9F254E38AB207A9C0DFAC27182C0EB38BE283B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:9f:e4:34:20:9e:ab:b6:e9:64:81:be:94:
                    97:09:35:5e:43:30:9e:9b:be:c1:c2:c8:9a:0a:40:
                    1b:5b:78:f8:15:8d:5f:30:74:a2:94:ae:39:cc:b9:
                    c8:47:5c:a4:76:b2:13:c6:62:29:9b:e9:bc:e7:1e:
                    2e:ad:af:45:d1:5a:4a:10:28:5c:3c:2d:fb:3f:7d:
                    50:c1:6d:52:1a:46:49:95:9e:85:57:22:d2:d4:61:
                    9d:26:89:59:16:79:1c:75:be:ed:a2:1a:d2:78:a6:
                    ca:2d:3e:18:bb:eb:a1:e9:c2:37:f5:6e:ba:48:90:
                    7a:ee:91:96:be:c4:38:e5:0d:c7:d0:48:a6:94:af:
                    2f:ea:6f:1f:b5:42:c9:23:af:8d:b9:e8:15:70:aa:
                    b8:ad:b1:7e:ca:da:be:e1:75:b3:0c:d8:64:16:0f:
                    f2:89:c3:4f:b4:1e:26:3d:02:19:cc:1f:82:36:29:
                    dd:28:fc:63:14:06:31:ee:ab:e1:8f:c6:97:0a:9b:
                    1a:f5:b5:6d:5a:ad:e6:eb:9e:d1:2d:72:ee:d2:28:
                    40:45:ea:74:68:eb:b9:18:c5:df:b1:61:95:c4:52:
                    f5:36:cb:39:d8:bc:c1:17:e2:89:3b:e6:0a:6c:2f:
                    95:aa:58:90:f8:f7:68:d3:21:bd:63:f9:b6:9a:7a:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F2:54:E3:8A:B2:07:A9:C0:DF:AC:27:18:2C:0E:B3:8B:E2:83:B1
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ufJU44qyB6nA36wnGCwOs4vig7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:9c:4c:40:35:49:3f:2f:c1:4f:f0:5f:e2:06:8c:d6:12:
         c8:85:2f:4b:3e:5d:6a:43:29:40:5a:80:52:3b:1b:59:87:d7:
         2d:c0:77:a0:03:f3:22:46:2e:bb:72:01:a4:46:9e:de:24:a1:
         d2:e4:7c:1b:68:c0:f7:54:c1:d2:24:97:c2:9e:c6:c6:b6:1d:
         7d:60:be:86:ab:36:c2:a2:42:14:9a:bb:2c:ed:c5:62:62:62:
         2d:39:51:c2:30:b9:cf:5f:4b:b3:e0:fa:5d:e9:07:79:61:9e:
         92:64:6d:d6:16:6c:83:7f:b7:d0:ab:e2:e5:dc:16:3a:42:62:
         28:cd:46:73:43:8c:08:58:74:8d:8c:25:23:bd:74:ed:25:44:
         07:5f:09:d5:ea:86:ae:b8:2c:8c:d2:8c:05:a0:10:7c:1a:57:
         db:59:7a:96:3e:a1:3c:a5:28:19:0f:69:d7:7f:b2:0e:7d:bb:
         f2:2c:bf:5e:26:c0:51:0c:c4:b3:87:28:bf:57:a5:82:45:95:
         25:6e:20:dd:99:40:4d:6a:3e:36:d5:6d:66:55:43:8f:f8:84:
         d3:fe:a7:6c:8b:bf:cb:fb:9c:d2:2a:53:9e:e2:bc:05:9e:86:
         8f:48:e1:13:a1:5c:47:14:99:8b:98:b0:ac:86:40:98:97:d9:
         ea:73:cf:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:01:02 2025 by rpki-client