Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
File:                     ooClMkmcEbkZbj8gmTR10u33PLY.roa (raw, json)
Hash identifier:          kZmvLXeBX+cCZgybTZPBQSkloCNeJKFuLgNZmz15EQA=
Subject key identifier:   A2:80:A5:32:49:9C:11:B9:19:6E:3F:20:99:34:75:D2:ED:F7:3C:B6
Certificate issuer:       /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial:       17
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
Signing time:             Sun 05 Oct 2025 00:02:41 +0000
ROA not before:           Sun 05 Oct 2025 00:02:41 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18526
IP address blocks:        160.25.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
        Validity
            Not Before: Oct  5 00:02:41 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A280A532499C11B9196E3F20993475D2EDF73CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:07:63:02:18:ba:07:6a:e1:ad:58:7b:f5:
                    c5:e0:f3:7e:39:8f:17:37:0e:c9:5e:20:c5:07:9c:
                    df:99:7c:11:95:0a:f2:17:b9:e9:ba:e2:df:f6:ba:
                    34:79:2c:01:74:10:78:60:bd:38:8a:60:e7:50:5e:
                    e3:3d:c2:cb:52:a4:5a:bc:8b:7f:be:86:6e:a3:08:
                    73:1e:45:63:48:47:85:36:85:c1:a5:25:ce:e9:f2:
                    a9:86:85:ca:e9:5b:cb:64:12:59:97:2a:f6:7f:70:
                    1d:c5:ac:d3:2f:4d:f2:1c:9a:6d:84:2f:52:11:bf:
                    12:04:58:ca:ff:63:34:33:b8:fe:f1:cf:e8:89:42:
                    1b:d2:fa:bd:86:8d:00:77:bb:d6:b3:87:54:bd:82:
                    19:17:9a:b9:33:88:7c:7e:ef:be:11:21:47:96:9f:
                    e9:fa:c1:4b:ec:b4:13:21:ae:dc:09:72:99:aa:be:
                    24:db:75:8b:1e:d4:f4:2d:06:00:59:4d:7b:89:15:
                    b5:dd:9c:14:5f:1b:aa:18:87:4f:b3:98:8e:3b:1b:
                    d1:03:60:d7:ee:cc:01:7d:2a:6e:dd:4a:0f:cb:32:
                    d8:58:12:95:cd:14:d4:17:96:c6:db:95:bc:66:fd:
                    98:57:85:67:f7:dd:ed:99:5a:64:85:49:bb:f0:ea:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:A5:32:49:9C:11:B9:19:6E:3F:20:99:34:75:D2:ED:F7:3C:B6
            X509v3 Authority Key Identifier:
                keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ooClMkmcEbkZbj8gmTR10u33PLY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:f6:6e:39:b4:64:7a:04:47:d7:c1:5a:cc:19:f1:3e:f0:ea:
         6f:ae:88:7f:ba:fb:37:66:ef:7e:ad:60:71:f8:9f:3c:47:6a:
         ba:d7:4c:a1:e4:5f:7a:83:54:90:22:6b:51:f2:03:75:6d:92:
         e0:1e:04:91:68:8f:1a:ae:93:19:23:f5:d5:21:0e:08:b8:9a:
         04:52:88:4c:a4:bd:da:e1:51:16:69:d0:51:b1:68:eb:fc:e7:
         e3:ec:79:ce:2c:ac:bd:8c:f2:51:ef:13:e8:00:bf:b0:4c:6f:
         45:e3:99:38:01:ca:c8:f2:d8:95:5c:91:e4:ec:64:fd:28:5f:
         4b:0c:6e:b4:fd:4a:fd:15:71:58:74:12:7a:3d:ad:fb:06:39:
         e6:5f:67:25:5d:1f:80:01:89:8a:32:59:05:5f:8c:c7:69:a1:
         89:81:46:7d:7b:da:a5:03:41:5a:ee:bb:3d:96:3a:9c:7e:c3:
         fc:fe:93:82:e0:e0:15:43:11:ce:b0:00:35:4d:84:46:eb:87:
         9e:c3:c1:89:fc:9d:0f:01:50:a8:ff:bb:94:9f:57:e3:fc:86:
         b9:91:3a:b5:57:5c:5c:80:05:0c:95:9b:e8:3f:98:24:51:74:
         e9:67:3f:56:ac:87:31:9e:bf:ca:0b:fb:2b:7d:f7:d5:07:36:
         f1:57:40:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:45 2025 by rpki-client