Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/Wd7HO8RIV_w9JvH-22pU3lZnsNk.roa
File:                     Wd7HO8RIV_w9JvH-22pU3lZnsNk.roa (raw, json)
Hash identifier:          uKL/kvM0msy4wmMcXMMWCai4TFGs6x98NSLyn6bHThA=
Subject key identifier:   59:DE:C7:3B:C4:48:57:FC:3D:26:F1:FE:DB:6A:54:DE:56:67:B0:D9
Certificate issuer:       /CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
Certificate serial:       4A
Authority key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/Wd7HO8RIV_w9JvH-22pU3lZnsNk.roa
Signing time:             Tue 10 Jun 2025 10:51:02 +0000
ROA not before:           Tue 10 Jun 2025 10:51:02 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     24296
IP address blocks:        154.34.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
        Validity
            Not Before: Jun 10 10:51:02 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=59DEC73BC44857FC3D26F1FEDB6A54DE5667B0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:e2:11:e8:03:2d:c1:ce:30:fc:e0:43:d0:
                    d7:fa:1e:4d:1b:55:c0:14:99:5d:dd:9e:f1:fe:01:
                    62:cb:07:9a:4e:7b:64:68:d4:d2:39:e4:86:58:e2:
                    9e:b7:71:2f:ab:a0:35:a2:15:9b:f0:21:ab:f4:cf:
                    e7:63:04:f9:0d:23:dc:8f:ec:fe:78:65:eb:b5:01:
                    de:89:02:69:03:13:67:14:dd:1b:57:b7:72:90:80:
                    89:77:5d:cf:c4:7d:7c:3f:cd:80:be:cb:a7:46:a8:
                    3a:be:6c:68:96:3d:ab:75:fc:79:15:1e:9e:b3:07:
                    3b:d4:52:3f:86:bd:e5:2b:38:44:dd:c0:ca:a1:8c:
                    7a:99:a3:83:bd:f1:31:90:05:76:42:60:35:17:7f:
                    e3:00:21:66:c0:56:28:81:62:b3:7b:ff:8e:00:49:
                    d2:0b:8c:7b:0f:c5:be:6d:1f:f8:49:44:a5:4a:3e:
                    05:29:dc:42:80:69:f2:a4:ed:c1:1b:18:20:0b:43:
                    91:39:90:ab:8e:b5:6f:37:e4:7b:fe:41:a3:28:0c:
                    78:dd:ed:80:ab:0c:79:89:cb:15:2c:f8:0d:8a:c0:
                    08:98:72:7f:28:cc:f2:9e:52:2e:e2:37:d1:3e:26:
                    6a:da:37:f1:ae:0d:d8:49:e5:c8:34:56:3c:6f:da:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:C7:3B:C4:48:57:FC:3D:26:F1:FE:DB:6A:54:DE:56:67:B0:D9
            X509v3 Authority Key Identifier:
                keyid:85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/Wd7HO8RIV_w9JvH-22pU3lZnsNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:91:42:11:f8:d3:41:66:11:ac:ef:a0:b7:2a:af:90:d3:
         e2:ce:5a:8a:11:16:40:b6:38:69:2e:46:03:9e:fa:9e:98:73:
         8a:e8:ef:7e:b3:33:93:a3:60:8a:2e:82:bc:ff:e6:61:64:c2:
         05:66:44:bf:66:2c:fe:b6:70:71:35:4f:ff:8d:60:81:09:94:
         0c:2d:4c:6c:69:c2:27:dc:35:65:ce:af:c8:87:30:21:2d:fa:
         86:76:ee:fe:f1:7a:5b:ef:e8:b4:66:bb:fc:68:2b:0e:fa:f4:
         54:a5:16:6a:ea:ec:ba:f1:0e:53:17:b0:62:b8:be:78:60:21:
         e3:56:90:7b:07:21:30:2c:25:68:67:33:5d:be:2c:28:82:d1:
         2d:c2:44:4c:3a:d2:11:6e:f3:47:f7:0b:df:81:b9:e6:82:72:
         89:d9:34:5b:99:a9:f2:cc:c6:01:f0:d3:38:7f:03:00:7e:bc:
         aa:01:91:7d:b4:45:6c:6c:e9:84:53:46:76:73:10:f5:a5:92:
         11:7d:67:0e:42:c5:05:32:ec:06:c3:21:49:79:03:95:c5:ed:
         b4:e0:2e:9b:c2:a8:61:dd:a8:b6:b6:01:51:bb:cb:de:d8:4b:
         7a:2e:96:29:9d:7b:b8:b4:5b:8f:a9:de:84:3d:f7:55:f9:cc:
         37:81:fe:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:26:23 2025 by rpki-client