Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/K5-_vD7XneI3QPWVpaQZmmNeK60.roa
File:                     K5-_vD7XneI3QPWVpaQZmmNeK60.roa (raw, json)
Hash identifier:          7nuCnXSEyo+zdMewK3d1HDsiZP3rF/yG8x5gH00yKVc=
Subject key identifier:   2B:9F:BF:BC:3E:D7:9D:E2:37:40:F5:95:A5:A4:19:9A:63:5E:2B:AD
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       58
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/K5-_vD7XneI3QPWVpaQZmmNeK60.roa
Signing time:             Fri 01 Aug 2025 01:29:05 +0000
ROA not before:           Fri 01 Aug 2025 01:29:05 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     7670
IP address blocks:        61.213.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug  1 01:29:05 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2B9FBFBC3ED79DE23740F595A5A4199A635E2BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:42:ae:11:47:aa:a9:ff:e4:af:bf:a6:07:
                    80:60:1c:85:d4:61:00:00:df:8d:f1:1b:58:de:2a:
                    80:ed:f3:76:fa:e3:3c:2c:4b:8d:18:c3:07:bf:db:
                    79:55:99:ca:b2:2c:03:68:13:8d:f0:09:eb:57:0d:
                    34:7d:82:4e:18:d3:48:2d:8a:32:c0:13:3f:d8:d7:
                    1d:b5:22:f2:a2:d5:3a:b7:10:b8:cb:53:f5:aa:2b:
                    a4:e7:8f:f5:0a:6c:b0:d4:bb:88:31:e4:e6:52:69:
                    d3:f2:07:eb:55:7b:b6:d5:de:d8:a5:54:2b:91:b9:
                    9e:ac:1a:42:87:55:f7:0b:c5:53:01:1c:72:d5:a2:
                    98:a7:95:24:65:2d:5c:0b:39:88:a9:68:ca:15:ea:
                    0c:96:a0:64:98:1e:04:66:b3:15:42:9f:d7:cd:ea:
                    07:10:74:f0:60:c6:5e:fd:a3:96:f4:33:b3:88:96:
                    95:d8:bc:63:ca:6d:90:b6:2d:1a:1f:41:6e:97:e2:
                    0d:63:c0:bf:81:80:dd:ea:1a:25:01:79:7a:b7:6a:
                    7e:eb:64:7e:b5:35:96:f5:a2:c0:9a:dd:91:d3:6f:
                    cc:c1:ef:02:1e:b3:4d:ae:45:67:3e:6e:a4:b4:b1:
                    95:84:8c:e7:0b:f2:af:4c:60:3f:0e:19:d5:72:8e:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:BF:BC:3E:D7:9D:E2:37:40:F5:95:A5:A4:19:9A:63:5E:2B:AD
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/K5-_vD7XneI3QPWVpaQZmmNeK60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:39:5f:f1:c9:7b:ce:3a:20:48:75:fc:af:df:33:65:4c:
         58:30:c7:65:a4:eb:6a:b8:de:c6:60:bc:4b:4a:e6:6b:a1:1e:
         a6:d3:95:84:f7:cc:02:60:7f:51:d7:98:ed:24:10:e5:e7:7f:
         f7:27:6b:c4:4e:18:9e:7e:a6:55:d4:78:7f:f3:3e:82:d3:35:
         ba:2f:4f:7d:20:2c:24:e1:61:34:ba:4a:97:8e:9d:70:df:73:
         bf:d2:2b:ff:48:ae:e4:22:6a:92:a6:f3:fd:78:c2:b5:67:ea:
         63:6b:94:a5:0f:68:bc:65:c8:4a:82:b4:99:8c:62:c9:70:81:
         4f:84:6f:c5:06:f6:0e:cb:3f:12:14:78:09:92:f0:d2:a7:14:
         45:78:f1:be:76:9d:35:ca:ae:8d:5e:64:f8:be:c1:33:cf:e2:
         16:05:ae:a3:08:f6:6a:06:8a:b1:5b:31:77:cf:0f:91:d4:93:
         4c:e1:70:5d:87:4c:81:47:a0:2a:fb:d8:c3:53:53:24:4f:86:
         4a:a3:69:04:9d:12:ff:51:e9:28:d6:bb:9a:0f:53:23:f6:53:
         f0:2f:01:40:da:c2:11:1b:1e:4b:ac:71:1c:f6:94:9e:38:47:
         6c:17:72:66:0b:14:0a:21:02:a2:56:2a:49:d1:34:61:97:76:
         f7:ef:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:36 2025 by rpki-client