Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa
File:                     ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa (raw, json)
Hash identifier:          kDpYrWAn/Sogudixnu2WVIHNnRIrMNuMvpyhGMWeV30=
Subject key identifier:   CA:50:22:6B:0F:51:86:4E:64:16:D5:87:71:F6:22:04:A0:58:FC:BC
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       5A
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa
Signing time:             Fri 01 Aug 2025 01:29:06 +0000
ROA not before:           Fri 01 Aug 2025 01:29:06 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     7670
IP address blocks:        210.166.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug  1 01:29:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=CA50226B0F51864E6416D58771F62204A058FCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:c5:d1:04:fc:f9:94:42:1b:b8:c3:10:02:
                    50:84:a5:75:fd:d5:ec:99:ac:48:00:e0:a2:b3:5b:
                    17:67:21:88:0a:00:b9:2a:27:2a:56:16:69:c4:79:
                    97:68:3f:e2:a4:33:d5:84:e6:d3:65:d9:61:da:ce:
                    c0:fb:82:03:8e:67:28:e0:82:70:24:ad:4b:09:77:
                    75:4f:5d:f6:ca:81:25:7f:8e:cd:49:4d:95:2c:bb:
                    ba:e4:a8:db:95:c0:7b:83:a9:54:93:12:6a:3d:63:
                    2d:32:45:56:b3:70:e7:53:6e:85:c7:db:c2:6d:d0:
                    4d:48:ed:f6:19:f2:fb:86:5d:8b:5d:3f:4d:25:6a:
                    33:44:d9:54:fe:51:7c:5f:a6:5f:bd:bb:5a:f0:95:
                    70:9e:39:4f:7f:32:05:33:80:9d:88:44:b6:fc:dc:
                    98:c4:f5:3e:2b:ba:5b:89:14:98:96:60:eb:07:79:
                    35:33:6e:9c:4c:c5:55:48:e1:a7:65:11:fe:21:1a:
                    38:95:9b:84:09:af:9f:8d:72:d8:61:34:20:09:38:
                    ed:ad:19:20:82:a5:8f:a2:c3:16:d0:56:34:9d:de:
                    d6:c5:d0:98:2b:47:65:6d:7e:73:04:67:b1:61:54:
                    52:1f:3c:c0:7e:4b:c7:30:75:e0:a6:96:c8:2e:e5:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:22:6B:0F:51:86:4E:64:16:D5:87:71:F6:22:04:A0:58:FC:BC
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/ylAiaw9Rhk5kFtWHcfYiBKBY_Lw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:41:8d:02:92:13:00:60:d3:8f:91:f3:a5:c8:a1:2c:a6:
         4d:69:7d:fa:e3:7b:1a:aa:25:86:c7:6c:7e:e1:03:52:29:3f:
         27:ca:1d:77:26:ed:ce:d5:87:1f:d0:1e:2e:de:55:06:af:7c:
         81:49:5e:e9:42:60:b7:38:3a:22:03:80:94:f7:09:85:d4:ca:
         4a:9b:18:bb:8d:d7:64:07:db:dd:10:bd:f1:bf:38:8a:19:01:
         dd:e2:99:fd:89:f7:41:ca:ab:ab:0b:0e:a7:ed:86:9b:a0:17:
         e3:b1:e2:d6:a7:69:26:ab:6c:9f:66:23:3b:3c:62:a6:e5:d3:
         4a:6a:d2:6c:01:11:07:49:94:62:97:c6:87:43:98:eb:f2:e5:
         09:2e:26:e6:a4:7c:93:c2:cf:b9:b4:af:e3:c5:d9:f6:33:81:
         2f:57:3c:19:07:54:a5:87:5f:9c:97:b8:24:bf:2f:21:3a:4a:
         67:4a:14:a2:3d:94:b7:87:49:5b:56:66:f0:a0:35:a0:35:cb:
         c1:b4:fc:96:0b:00:a5:22:d0:0d:65:1e:b9:4a:fd:56:81:fb:
         dc:e9:d3:37:62:0e:43:89:f9:d2:26:f7:32:39:25:7a:f2:e3:
         df:59:5c:bb:e5:d8:7c:1c:aa:4b:36:02:c3:b0:22:9d:69:43:
         09:ae:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:36:55 2025 by rpki-client