Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2344/tK8rVPOl0jIVS4Be09qPm54_fyA.roa
File:                     tK8rVPOl0jIVS4Be09qPm54_fyA.roa (raw, json)
Hash identifier:          laBEyouUdacKTg28nLszLKNYmgyjvQNybzMnuXd9k2M=
Subject key identifier:   B4:AF:2B:54:F3:A5:D2:32:15:4B:80:5E:D3:DA:8F:9B:9E:3F:7F:20
Certificate issuer:       /CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7
Certificate serial:       03
Authority key identifier: 9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/tK8rVPOl0jIVS4Be09qPm54_fyA.roa
Signing time:             Fri 10 Oct 2025 07:46:57 +0000
ROA not before:           Fri 10 Oct 2025 07:46:57 +0000
ROA not after:            Sat 10 Oct 2026 06:52:45 +0000
asID:                     14618
IP address blocks:        133.194.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 22:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7
        Validity
            Not Before: Oct 10 07:46:57 2025 GMT
            Not After : Oct 10 06:52:45 2026 GMT
        Subject: CN=B4AF2B54F3A5D232154B805ED3DA8F9B9E3F7F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:d1:59:e4:2c:64:9a:f8:6a:3b:ea:f9:e3:
                    78:0d:c5:f2:b0:26:26:0a:b3:d2:0f:e4:25:ad:66:
                    b5:78:31:a1:2e:57:64:a5:0d:28:28:44:53:d6:21:
                    35:3b:25:b0:45:16:38:16:e0:49:e3:a2:6c:a5:20:
                    f0:43:88:f8:53:b9:91:79:4f:32:8b:71:bb:60:26:
                    f5:03:af:82:6a:53:ea:7c:2f:0e:fa:f7:25:8c:7a:
                    55:17:65:a9:d6:06:42:84:0c:ff:d5:e1:c9:00:d6:
                    22:9e:c4:ff:fe:d2:f3:ff:f7:4b:2d:e7:4e:8e:69:
                    d7:d9:39:81:8e:6d:d2:9d:c4:8d:b0:76:60:f0:a1:
                    f9:ab:64:52:55:77:b6:32:76:c8:2a:47:73:af:28:
                    b0:25:62:cd:9d:b0:97:b6:46:b6:df:7c:9e:ca:64:
                    32:1f:40:35:ff:13:32:11:ab:c7:d2:27:d9:2c:ae:
                    06:e5:67:cf:e7:cf:c6:b8:f0:8e:d5:da:15:64:13:
                    6c:02:5c:1a:fa:d2:be:25:22:a9:5e:78:d5:79:31:
                    d2:0a:17:43:d4:51:41:5b:ce:2c:ab:69:8b:57:dd:
                    79:d1:d9:0c:27:f1:30:2b:d0:8a:54:60:78:67:44:
                    c8:70:ff:80:19:12:d9:24:bf:aa:4d:a0:f9:8f:f3:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:2B:54:F3:A5:D2:32:15:4B:80:5E:D3:DA:8F:9B:9E:3F:7F:20
            X509v3 Authority Key Identifier:
                keyid:9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/tK8rVPOl0jIVS4Be09qPm54_fyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.194.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:be:d8:7f:7c:2f:8d:6e:61:78:5f:b0:da:05:7c:5a:24:
         a4:e8:3d:3b:e6:f4:b2:a8:7d:a5:91:a6:0a:6f:66:e9:51:53:
         06:18:18:fb:82:fb:7d:60:24:9b:a5:ef:11:14:16:a2:52:eb:
         22:57:ca:51:ff:49:e8:1d:eb:10:34:62:23:b6:43:a9:c2:e4:
         83:31:82:3f:41:58:e1:f6:57:35:7e:ff:39:7f:5f:e8:3a:20:
         12:bd:03:0c:1b:18:d8:d4:7a:8a:60:58:11:60:63:7d:a5:d6:
         39:9c:b1:2c:cf:19:88:16:99:7c:af:78:9c:4e:97:3b:86:91:
         06:7d:0e:79:8f:6a:6e:c6:c2:19:f9:31:70:4f:84:ad:43:60:
         92:8d:ed:bc:9f:cd:fc:92:2b:31:f1:12:a3:67:52:79:76:72:
         98:77:65:ce:20:9a:3e:f9:56:71:bb:e5:35:6d:55:04:e0:14:
         8b:af:cd:ae:0e:c1:b9:e9:8e:81:9c:16:79:32:ec:2e:4a:da:
         dd:59:c8:63:c2:80:86:29:2d:4b:7d:35:ac:7c:31:6f:bf:24:
         62:d2:b2:a6:2f:2c:d3:13:9f:dd:c4:77:5f:dd:a3:ae:70:1c:
         83:0f:94:8e:7a:b0:e7:6f:5a:c2:bc:f2:82:13:ed:12:68:3e:
         d5:33:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:36:25 2025 by rpki-client