Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/aa8pold9gSoUjl0tDRD_OmcLnfI.roa
File:                     aa8pold9gSoUjl0tDRD_OmcLnfI.roa (raw, json)
Hash identifier:          CrVUemjF+r/efJrQXmXNof1utjSvOW0suuVOj9vmPuk=
Subject key identifier:   69:AF:29:A2:57:7D:81:2A:14:8E:5D:2D:0D:10:FF:3A:67:0B:9D:F2
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       45
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/aa8pold9gSoUjl0tDRD_OmcLnfI.roa
Signing time:             Tue 01 Jul 2025 01:32:02 +0000
ROA not before:           Tue 01 Jul 2025 01:32:02 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        115.146.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:02 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=69AF29A2577D812A148E5D2D0D10FF3A670B9DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:6a:30:42:93:33:23:2c:22:d7:50:21:f8:
                    8b:c1:e1:de:e6:ae:03:dc:13:7f:be:4a:f5:e6:20:
                    3e:21:e3:6c:21:b8:b5:9e:a0:0c:d3:68:7a:9a:82:
                    ed:10:0d:72:f5:a5:e6:6c:3a:00:4a:24:57:81:e4:
                    60:d7:25:c1:f7:5f:d0:f4:1e:47:19:89:79:ab:df:
                    f0:03:1d:43:4b:20:f1:a0:f1:75:27:49:6a:93:2b:
                    d4:8a:ca:0d:7f:aa:b1:bf:8f:f3:59:49:68:a6:16:
                    b5:1d:c7:6e:18:5e:c9:94:39:a9:a7:2c:55:42:4c:
                    b3:87:78:4f:b4:bf:3e:b1:9c:01:6f:70:b7:6c:98:
                    03:fb:20:a2:ca:b8:98:4e:31:78:ed:93:fb:0e:e4:
                    8c:ba:8e:2d:0c:22:c8:1c:6c:6d:d7:7a:f8:56:e5:
                    23:f9:55:27:22:92:5e:25:b7:bb:2f:83:52:c7:f5:
                    cb:e2:83:eb:aa:67:ed:e3:06:b0:cc:39:84:69:df:
                    0c:65:39:14:0a:60:d6:a4:5b:ea:45:e8:47:13:11:
                    14:13:8f:9d:3a:33:1e:24:ef:0d:d1:89:96:cd:00:
                    eb:b2:b6:cf:74:65:62:91:fa:7d:3c:19:7d:ba:7f:
                    e4:69:24:5e:dc:fe:0a:38:8a:e9:c2:7b:85:4a:c7:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:29:A2:57:7D:81:2A:14:8E:5D:2D:0D:10:FF:3A:67:0B:9D:F2
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/aa8pold9gSoUjl0tDRD_OmcLnfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d8:65:7e:f1:8e:80:bd:31:f8:d0:93:0e:d4:b8:ad:6e:a3:ae:
         00:2d:68:2c:a1:92:12:7a:cd:7f:10:84:49:82:ea:ad:d9:d2:
         49:d0:1b:e9:3d:c2:1d:5b:6a:0a:42:5e:f4:bf:32:63:12:71:
         b5:b2:8f:c3:fa:06:50:35:c4:da:5f:20:b2:99:c4:e1:6f:43:
         5d:c0:6b:be:f2:ea:ca:b1:d1:0d:b9:b7:47:fc:40:46:b7:c3:
         5b:18:92:73:02:ab:de:1a:9a:18:67:4a:21:fe:32:32:b0:8a:
         b5:ce:91:88:11:64:cc:17:91:3f:1f:98:ae:86:d7:c1:1c:3c:
         46:af:bd:0c:31:7a:99:80:6a:f5:14:39:b5:0c:75:00:c6:cc:
         ec:e3:c6:5e:49:b6:ad:1f:c6:c7:35:14:1b:27:e3:02:bf:2b:
         a3:31:95:02:f2:1a:c6:73:af:7c:b1:d1:31:72:4a:a8:52:d8:
         88:15:e8:e9:94:e9:8e:b3:51:a3:74:44:f3:e0:af:33:0e:2e:
         1e:fb:f6:52:1a:0d:8f:74:e0:47:91:36:18:db:5b:30:41:a2:
         83:82:93:de:57:73:92:19:dd:c1:4d:91:9c:7f:f5:80:af:2d:
         34:a2:47:2e:40:f7:05:37:7c:7e:6b:96:ce:bd:49:9b:c0:ad:
         6c:f0:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:30:30 2025 by rpki-client