Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/uLX7TLQeNT0smtvtUPO2lNBaeHc.roa
File:                     uLX7TLQeNT0smtvtUPO2lNBaeHc.roa (raw, json)
Hash identifier:          FnuUBecWwzpp6K11M9AvgcgG9ZQ6XYY5j7Jvxt9RDHw=
Subject key identifier:   B8:B5:FB:4C:B4:1E:35:3D:2C:9A:DB:ED:50:F3:B6:94:D0:5A:78:77
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       50
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uLX7TLQeNT0smtvtUPO2lNBaeHc.roa
Signing time:             Tue 01 Jul 2025 01:32:10 +0000
ROA not before:           Tue 01 Jul 2025 01:32:10 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        211.9.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:10 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B8B5FB4CB41E353D2C9ADBED50F3B694D05A7877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:7d:66:39:4a:0a:ae:11:d5:55:fc:50:9f:
                    ab:61:ad:75:8c:bc:0e:a3:64:bc:8c:b9:03:37:bf:
                    4c:33:4d:bc:73:e5:f5:6f:3c:3a:a5:48:f6:bd:4b:
                    a6:73:31:37:9f:b3:de:49:7a:b4:8e:8a:5d:20:5a:
                    87:cf:e3:c3:e3:57:bb:cc:f1:69:27:f5:3f:51:dc:
                    e8:3c:76:4d:50:d0:a7:b3:7d:7d:54:cd:5b:80:a6:
                    b7:28:35:63:8a:b6:84:fe:8b:6d:90:3c:d7:3e:7d:
                    1c:57:38:a1:a8:e3:7c:58:7c:15:f7:85:49:97:20:
                    a6:cd:9f:2e:ab:47:9f:77:5b:c4:2b:7a:a2:bc:b6:
                    7c:72:21:ae:82:49:6b:d1:1a:33:58:8c:75:0b:35:
                    e9:57:38:42:fa:ab:49:4c:ae:3a:50:71:12:ff:fe:
                    f6:cd:0f:a2:80:a1:93:6c:16:5e:cc:8d:9e:82:21:
                    ac:14:70:60:4d:fd:fe:79:9a:6c:03:37:27:d3:bd:
                    57:1e:7a:f3:5b:cf:49:d0:91:c8:a1:67:01:9c:a5:
                    f6:8f:92:2e:4a:92:3c:b3:d5:4e:05:84:6a:72:c8:
                    8c:d0:2e:fd:bf:6e:40:31:66:96:a9:7a:19:35:52:
                    d2:19:07:5e:63:67:2d:23:ab:fa:ad:47:98:8b:6d:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:FB:4C:B4:1E:35:3D:2C:9A:DB:ED:50:F3:B6:94:D0:5A:78:77
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uLX7TLQeNT0smtvtUPO2lNBaeHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:4c:55:ac:1c:45:d8:b8:44:85:13:d3:ce:9d:fb:1c:06:88:
         3c:8d:8e:05:7d:50:96:5f:c8:96:f8:48:7c:44:7d:b9:fd:62:
         4a:a1:d1:5b:a2:a2:86:9c:ef:dc:5f:53:14:89:38:0d:03:95:
         cb:08:4f:a9:09:36:71:33:db:1a:f6:77:92:00:86:89:ea:ea:
         c1:b9:93:c2:40:e0:5c:ca:2e:72:5d:7e:9a:b6:69:e0:0c:be:
         81:ef:32:8c:21:e7:80:38:09:dd:18:26:bf:77:a3:7b:d1:67:
         26:e2:09:1f:b8:bf:e2:78:9b:39:32:95:50:79:56:3b:44:0f:
         89:53:ed:01:09:eb:43:33:3a:68:fa:30:6e:37:7f:1d:82:c2:
         bd:71:4c:a5:03:7f:3c:2d:18:df:45:2b:73:2f:d9:bb:52:79:
         4c:1f:35:a7:09:a0:63:68:dd:e2:f7:84:eb:17:69:c1:a5:5c:
         b8:fb:ce:e7:6e:37:d5:cd:9d:a3:e5:bf:96:38:fa:3b:e5:a5:
         98:64:c4:19:f8:01:84:99:6a:59:5f:cd:5a:f0:a8:a5:4d:5a:
         8f:7d:6a:e1:2d:17:16:c2:40:70:7b:a5:89:c5:f2:a3:39:d7:
         45:7a:26:bd:5d:a5:91:0e:15:8e:c8:e9:ff:2f:d2:ac:95:25:
         8e:70:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:14:19 2025 by rpki-client