Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Qqp_vUs37N4zzk07EM7D1FcWkb0.roa
File:                     Qqp_vUs37N4zzk07EM7D1FcWkb0.roa (raw, json)
Hash identifier:          S0m8LNutQHHE0FicxBTDnAxeb6ZwP8stKh2DoBumZEM=
Subject key identifier:   42:AA:7F:BD:4B:37:EC:DE:33:CE:4D:3B:10:CE:C3:D4:57:16:91:BD
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       8E
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Qqp_vUs37N4zzk07EM7D1FcWkb0.roa
Signing time:             Wed 01 Oct 2025 01:31:09 +0000
ROA not before:           Wed 01 Oct 2025 01:31:09 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        124.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct  1 01:31:09 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=42AA7FBD4B37ECDE33CE4D3B10CEC3D4571691BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:c5:a8:7e:d4:d8:51:8d:fb:45:58:b7:b0:
                    89:76:69:af:bb:9b:e5:4a:de:78:db:16:36:5c:c6:
                    58:7c:77:e6:b7:2f:49:d1:4e:b2:75:2b:a7:65:7b:
                    27:db:be:4f:bc:8c:73:e7:a9:f7:d4:b7:57:a8:d4:
                    63:f1:04:c0:37:51:e9:13:66:fb:c5:0f:e0:bc:13:
                    f7:b6:2d:87:ad:67:af:b5:d5:26:cc:33:1b:4b:c3:
                    eb:de:b9:0f:57:f7:c7:b5:80:ac:51:42:91:1e:7d:
                    06:11:95:9f:fd:a1:ea:1a:f0:22:7a:3c:3b:87:74:
                    63:f5:2a:4d:95:71:53:65:06:21:b2:2a:2f:e3:02:
                    56:7e:82:7d:58:a5:ec:53:b7:fc:f3:29:13:91:bb:
                    a0:9f:c8:a9:53:b1:92:a5:2e:10:e8:79:e6:3d:cd:
                    da:65:96:3f:41:3e:75:b2:55:95:69:ce:90:83:cc:
                    37:73:69:ca:3b:4e:12:93:5f:a4:99:aa:4c:4b:7f:
                    82:aa:60:25:a3:6c:3b:c6:78:fe:ad:b1:fb:4d:51:
                    a3:2b:07:80:a5:18:d0:df:12:e4:9b:df:3f:22:a8:
                    d1:67:f0:c0:0e:08:72:00:f1:b6:bb:54:1e:99:2b:
                    00:a3:ab:8e:d9:77:75:c4:83:00:50:6d:3c:86:3e:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AA:7F:BD:4B:37:EC:DE:33:CE:4D:3B:10:CE:C3:D4:57:16:91:BD
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Qqp_vUs37N4zzk07EM7D1FcWkb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:3e:8a:af:29:2c:8b:8e:2e:38:82:4c:6a:7d:6c:6f:81:
         a6:ec:8d:7b:e2:6c:18:6c:d1:8a:2d:d7:7f:a7:b1:1e:c1:3f:
         9e:5b:49:ec:98:01:1d:bf:e4:b4:e0:e3:3f:7c:d6:3a:e9:87:
         12:79:fd:af:ab:28:2f:f4:94:22:8c:8f:b9:22:df:1f:56:14:
         b8:3e:7c:a1:b1:fd:a2:56:80:4c:5d:6c:d8:2b:c3:74:fe:be:
         cb:12:56:26:9e:d1:2b:28:d8:94:c5:d9:7c:7e:0e:f2:15:01:
         f1:25:39:c9:be:3d:84:0c:65:b7:dd:4e:47:d1:42:2d:7e:74:
         59:0c:e6:f9:3e:90:cb:6b:63:3b:58:91:ce:71:e6:b6:3d:40:
         82:e4:80:9d:b2:ba:83:c9:88:ad:8c:85:09:1f:ef:65:52:dc:
         f3:4c:07:9e:95:0e:30:d3:82:97:e5:db:a9:10:c8:ca:90:b2:
         17:4f:7f:09:f3:40:98:13:30:9f:72:6e:b0:e2:2e:d3:b8:d6:
         5c:45:14:1a:fb:5c:ff:e4:8b:4e:d1:8f:64:cf:97:ab:b1:30:
         2a:e8:91:83:b1:14:53:02:33:cd:ee:17:aa:c5:93:b4:3b:7e:
         48:ac:0c:a3:20:2a:db:0d:70:59:9f:61:d1:c8:9a:00:89:0e:
         cc:2c:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:52 2025 by rpki-client