Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gppGyd3Pfz88nrKZNPgZMIwJj18.roa
File:                     gppGyd3Pfz88nrKZNPgZMIwJj18.roa (raw, json)
Hash identifier:          WtdkorubeL0KTRh4ZkT52k9OGpOgYK78UOUVUKU+/54=
Subject key identifier:   82:9A:46:C9:DD:CF:7F:3F:3C:9E:B2:99:34:F8:19:30:8C:09:8F:5F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0491
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gppGyd3Pfz88nrKZNPgZMIwJj18.roa
Signing time:             Wed 01 Oct 2025 01:40:01 +0000
ROA not before:           Wed 01 Oct 2025 01:40:01 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        210.170.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:40:01 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=829A46C9DDCF7F3F3C9EB29934F819308C098F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:9e:79:2c:7f:7d:ef:94:7c:b4:58:8e:d0:
                    74:9c:53:52:e8:d7:15:fc:b1:4a:96:f8:25:e9:69:
                    75:98:05:82:f3:44:b5:2b:ba:79:df:50:16:1a:11:
                    99:24:23:9d:07:1d:2f:84:1a:35:d8:16:50:c8:6f:
                    0a:b7:5c:33:fe:fd:48:36:92:dc:ef:94:50:70:fc:
                    26:e4:0e:23:37:16:5d:12:8e:51:55:67:d0:78:6d:
                    c5:f1:df:3c:46:a9:e0:39:d4:54:81:32:ad:95:71:
                    44:18:d3:3f:e5:c4:69:95:d6:4a:b8:7a:78:2c:ee:
                    b6:1f:bf:0d:a3:7d:da:f9:2c:5a:79:f2:13:50:cd:
                    3b:09:93:c5:25:2c:eb:f1:cf:d6:d8:be:19:54:75:
                    11:2a:43:1c:81:63:21:06:e1:37:ed:d3:a0:9f:6c:
                    2e:86:35:48:08:9c:90:f6:03:45:3b:b4:ed:a8:de:
                    b6:cf:a7:92:e7:db:96:19:b1:47:7a:56:c4:b2:dc:
                    ca:e3:8f:76:c8:1c:a8:e1:eb:e3:a3:8a:b9:7b:93:
                    d1:76:ec:d7:1d:52:3e:22:c5:a8:7e:d4:fa:30:2e:
                    88:17:50:0d:d2:80:b0:98:49:f9:be:3f:d2:eb:ac:
                    e8:06:69:19:d3:9b:bb:4b:5c:92:84:c8:8b:53:cd:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:46:C9:DD:CF:7F:3F:3C:9E:B2:99:34:F8:19:30:8C:09:8F:5F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gppGyd3Pfz88nrKZNPgZMIwJj18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:d3:b7:65:48:05:84:8c:99:ce:c7:d8:5f:49:c9:af:69:
         c9:d9:df:a9:77:82:75:33:cf:b4:1f:47:47:23:ee:f3:42:36:
         3c:11:63:73:9f:05:fc:ce:79:f2:05:b4:e1:6f:74:6c:be:90:
         52:27:5e:36:4c:6b:9e:e9:5f:8f:98:c2:db:ed:11:04:a4:09:
         57:83:b9:39:b6:bb:45:1b:ab:ca:59:78:38:3f:19:1f:29:1b:
         65:4c:fe:9e:ad:1f:26:1a:2a:7b:29:9f:cc:64:9f:8b:62:86:
         4f:b8:35:ae:b1:0d:61:e0:d0:e0:ec:39:fe:b0:7a:8b:6a:02:
         15:b5:20:4b:89:92:b6:af:86:ce:26:c6:15:20:b1:b8:90:11:
         df:71:0d:31:3c:c1:ab:af:d8:9f:7d:27:41:6e:b6:fb:98:8f:
         57:70:b1:1d:44:0f:23:18:8d:6a:ee:61:1b:4e:ce:e2:7e:76:
         30:3f:3b:2b:26:7a:73:fc:3c:b3:ba:79:08:00:b3:2d:3d:14:
         b9:25:fd:60:3c:47:4d:e7:b1:49:2f:03:09:77:6a:af:bc:6e:
         52:1f:38:80:8f:d1:2c:90:f2:cf:9e:ba:28:d0:69:9e:17:b9:
         4e:8e:56:e7:1a:35:a0:50:b1:33:16:59:f1:ba:ca:34:56:c1:
         ab:ae:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:19:24 2025 by rpki-client