Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/QhHueifbDeqfYiXSoK4QVg--Ejs.roa
File:                     QhHueifbDeqfYiXSoK4QVg--Ejs.roa (raw, json)
Hash identifier:          PAxH7jiR2S7dJtWaCQMEicP+W4lrmhHrOaIbWcLh+ac=
Subject key identifier:   42:11:EE:7A:27:DB:0D:EA:9F:62:25:D2:A0:AE:10:56:0F:BE:12:3B
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01B5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/QhHueifbDeqfYiXSoK4QVg--Ejs.roa
Signing time:             Wed 01 Oct 2025 01:38:38 +0000
ROA not before:           Wed 01 Oct 2025 01:38:38 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        211.10.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:38 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=4211EE7A27DB0DEA9F6225D2A0AE10560FBE123B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:69:cd:af:4e:43:e9:62:8b:26:24:d0:c9:
                    be:19:c5:02:6e:e5:c8:f0:3d:2d:16:36:56:0d:0d:
                    de:05:9c:11:be:4f:b0:db:59:59:e1:91:73:51:44:
                    59:7a:c3:bf:cb:4f:34:f1:03:82:94:c8:2a:24:39:
                    4e:fe:4a:68:e6:98:00:bb:ee:3f:9f:03:e2:4b:d9:
                    08:c3:24:10:f6:e1:b8:e3:72:9a:2e:06:a0:8c:1d:
                    44:d7:6b:ad:51:65:8b:8b:52:99:19:00:77:54:7b:
                    82:c2:f8:27:b2:68:14:9c:18:b9:e7:cd:50:e2:d1:
                    2e:93:d3:5b:76:13:ec:d0:86:d5:64:03:98:a0:cb:
                    e2:87:03:7c:bc:65:bb:ac:77:26:c1:e4:ac:ee:7d:
                    7a:0b:17:73:6e:44:8c:3d:5a:ef:c4:fe:7a:5b:50:
                    36:69:34:4b:d5:10:3c:10:79:17:aa:54:79:5e:03:
                    9f:d5:fb:2a:28:53:6e:a5:43:73:02:b6:d8:42:14:
                    eb:d3:c7:82:7d:01:15:29:36:2d:e5:f6:b7:2e:73:
                    34:7d:99:58:69:4a:fb:24:6a:f9:40:e7:e6:e7:a4:
                    5c:1c:0b:d4:05:67:ae:fa:38:ba:6d:18:f9:62:02:
                    a5:10:c0:a5:83:f3:b9:49:08:ab:be:64:a7:7d:f2:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:EE:7A:27:DB:0D:EA:9F:62:25:D2:A0:AE:10:56:0F:BE:12:3B
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/QhHueifbDeqfYiXSoK4QVg--Ejs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:74:1c:4c:bd:c7:47:5f:b0:2f:ee:4c:a9:8d:b3:f7:6a:4e:
         5b:5f:66:e6:8c:93:4d:94:b2:c8:8b:b4:f1:90:86:11:c1:68:
         40:7d:f4:c4:a0:69:bd:6f:28:f2:f3:dd:10:bc:52:d5:c4:ba:
         42:cc:af:db:61:cd:f3:11:32:a5:d6:15:97:f9:ee:64:85:9d:
         b2:b3:4d:07:02:39:3d:d9:4d:39:1f:e1:4c:a9:90:87:45:f6:
         8b:6a:80:55:f5:52:f3:cc:40:e8:81:83:63:a1:73:18:f4:c8:
         0d:af:dc:e7:28:d5:0c:f5:c7:16:e6:30:c2:90:fd:80:24:d1:
         90:b9:40:44:11:ce:b8:85:b7:d1:9d:24:b8:97:57:93:5f:93:
         8c:22:aa:15:be:b2:6d:91:48:b6:89:e0:a9:f7:72:fd:2e:90:
         f7:f2:e5:9e:a9:02:52:bd:06:af:57:39:ec:01:a6:7e:b2:23:
         06:64:11:03:9b:ee:bd:66:57:b8:0d:5f:13:32:55:b2:44:45:
         e9:43:d3:aa:d0:c0:51:74:5a:74:64:f5:11:b7:94:f9:e0:f9:
         74:88:8e:9f:57:9f:62:62:07:cb:2f:91:fc:61:86:fb:40:19:
         81:0f:83:d0:cf:80:0a:ff:54:e3:85:24:e2:8c:08:7e:22:e1:
         33:d1:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:02 2025 by rpki-client