Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/boxN77u6aNMB7HG_5F7GeM37l-k.roa
File:                     boxN77u6aNMB7HG_5F7GeM37l-k.roa (raw, json)
Hash identifier:          2bTZeExet5TTdkwn4Xz/cCocrsEGsIcoe/rCCGX7kcI=
Subject key identifier:   6E:8C:4D:EF:BB:BA:68:D3:01:EC:71:BF:E4:5E:C6:78:CD:FB:97:E9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01B6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/boxN77u6aNMB7HG_5F7GeM37l-k.roa
Signing time:             Wed 01 Oct 2025 01:38:40 +0000
ROA not before:           Wed 01 Oct 2025 01:38:40 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        198.144.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:40 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=6E8C4DEFBBBA68D301EC71BFE45EC678CDFB97E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:a7:e5:db:de:14:2f:db:30:c7:f0:25:c2:
                    3e:25:ee:1a:f9:34:0e:e2:95:f9:51:e5:93:90:1e:
                    fb:2f:53:e8:8b:12:08:db:44:79:76:85:95:d9:40:
                    88:53:6b:ec:9f:17:ef:5a:68:7c:93:24:e4:5b:1f:
                    8d:bc:3d:d5:54:c8:b8:4b:86:ab:b2:60:eb:5a:19:
                    e6:31:f5:7d:70:1c:f9:34:f2:69:53:e2:cb:79:43:
                    7a:51:f3:7b:b5:fa:43:87:7f:c0:1a:d0:ca:1a:2f:
                    07:3e:dc:98:72:32:39:78:e9:7e:e1:e1:e3:5f:b2:
                    71:c6:b6:53:06:72:9a:d5:ba:6e:3f:52:24:67:f6:
                    cb:da:1b:d6:e0:30:a3:8a:b3:59:a2:99:48:b7:85:
                    9e:44:b6:b4:a5:2b:e2:24:4b:c5:58:e4:db:a2:34:
                    a9:53:cf:6e:7e:75:32:3f:72:5a:f6:d4:04:a8:e0:
                    78:69:30:78:03:85:25:27:4c:41:e9:2f:a7:68:ea:
                    d8:f4:62:b8:d3:db:ab:e2:3e:bf:e4:bb:2b:78:83:
                    48:10:9a:61:29:e4:59:e0:fe:fb:83:ab:4a:da:c9:
                    58:8e:da:f3:01:ce:73:7c:77:e5:9c:a7:ad:b5:e0:
                    5b:3c:13:f6:85:0d:0f:e8:ed:3b:6b:ce:24:64:82:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8C:4D:EF:BB:BA:68:D3:01:EC:71:BF:E4:5E:C6:78:CD:FB:97:E9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/boxN77u6aNMB7HG_5F7GeM37l-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:e0:3d:49:f3:1b:55:c0:2e:0c:2c:83:61:84:2c:00:a3:
         94:b0:82:15:be:a3:cd:90:be:34:87:9b:85:a9:e1:e4:10:6f:
         cb:11:f3:f0:43:05:3b:3a:0a:50:dc:e4:e2:b6:50:8f:06:2e:
         df:d8:1b:aa:a3:de:18:69:4d:f2:19:42:30:9f:4b:b9:9d:8b:
         ed:68:f8:1e:70:e6:ef:40:0a:ec:19:0f:06:63:26:34:d9:8a:
         d0:b1:fb:d6:64:78:9f:e2:a9:1f:66:0f:9a:f1:7f:58:03:af:
         c0:27:5f:f2:f3:b3:d6:a9:74:60:5f:7c:24:15:17:3c:90:34:
         b4:a1:96:aa:e8:43:33:27:eb:07:97:35:56:b5:42:c2:e5:d5:
         6f:ef:29:83:c3:18:03:28:03:d4:a9:47:15:26:36:80:b6:ff:
         b1:60:5d:68:a7:e5:f8:ef:7d:6b:55:f0:36:fd:7f:fd:49:84:
         28:51:11:98:bc:77:be:7b:7f:3e:95:f6:40:3d:9f:5d:ba:05:
         0f:e5:2d:d1:7f:33:22:39:d8:9a:14:4c:de:ea:79:c5:ce:3a:
         38:48:42:75:c6:cd:08:e6:c7:3f:62:63:44:2f:17:e4:b6:73:
         a2:48:54:e5:4b:70:39:93:9c:0b:01:42:c5:83:95:70:3c:68:
         e1:10:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:22 2025 by rpki-client