Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/djpQMpkEob1V82NW_D7waxHswOk.roa
File:                     djpQMpkEob1V82NW_D7waxHswOk.roa (raw, json)
Hash identifier:          YpICPQIHAh+5DOb1/GSeTZhcApUMRQr/GUU4HKeBps0=
Subject key identifier:   76:3A:50:32:99:04:A1:BD:55:F3:63:56:FC:3E:F0:6B:11:EC:C0:E9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       019C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/djpQMpkEob1V82NW_D7waxHswOk.roa
Signing time:             Wed 01 Oct 2025 01:33:54 +0000
ROA not before:           Wed 01 Oct 2025 01:33:54 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        118.236.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:54 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=763A50329904A1BD55F36356FC3EF06B11ECC0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:80:6a:0b:31:33:cd:b0:f5:96:48:16:5d:
                    95:91:09:25:9e:a4:09:80:5c:23:71:84:df:86:c1:
                    db:3e:9a:c1:66:db:68:35:0d:f4:cb:2b:bd:2e:0a:
                    85:28:cb:50:21:2d:71:69:e3:6e:da:71:b5:60:7b:
                    ea:17:33:3e:28:ec:21:94:16:ce:06:c5:ee:1f:f2:
                    74:97:5b:04:9f:6a:39:15:8f:83:c9:86:1b:7c:95:
                    12:7b:5a:61:60:3f:b5:09:af:96:56:97:88:0f:f9:
                    bc:05:37:bb:a7:8f:cd:85:2b:26:0c:5d:92:87:63:
                    33:d4:36:f8:99:26:e1:b1:3a:42:6f:23:5e:fe:2d:
                    ed:1e:ee:7b:db:4f:11:5b:53:4b:c7:39:2f:f9:4d:
                    9d:67:8e:15:82:65:20:21:a0:17:54:01:2c:27:42:
                    bb:30:e3:76:4f:45:ae:18:27:24:54:50:22:96:95:
                    13:dd:4f:60:62:41:98:90:96:8b:d0:d5:20:5d:6e:
                    46:3b:b8:64:40:a3:fe:f4:0f:49:54:fc:59:5b:af:
                    36:69:c6:ce:51:6e:3c:2f:39:bc:b8:7c:ea:68:8a:
                    05:e2:73:b6:86:33:1c:c1:cd:a9:e4:91:a4:94:11:
                    ef:fb:84:ef:cd:5a:81:b5:d5:7b:d4:9a:6c:56:a0:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:50:32:99:04:A1:BD:55:F3:63:56:FC:3E:F0:6B:11:EC:C0:E9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/djpQMpkEob1V82NW_D7waxHswOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:75:43:9f:f1:64:aa:77:36:df:df:37:66:32:75:0f:c0:
         f5:8f:43:4f:91:ce:4f:bd:a3:91:7a:12:b3:9e:9b:f9:4d:69:
         c9:5f:94:bd:65:4c:6f:f5:6a:b3:3a:4e:18:05:16:22:e0:fd:
         bb:51:3f:24:53:2c:b8:c9:da:96:22:6c:c7:b8:81:91:fe:95:
         15:4f:ac:36:7b:e3:a6:e2:9b:11:05:b5:4a:d2:e9:94:6e:05:
         f4:15:0b:11:89:51:77:0c:fd:62:2e:7d:ee:18:c8:e5:b4:c7:
         2c:84:a5:9e:c7:38:3a:db:b7:91:4f:6a:ec:64:ce:e6:d4:ee:
         de:fd:e6:b2:f1:ba:2f:21:13:52:f9:4e:18:f2:dc:a0:78:02:
         a4:85:c8:2c:c0:d5:58:db:71:f5:2d:12:1a:3d:78:ad:86:cc:
         cd:1b:41:24:dc:be:e4:49:24:ff:c0:f9:b0:59:c4:fe:eb:e4:
         15:67:02:c9:ba:ad:8c:48:39:03:e7:cc:01:c4:04:3e:a7:b4:
         4b:18:6e:c9:a3:bf:d0:c7:89:b5:10:8e:ab:13:73:86:d4:53:
         91:40:ad:1b:f3:23:1f:55:86:49:a0:81:57:62:55:74:95:50:
         ec:40:a1:7c:62:1b:1c:0b:dc:b5:b1:02:3c:1d:f6:84:e1:c9:
         d1:e2:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:20 2025 by rpki-client