Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/ioJFTTPZNf4Lcq_KFYLh1MrNj4s.roa
File:                     ioJFTTPZNf4Lcq_KFYLh1MrNj4s.roa (raw, json)
Hash identifier:          zNHzHJC66fb5nUuJH4R5R6y0vNJu3Dgj6oJqEywW/oY=
Subject key identifier:   8A:82:45:4D:33:D9:35:FE:0B:72:AF:CA:15:82:E1:D4:CA:CD:8F:8B
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01A8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ioJFTTPZNf4Lcq_KFYLh1MrNj4s.roa
Signing time:             Wed 01 Oct 2025 01:38:31 +0000
ROA not before:           Wed 01 Oct 2025 01:38:31 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        103.2.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:31 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=8A82454D33D935FE0B72AFCA1582E1D4CACD8F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:e4:28:6a:25:d0:bd:7d:df:a8:12:cb:49:
                    c8:0d:7b:93:22:0b:b2:6d:21:b4:52:82:9f:ac:37:
                    86:48:90:4f:5b:d6:ae:65:12:90:68:a5:5f:03:d5:
                    d1:2e:4a:05:19:55:d1:85:05:cb:44:19:14:59:1f:
                    18:6b:b6:1a:05:80:e6:c7:5a:f7:bb:fa:51:df:ef:
                    78:60:62:9a:0f:ca:6b:4d:96:d7:40:f4:fc:34:b5:
                    65:8d:95:bc:d5:f6:11:01:27:b3:79:53:88:1a:bd:
                    42:c4:3c:b8:e0:4e:ff:01:6e:67:b0:e0:30:1b:10:
                    eb:fd:88:ca:a7:71:c3:87:3f:47:da:92:d2:19:84:
                    0c:1a:95:d4:a7:4a:e8:04:f7:8a:ab:27:1c:fa:9d:
                    fa:91:3f:56:15:3c:43:0b:b4:e1:48:26:56:85:19:
                    fb:94:5d:42:b7:be:99:7b:27:db:19:fc:62:17:5c:
                    1b:13:2f:56:cc:e5:85:44:3a:56:09:59:a9:c7:3b:
                    fa:4b:80:ae:d6:37:ee:06:31:b7:97:18:56:f1:9d:
                    01:6c:5a:8e:6b:46:ec:41:78:60:99:1a:6d:28:d3:
                    a4:97:2f:86:d5:c2:1a:6c:83:9a:1c:35:f8:b5:6b:
                    e9:f7:1d:28:9b:f5:87:c1:b3:03:20:da:66:5f:ab:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:45:4D:33:D9:35:FE:0B:72:AF:CA:15:82:E1:D4:CA:CD:8F:8B
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ioJFTTPZNf4Lcq_KFYLh1MrNj4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:bb:d1:c4:32:9f:cc:0c:89:d5:6b:95:6b:32:18:53:47:
         4f:4c:2c:41:18:32:c1:a9:d8:8d:da:6a:55:87:5b:7c:7b:1d:
         d8:31:33:bf:39:40:61:30:46:7b:d5:9b:8b:73:d9:02:77:26:
         08:c2:5e:5c:09:9a:05:35:d3:a9:ab:88:b3:3d:02:5f:6b:e8:
         d5:d5:0a:2b:7e:46:67:25:33:02:5e:7f:9f:c8:c3:69:cc:22:
         37:10:0a:28:db:e4:29:95:70:ca:06:a5:dd:34:15:df:d9:18:
         c4:ae:c7:4f:ef:6a:eb:ac:0b:91:14:71:4c:5a:1a:2d:6d:a3:
         52:2d:4a:65:dc:44:91:7a:ed:ee:07:1a:ab:fc:c3:ed:ff:13:
         2e:da:76:76:82:ef:af:7c:6c:70:8d:44:ef:33:95:a1:6c:48:
         2d:45:ba:b0:c7:90:ba:bb:c4:21:f5:d6:f0:4a:69:de:76:ac:
         fb:13:fa:62:a0:19:be:6e:4b:a9:41:3a:1e:72:7e:d5:be:6d:
         8c:7c:4a:8e:cc:f7:18:c3:6f:1d:27:8e:ae:44:8d:fa:49:eb:
         b0:3d:b7:1e:39:7c:2a:ba:2e:3e:74:4b:69:18:1f:47:bc:4a:
         38:22:4b:1f:cd:2b:74:1e:20:10:8d:87:49:78:41:d9:29:ee:
         04:91:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:04 2025 by rpki-client