Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/5PqqMard6f89TT8i4u4H5_BFRIY.roa
File:                     5PqqMard6f89TT8i4u4H5_BFRIY.roa (raw, json)
Hash identifier:          yekLG0gTilXPblq1s6peDoHp45BUcapjKC4JdfjCrKo=
Subject key identifier:   E4:FA:AA:31:AA:DD:E9:FF:3D:4D:3F:22:E2:EE:07:E7:F0:45:44:86
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       28
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/5PqqMard6f89TT8i4u4H5_BFRIY.roa
Signing time:             Tue 07 Oct 2025 01:24:28 +0000
ROA not before:           Tue 07 Oct 2025 01:24:28 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        219.118.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:28 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=E4FAAA31AADDE9FF3D4D3F22E2EE07E7F0454486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:77:33:31:cd:af:79:02:9d:38:33:dc:53:
                    38:a9:01:e8:6c:dc:f8:41:a1:91:6c:d4:cc:1b:3e:
                    8e:63:a2:d0:5c:f4:17:6e:f6:a5:5f:4f:03:eb:1d:
                    f0:a2:9f:89:12:31:02:17:a3:50:9b:0f:5a:6a:11:
                    d1:a9:cf:ba:dc:f6:90:d3:90:5e:c7:b1:3a:97:f8:
                    25:87:d8:39:a1:58:9b:57:54:db:5d:27:17:29:a9:
                    2b:32:77:d0:01:19:36:6e:93:e1:fc:c9:e9:45:21:
                    25:b2:9c:db:89:78:ec:26:a7:f1:ea:c0:5f:77:39:
                    74:e9:49:c5:8f:eb:94:d5:b1:31:bd:dc:44:95:0b:
                    ad:e4:bc:57:e4:27:ae:d8:c7:06:b2:9f:d1:93:f3:
                    80:21:e1:72:d5:3c:25:2c:6c:80:3f:c5:3f:bd:46:
                    03:74:2b:40:c2:ac:31:01:32:e2:28:53:b2:31:00:
                    2a:a8:82:d1:59:af:27:89:e5:04:b6:37:f9:f8:f1:
                    92:fc:85:73:79:5b:c9:b6:c3:e8:f3:df:a7:ff:2f:
                    9d:3e:64:2c:78:6c:83:8b:a1:a4:48:13:c8:c7:99:
                    c1:21:8a:11:c3:3f:5e:ac:6d:64:35:f2:d8:20:24:
                    bc:40:9c:39:a9:e2:0b:dd:72:79:a4:3e:38:dd:f2:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:AA:31:AA:DD:E9:FF:3D:4D:3F:22:E2:EE:07:E7:F0:45:44:86
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/5PqqMard6f89TT8i4u4H5_BFRIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         db:da:96:13:dc:3d:74:e9:b9:40:6d:9a:2c:db:ac:c3:fa:3a:
         c6:b9:93:af:df:ce:59:a3:fc:5d:99:de:1d:1a:ff:8e:6c:3a:
         36:c8:c4:31:3b:71:07:d3:ea:74:9a:76:9d:a5:de:77:b1:20:
         4d:06:f4:c6:75:f4:8b:59:45:9d:0d:b4:d2:c3:e3:a9:9f:9e:
         af:1d:52:d5:4a:cf:52:67:bd:4d:5e:21:44:a1:35:39:5e:e3:
         31:00:f3:fd:f6:65:a9:36:b2:13:c1:de:95:1f:c9:4e:8b:88:
         54:36:aa:ec:ab:01:5f:bb:4d:da:7b:e9:cc:aa:2a:0d:6f:8d:
         c8:ad:a8:b0:5b:e3:54:3c:2a:36:a6:d4:89:c0:59:a7:e6:b2:
         99:54:a2:51:f9:f9:f0:c4:d5:7c:7b:87:9e:bf:d3:2c:6f:14:
         3a:37:4a:e9:1e:54:de:c5:30:b2:44:84:88:18:85:be:fd:ec:
         96:4f:1d:45:13:5d:d8:19:34:0c:9b:b8:98:79:d4:a6:9e:31:
         32:5e:ac:3f:46:6f:ad:02:f0:5a:21:96:9b:6b:af:af:66:87:
         0c:d0:e9:79:3a:5e:a2:eb:70:1c:49:9d:3f:01:4c:c2:4a:ba:
         82:a2:dd:2c:f4:18:a4:b4:6e:de:9f:8b:d4:7a:09:61:18:f2:
         e0:fc:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client