Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/7AWCRpEfT50oAz9iK4RJWe1Ux4A.roa
File:                     7AWCRpEfT50oAz9iK4RJWe1Ux4A.roa (raw, json)
Hash identifier:          eRtqoD4YrDzedegdAD/W8ALu29vj30D4BqIck6iSoUY=
Subject key identifier:   EC:05:82:46:91:1F:4F:9D:28:03:3F:62:2B:84:49:59:ED:54:C7:80
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       2F
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/7AWCRpEfT50oAz9iK4RJWe1Ux4A.roa
Signing time:             Tue 07 Oct 2025 01:24:31 +0000
ROA not before:           Tue 07 Oct 2025 01:24:31 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:31 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=EC058246911F4F9D28033F622B844959ED54C780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:07:bb:83:b1:26:a6:e4:f5:10:29:71:6b:
                    61:bb:be:0a:e8:e8:ab:db:73:51:00:ce:be:fd:2c:
                    26:ca:1d:01:14:02:4a:ab:bc:7a:1f:c2:6b:17:cf:
                    cf:62:a8:73:8e:1a:1b:e3:b0:ce:56:16:19:07:1a:
                    3b:a6:ee:59:ae:8c:02:7a:4f:e5:6e:e4:e8:51:2e:
                    bd:5e:2f:85:6a:db:f5:8e:e2:71:bd:57:94:cf:92:
                    cf:2d:bf:11:66:ab:5a:e8:12:98:2e:2b:9f:20:02:
                    99:6d:47:04:a7:ae:b8:11:3a:b9:44:20:77:17:65:
                    b2:40:61:e9:5c:b7:94:95:b2:0e:3d:e7:28:fb:0a:
                    b3:9e:f3:a1:e5:db:5e:fb:b4:e8:9a:2d:81:30:05:
                    2c:e3:f9:43:7e:3d:c3:b0:f5:18:97:26:6d:44:52:
                    b0:7a:86:91:cf:3b:81:d9:94:1d:e9:b3:b6:de:59:
                    5d:d0:3e:ad:2e:a9:d1:23:4e:74:6a:f2:b5:23:fc:
                    16:f0:4b:e6:eb:57:d7:5c:70:92:fa:bd:11:24:51:
                    81:29:24:7b:27:fd:24:45:f6:a7:e5:32:c0:c6:9b:
                    5d:5a:19:a7:a1:4e:52:0c:ac:d6:86:c2:81:35:9f:
                    ef:58:1c:fe:6c:08:c4:49:45:b8:68:26:cc:04:85:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:05:82:46:91:1F:4F:9D:28:03:3F:62:2B:84:49:59:ED:54:C7:80
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/7AWCRpEfT50oAz9iK4RJWe1Ux4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:46:67:ab:55:4a:b6:27:f3:e7:35:1d:d0:38:64:f7:69:9f:
         b6:7c:17:a6:06:48:73:bd:c8:43:f6:63:ab:bb:5c:73:78:e5:
         3d:ce:08:bd:ba:f8:47:52:b1:85:e1:c0:42:db:62:fd:89:de:
         88:44:00:45:08:23:4f:cf:96:13:e9:8b:40:2b:f9:22:e4:7d:
         89:8a:d7:0d:bb:0b:16:77:94:b6:c3:df:5e:d5:b2:67:60:20:
         22:bf:72:ae:1d:b0:3b:da:5f:47:25:ae:b3:c0:2a:e1:16:43:
         e2:f7:da:0d:af:e5:c1:03:48:d6:91:fb:1f:44:38:f3:f8:ee:
         d1:1c:53:32:02:56:17:f8:9f:7c:07:d9:34:1f:7c:43:75:34:
         67:a1:8e:05:18:0c:8b:e3:13:67:0f:03:e0:80:b4:1f:ff:d6:
         ef:b2:c5:56:23:9c:e3:d9:64:80:9c:34:d1:90:37:e4:1a:22:
         35:76:de:0f:f4:d3:c2:1b:65:80:bd:2f:10:32:08:57:35:fc:
         c9:9a:65:af:a2:73:87:e2:b6:b6:e8:c8:4a:2e:c9:90:b9:d6:
         aa:c1:cc:18:58:4d:7e:ee:64:ed:5e:46:96:ab:c6:f4:92:49:
         6a:ec:41:a2:c9:47:54:b6:36:18:b6:71:11:af:e0:e7:a0:09:
         1c:3b:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client