Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/eESbhBJqqrW1xaEr2E87k-kEc8w.roa
File:                     eESbhBJqqrW1xaEr2E87k-kEc8w.roa (raw, json)
Hash identifier:          vYDKF86SXNqb+IPZQ41WI3piGwmcNktn/tUPLgqRKnc=
Subject key identifier:   78:44:9B:84:12:6A:AA:B5:B5:C5:A1:2B:D8:4F:3B:93:E9:04:73:CC
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       26
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eESbhBJqqrW1xaEr2E87k-kEc8w.roa
Signing time:             Tue 07 Oct 2025 01:24:27 +0000
ROA not before:           Tue 07 Oct 2025 01:24:27 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        222.229.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:27 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=78449B84126AAAB5B5C5A12BD84F3B93E90473CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:4b:a3:b3:00:dd:97:3f:48:49:e7:58:15:
                    b4:24:f8:dd:9d:1e:ef:97:8b:3e:b1:3f:2e:b1:ed:
                    4e:cd:85:b4:cb:37:fe:22:89:a2:fd:f1:5f:60:15:
                    64:fd:b6:1e:ac:9d:4a:de:cd:00:27:9a:d3:e9:72:
                    76:42:ed:f0:c4:5b:2c:e1:c1:88:0a:92:e1:b8:f0:
                    91:56:0f:ae:db:f6:34:1c:e2:06:7d:82:72:cf:5a:
                    91:6c:f2:f4:37:ef:69:eb:8b:4c:e2:72:37:e1:3e:
                    ed:cb:75:5a:2b:cf:7f:d3:45:e2:2e:c3:93:d4:36:
                    58:9d:e4:62:a5:e5:c6:50:1c:0e:9c:32:08:4f:4e:
                    12:a3:5e:91:98:3a:89:b9:bf:b3:5f:2d:c8:be:ba:
                    a3:78:b3:d7:46:f7:bf:ba:a7:4e:1f:72:1b:80:f0:
                    91:c0:27:a3:c0:21:a3:7b:48:87:94:5c:c0:63:e5:
                    5e:f5:e6:41:f8:31:f3:c8:39:65:6d:13:06:92:16:
                    69:c2:c4:13:c9:22:bc:10:b8:ef:84:e3:6b:20:5a:
                    32:eb:34:4e:d9:23:75:8f:69:42:57:fe:5b:06:5f:
                    64:5e:23:2d:8e:81:39:6b:89:5c:11:22:68:78:35:
                    1b:06:de:93:da:fc:67:85:b5:49:e1:0d:3d:8b:d4:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:9B:84:12:6A:AA:B5:B5:C5:A1:2B:D8:4F:3B:93:E9:04:73:CC
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eESbhBJqqrW1xaEr2E87k-kEc8w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.229.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         de:fd:d9:3c:ff:1e:d7:a8:72:ce:58:06:bf:14:3b:54:27:5c:
         c1:66:7b:32:c6:6c:fd:9c:1e:72:d1:c2:af:fa:d4:fc:95:0f:
         7c:01:22:e4:d7:45:ce:04:83:e0:2c:b2:f8:7e:2f:74:75:58:
         1e:0c:61:0a:19:f5:e4:1d:33:03:e9:03:a2:11:82:94:91:89:
         16:da:23:61:76:73:5a:75:1d:3b:4a:13:9f:11:c2:ad:9f:d8:
         e6:c0:19:fa:5d:83:a7:ed:0c:8a:99:96:b8:43:81:67:5f:d3:
         e5:84:09:fd:ce:41:34:b8:71:14:31:e5:5e:4a:01:3d:4c:b4:
         ee:59:bc:bd:02:24:9b:36:7b:4c:cc:2e:c0:9f:c7:fd:79:fd:
         77:68:b6:7a:a7:cb:3f:ef:30:52:1b:f9:9b:57:93:41:d2:45:
         6a:4c:bb:7d:32:4a:2f:eb:e5:4f:2e:e8:6a:b6:0c:53:bc:6b:
         31:26:06:05:31:81:1e:59:e8:91:d0:6a:a1:1a:c3:bb:32:9a:
         75:65:bd:05:cf:bc:75:13:71:77:37:6a:a8:6e:85:a1:e1:1e:
         99:98:27:ff:31:9d:e5:6a:fb:07:82:44:32:96:a9:56:07:5b:
         ca:43:a6:4d:ac:fd:e2:b9:46:c9:ea:4f:47:d8:54:50:6c:6d:
         b3:51:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:37 2025 by rpki-client