Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/hZD9aAEj1-bPyXG3ItKuD_0ewE4.roa
File:                     hZD9aAEj1-bPyXG3ItKuD_0ewE4.roa (raw, json)
Hash identifier:          uQbihNJRNomQD51LmNPIOFlnUQCWvj0qszLzvvsA3VQ=
Subject key identifier:   85:90:FD:68:01:23:D7:E6:CF:C9:71:B7:22:D2:AE:0F:FD:1E:C0:4E
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C0
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hZD9aAEj1-bPyXG3ItKuD_0ewE4.roa
Signing time:             Fri 01 Aug 2025 01:37:50 +0000
ROA not before:           Fri 01 Aug 2025 01:37:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        183.76.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 03:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8590FD680123D7E6CFC971B722D2AE0FFD1EC04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:6f:58:c6:ed:20:66:01:7c:5b:06:e0:23:
                    47:80:c0:25:b9:7e:7f:99:e1:39:57:39:9f:00:f6:
                    7a:9a:fc:65:f1:77:d1:01:31:b3:42:b5:80:41:e2:
                    39:3d:82:d0:f9:61:dc:68:84:f8:d2:63:e9:87:8c:
                    0d:cf:30:aa:ae:19:a7:a0:28:77:d1:cd:22:68:a3:
                    b2:d3:f2:43:2e:fc:7f:27:88:19:e4:d9:67:74:1b:
                    aa:02:68:28:b9:90:c7:92:db:06:52:7a:5e:8a:e3:
                    76:c7:52:16:fe:94:af:6d:33:e5:50:4f:a1:f3:9e:
                    ef:64:88:d1:f5:be:5a:76:68:09:a8:ed:47:fb:14:
                    b6:fd:bd:18:d5:60:0b:d1:d6:45:60:5a:36:fa:24:
                    98:3f:db:c7:2b:ad:2d:bd:2a:72:80:e6:27:de:6e:
                    d4:4e:01:33:75:d3:6d:b3:c7:48:72:60:36:72:2c:
                    c7:bc:f9:66:0e:d3:7e:84:2c:53:0a:3d:23:60:6e:
                    97:42:16:e6:48:e6:81:23:d4:88:da:bc:6f:fb:61:
                    53:25:f7:33:7b:0c:5a:f7:5e:20:31:5b:03:2f:10:
                    94:8d:02:ab:32:76:e5:d0:8c:aa:6f:f3:99:b4:9d:
                    10:46:36:7e:66:86:6b:8d:0a:c5:03:ae:b9:71:45:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:FD:68:01:23:D7:E6:CF:C9:71:B7:22:D2:AE:0F:FD:1E:C0:4E
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hZD9aAEj1-bPyXG3ItKuD_0ewE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.76.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:46:13:5f:d9:be:00:06:5b:7c:84:2f:7b:c4:4a:df:73:
         ce:df:bc:f6:91:8c:40:a7:44:28:06:47:92:58:79:14:d3:57:
         c5:a0:0b:8e:ea:2e:71:bb:43:9d:f5:bc:37:4d:82:fe:70:78:
         80:48:8d:22:c4:d6:5d:9b:47:3e:f2:f7:76:6b:29:68:48:bb:
         2f:95:b3:86:a5:db:39:ad:65:e6:a7:e4:f1:32:aa:de:2c:92:
         bc:d1:01:bb:1e:0a:e9:d5:6c:c8:b5:1f:36:d6:42:d7:ad:cf:
         cd:d7:3e:be:b5:be:44:67:f3:b0:5c:4d:d0:14:de:62:0c:f5:
         c5:9a:c8:ff:d4:ab:30:78:c0:84:cf:ca:5a:02:b6:aa:3f:1e:
         00:57:28:39:31:e1:f4:13:aa:bd:9c:dc:3f:ba:25:19:2b:1e:
         d9:c9:4b:7f:d0:2c:d2:3f:8e:ad:dc:ad:e8:ab:ae:ae:b6:6c:
         d9:72:8d:5e:cc:3d:5c:ce:73:1b:2c:e9:b1:67:dc:8b:0e:49:
         17:64:9c:13:11:8a:8a:ab:bd:79:4c:6b:8e:e1:98:77:f5:f9:
         40:fd:33:c9:f1:a2:eb:42:d3:01:a0:50:d4:ee:50:13:84:84:
         78:e6:b1:89:bf:de:8b:06:4a:2a:27:5b:63:44:d7:58:1e:7f:
         70:d7:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:00:43 2025 by rpki-client