Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa
File:                     wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa (raw, json)
Hash identifier:          MPJlF9nfWY+7oFYOfgsVUptVdvLDsyRHdpV3CdtMYbQ=
Subject key identifier:   C2:A5:2C:88:64:55:8F:84:89:27:A5:DD:84:88:A9:96:10:A9:24:14
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       53
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa
Signing time:             Thu 03 Jul 2025 05:42:32 +0000
ROA not before:           Thu 03 Jul 2025 05:42:32 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4675
IP address blocks:        202.73.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Jul  3 05:42:32 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C2A52C8864558F848927A5DD8488A99610A92414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:cf:00:7c:a1:74:91:e8:2e:b1:74:6c:05:
                    67:fe:af:19:cb:21:10:38:35:9a:82:19:4c:af:62:
                    8c:d9:83:3d:c9:65:22:32:9f:11:68:6a:60:dc:e0:
                    6c:a8:e3:b3:50:29:60:5a:3a:a9:e7:b8:75:45:e5:
                    a8:97:62:50:2e:4d:0f:19:44:56:b1:f7:c6:72:42:
                    f9:14:6c:2b:b4:b6:b6:30:f2:4f:26:de:d4:ec:05:
                    68:c1:f7:82:93:4a:f1:76:4d:ca:f5:98:0d:24:e3:
                    62:e6:6a:a6:ae:d4:0a:c4:d6:63:25:44:ce:3d:27:
                    7e:98:f4:be:31:1b:53:82:a9:d3:be:ff:43:e4:f4:
                    2b:31:a1:cd:ef:f4:b1:c2:e1:3f:90:9a:78:4e:be:
                    cf:75:8e:d2:f1:b4:c8:6a:7e:60:c2:cf:8e:b0:12:
                    fe:2b:a9:8d:85:2d:f1:a0:15:cd:00:cb:90:b6:83:
                    11:3d:4b:c3:a8:54:5c:48:22:16:2e:0e:42:1d:00:
                    11:f4:91:4c:08:3f:a0:ac:d7:ba:02:5c:a6:3d:de:
                    1f:30:34:aa:a3:41:5a:23:3b:44:9f:c5:8d:cb:de:
                    43:c0:46:91:53:11:cd:c8:22:0c:15:df:ec:31:e0:
                    5a:ef:1d:5e:af:10:5a:ed:1d:71:7e:d0:82:c6:99:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:2C:88:64:55:8F:84:89:27:A5:DD:84:88:A9:96:10:A9:24:14
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:b0:b9:91:b4:b7:8d:b6:c0:8e:d6:84:93:f2:c1:58:20:
         72:40:02:4e:2b:ad:6e:52:10:e0:f2:a9:a3:cd:ed:57:46:08:
         e0:2e:a1:25:c6:17:00:53:f7:3f:7d:e4:bf:24:cd:b6:7d:7f:
         1e:71:66:58:35:be:cf:26:47:93:fa:e0:6a:8c:22:79:c6:9e:
         1c:ad:71:ec:28:ee:db:5d:78:9f:02:11:f3:ab:41:2e:54:fa:
         b8:77:c8:8b:e3:b7:e7:4c:f4:83:91:0c:0b:a3:5a:14:47:ee:
         e6:db:dd:1e:1f:8a:ac:8f:a8:99:f3:76:9e:61:12:2d:5b:d7:
         ca:f0:c0:0c:4b:c0:24:be:f8:62:ce:42:d0:2e:1a:2a:76:79:
         b0:53:b0:83:f4:b7:fc:78:01:4a:1c:3c:ef:97:1a:b1:29:b8:
         79:56:0e:cf:ea:0d:a2:dc:b2:41:8c:e8:4d:f9:1e:a0:bc:bb:
         bb:e7:b7:91:f7:bb:43:fc:51:94:4e:de:1e:1d:42:b1:b8:52:
         22:68:51:ea:18:0f:1d:d7:e8:72:df:50:76:3e:eb:15:d6:d1:
         a0:ed:60:dd:66:5c:72:a7:a8:c0:4a:8d:06:a5:eb:ab:1c:a2:
         ce:73:49:0d:59:55:3b:37:2e:21:ea:e3:3d:d0:05:3f:bc:7a:
         b3:c7:5e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:19:01 2025 by rpki-client