Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/7Smxt5aIGnhNlNDpew3nEIGW3vs.roa
File:                     7Smxt5aIGnhNlNDpew3nEIGW3vs.roa (raw, json)
Hash identifier:          hyqQjxStCc7+7c96r277HvAkFjR0sL/eu9GZd2cJDw0=
Subject key identifier:   ED:29:B1:B7:96:88:1A:78:4D:94:D0:E9:7B:0D:E7:10:81:96:DE:FB
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       29
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/7Smxt5aIGnhNlNDpew3nEIGW3vs.roa
Signing time:             Fri 01 Aug 2025 01:35:56 +0000
ROA not before:           Fri 01 Aug 2025 01:35:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4695
IP address blocks:        202.231.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Aug  1 01:35:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=ED29B1B796881A784D94D0E97B0DE7108196DEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:98:87:22:8f:98:b1:b0:c2:fb:de:e1:75:
                    fc:bb:3d:25:c9:30:22:68:44:4d:6a:7e:17:c0:19:
                    62:86:d0:cf:0b:52:fd:f6:aa:20:71:d3:03:90:39:
                    42:06:d6:50:65:e7:a4:73:c5:a5:20:7e:a5:67:8e:
                    61:00:e1:dd:ba:d0:cd:78:70:a7:bc:df:0e:50:70:
                    c3:18:63:86:d4:c9:57:4c:3b:5b:5d:7b:96:6b:18:
                    8e:73:00:b5:e4:2b:f8:36:70:77:20:64:99:4a:ea:
                    ac:f4:fc:5c:c4:f1:16:c2:21:d5:7f:43:79:1d:74:
                    e5:7a:e3:76:be:08:88:70:54:50:ad:6b:25:61:5f:
                    33:aa:e8:ea:23:15:ac:86:70:91:a1:ef:8a:a6:bd:
                    1c:ad:fd:c2:c9:ed:c1:ce:fc:74:c5:7d:de:eb:42:
                    8b:77:21:3b:64:ff:39:d1:b6:18:43:b6:b2:15:47:
                    df:43:18:8a:31:e0:e0:12:69:8c:74:26:c3:c0:a3:
                    39:02:5f:13:84:b9:42:3c:cb:2a:6a:dd:37:d8:b4:
                    16:2b:07:51:76:8b:53:52:15:a5:55:9b:79:11:e1:
                    4f:f2:b5:aa:b5:cc:b9:b6:82:0d:e4:13:7e:cd:95:
                    a4:84:b4:4c:59:f0:52:be:82:c6:20:01:f0:11:e1:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:B1:B7:96:88:1A:78:4D:94:D0:E9:7B:0D:E7:10:81:96:DE:FB
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/7Smxt5aIGnhNlNDpew3nEIGW3vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:c4:cc:ed:b9:df:d2:f9:51:c4:09:7e:99:92:e3:3a:6c:
         37:bc:7c:93:bd:18:ed:5d:25:e3:7e:4c:58:97:e3:d6:7f:cb:
         48:12:9c:5c:8c:34:16:be:7a:79:a4:25:b6:d8:2e:0e:6e:10:
         c7:0e:13:05:25:3a:ae:6f:ef:65:69:15:98:54:63:38:6c:e8:
         a7:6a:a5:4d:19:f3:59:5d:75:98:00:3f:8d:1a:8b:fe:df:7a:
         b8:9e:8b:ce:d0:bd:e5:57:2c:29:b0:73:6b:6d:03:11:c5:22:
         c8:32:60:49:38:4a:25:31:01:da:b7:54:bb:ec:cf:dd:53:60:
         a8:21:7d:b1:2d:ab:d8:ca:f8:f4:d9:05:ad:48:07:63:3d:8e:
         d8:05:0d:cb:b7:d5:dc:af:d5:28:36:e7:91:c8:45:cc:55:df:
         6c:34:5e:d9:47:38:09:fd:cb:c3:a2:08:e2:e6:cf:c8:d5:24:
         3e:67:75:f5:b3:d7:b2:78:43:6a:cc:18:07:ef:7c:e8:2e:e7:
         0d:fd:23:e4:90:f5:15:16:d1:c9:93:ca:f5:2e:f9:37:2b:54:
         57:9b:65:b0:21:1a:72:e0:df:3a:f4:78:a8:7c:16:71:74:89:
         0f:5f:87:f0:11:92:87:1a:93:98:8a:ae:4a:53:8a:58:98:36:
         8e:e8:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:42:54 2025 by rpki-client