Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/6VV8PbDMP7ueORjwyQgYfK4otRk.roa
File:                     6VV8PbDMP7ueORjwyQgYfK4otRk.roa (raw, json)
Hash identifier:          hpbVIDJxwQ1Cg36oGQIPF4gUFm0NZqaDzDfJp0wJK8k=
Subject key identifier:   E9:55:7C:3D:B0:CC:3F:BB:9E:39:18:F0:C9:08:18:7C:AE:28:B5:19
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01BE
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6VV8PbDMP7ueORjwyQgYfK4otRk.roa
Signing time:             Tue 01 Jul 2025 01:34:40 +0000
ROA not before:           Tue 01 Jul 2025 01:34:40 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        118.151.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:40 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E9557C3DB0CC3FBB9E3918F0C908187CAE28B519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:48:46:fa:c2:e6:b4:a6:2c:29:e6:5b:e7:
                    73:02:45:43:dc:95:a3:41:0f:35:c2:1d:53:73:34:
                    7a:9d:e7:68:1b:d7:b0:4c:0c:c0:99:64:60:4e:12:
                    02:1a:bb:00:c2:29:70:1d:ed:47:d6:3f:fd:19:b3:
                    17:28:34:37:fa:03:dc:f5:93:8b:e7:12:ef:36:14:
                    25:7c:bc:b4:9d:54:a7:f2:76:56:a1:2c:2a:53:f1:
                    c8:0d:27:7f:70:71:b7:60:c5:58:1f:b4:43:34:18:
                    d3:c4:ba:d4:4d:de:75:ca:ca:1d:98:e0:55:43:96:
                    8f:5a:79:b4:07:55:fa:01:77:c3:fc:15:f8:f2:ef:
                    d1:72:c1:11:98:f4:a2:d7:d6:33:05:63:38:a9:6a:
                    f2:7c:09:3b:b3:d5:b2:4c:d1:51:6c:16:54:99:85:
                    ba:1f:59:cd:b0:03:3e:ab:73:34:8b:f5:a8:0b:a2:
                    46:f8:73:4d:3c:40:c0:30:bf:dd:dd:fc:cf:c6:9d:
                    b4:99:cd:21:b7:6d:96:a0:f8:b9:c0:5d:06:4b:56:
                    3e:dd:90:93:03:cd:e7:49:a8:73:96:47:7a:01:42:
                    f0:45:49:f7:5c:1b:ff:a9:44:b3:7c:bd:90:24:71:
                    08:37:e7:99:cd:a3:c0:78:19:99:2b:19:f2:16:f8:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:7C:3D:B0:CC:3F:BB:9E:39:18:F0:C9:08:18:7C:AE:28:B5:19
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6VV8PbDMP7ueORjwyQgYfK4otRk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:d8:5b:04:e2:5b:ea:f7:fb:49:f4:76:1d:9d:7f:a8:b9:
         dc:59:3f:d2:4d:4b:18:e3:1e:49:cf:9a:90:44:fa:50:ed:45:
         de:8d:8c:f8:29:a0:0c:63:79:f5:c8:4f:52:9d:2d:7e:13:b6:
         24:2f:6e:e2:c5:fd:0e:40:8e:b5:01:0f:6c:d1:03:2b:a2:5b:
         3d:8a:84:c7:38:f7:c8:bb:95:a3:7c:40:4f:34:77:e7:20:de:
         e2:a9:74:9a:d8:d4:0c:65:89:e3:a0:43:56:15:be:17:0e:92:
         bc:a5:5d:a8:73:73:27:4a:c6:3a:33:86:5f:e5:51:ac:f1:e4:
         a9:d7:19:e4:24:40:14:d1:2b:28:0e:09:20:c4:61:2e:15:e8:
         e0:ea:ec:62:59:a9:b3:03:cc:e5:21:a0:0f:1f:7d:9b:cf:ea:
         60:76:5d:ab:f7:1a:33:51:5b:50:c7:27:66:59:66:76:b2:34:
         f2:08:f6:98:7d:5f:d4:c1:c2:69:e9:9b:b8:e1:21:99:58:19:
         ed:ec:40:91:50:0f:c2:5a:2c:4f:dc:7d:c7:86:ea:6b:aa:2e:
         c6:0a:7b:6d:6d:a3:0c:ef:48:0b:e7:f6:0c:5a:7e:fd:00:d6:
         0e:73:8b:51:71:07:4c:75:2f:21:b8:ab:7f:d9:af:d6:40:82:
         e2:ed:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:01:06 2025 by rpki-client