Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/W7-jB7TlCHzYPXEvluRvHW3c-YM.roa
File:                     W7-jB7TlCHzYPXEvluRvHW3c-YM.roa (raw, json)
Hash identifier:          zkpvWqt1+x7ZRaML9Dc0qHmfSJDPd30rHUm0Lk5DXcE=
Subject key identifier:   5B:BF:A3:07:B4:E5:08:7C:D8:3D:71:2F:96:E4:6F:1D:6D:DC:F9:83
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       83
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/W7-jB7TlCHzYPXEvluRvHW3c-YM.roa
Signing time:             Tue 01 Jul 2025 01:34:42 +0000
ROA not before:           Tue 01 Jul 2025 01:34:42 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        160.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul  1 01:34:42 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=5BBFA307B4E5087CD83D712F96E46F1D6DDCF983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:bd:88:61:5e:dd:20:75:ff:0a:21:4c:13:
                    bc:84:a5:e8:79:fe:09:17:e6:49:0b:5e:e3:a2:dd:
                    a4:7e:ed:e2:19:5f:5f:73:7d:ef:15:e7:ff:51:3a:
                    a1:32:fe:b4:09:52:bc:b2:f8:0a:bf:fc:a6:24:0c:
                    d7:02:bb:66:46:ca:61:6a:18:56:6f:96:df:31:55:
                    ee:93:64:24:95:60:6e:58:80:40:b1:00:cb:3b:26:
                    e0:11:0d:55:52:aa:dd:9d:c7:af:47:5c:28:39:59:
                    00:44:fb:11:ee:63:1d:de:6e:85:c4:ea:59:00:e7:
                    21:95:56:9d:15:ae:93:36:10:66:1d:59:4a:69:94:
                    da:32:7e:df:66:e0:35:d4:9b:b8:58:e0:2b:a3:e6:
                    3d:43:0b:d7:03:79:10:b8:28:1e:b4:ef:5e:7c:ce:
                    85:18:b3:22:5c:50:01:ed:59:cd:af:11:2d:35:00:
                    8e:51:2c:f0:76:bb:94:bd:13:62:e1:8e:d4:f3:f0:
                    cd:19:9a:d5:8d:de:14:ca:51:cf:7d:80:00:3a:7e:
                    15:2b:8e:b7:95:ad:72:6b:1e:cc:2e:08:d8:c9:ef:
                    d8:42:ec:ea:6b:40:be:be:b1:b4:8e:8f:07:da:e9:
                    a6:4d:66:d0:fb:cb:d4:77:17:c3:52:f4:1d:c1:dd:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:A3:07:B4:E5:08:7C:D8:3D:71:2F:96:E4:6F:1D:6D:DC:F9:83
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/W7-jB7TlCHzYPXEvluRvHW3c-YM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:d9:88:b2:7c:c0:3a:8f:21:79:6c:e4:29:96:2a:4d:74:cb:
         78:aa:57:af:5f:3a:1f:d5:79:bb:71:d6:fc:c1:f7:0b:b5:b1:
         e7:95:bb:46:12:41:14:50:f1:da:4d:b7:ca:5c:da:92:b0:b3:
         ff:d1:78:fd:62:88:28:e8:42:1c:b4:aa:33:76:8d:37:5e:15:
         de:5b:eb:a6:da:1f:23:f1:3b:ed:77:a8:ab:64:31:ec:7f:5b:
         bf:2a:7e:bc:96:67:95:b2:f8:20:83:b1:b1:17:0b:58:12:5b:
         02:14:02:ce:c8:66:11:ec:02:fa:2a:8f:f6:7e:d3:27:3a:8b:
         f9:b6:e0:76:5e:6b:f6:78:cc:b6:bd:63:43:b9:a5:bd:a9:82:
         60:91:c7:d6:22:5c:ba:e3:b9:55:10:83:f0:bc:8c:7b:ff:d6:
         a6:a4:3a:38:ff:d9:ac:51:7c:b2:0b:12:b5:fc:6e:54:76:2c:
         c6:89:67:e5:d7:b1:6a:a8:f4:fc:b4:c9:9a:6b:cc:f5:8d:e7:
         92:ad:9a:27:86:84:2f:53:30:85:70:a7:74:d4:ac:98:89:7a:
         99:db:9e:9c:53:2e:b5:ff:25:46:d2:c3:8c:25:31:32:de:ff:
         89:17:d9:de:33:c2:54:9d:9f:e8:8c:7e:bd:fb:4e:b7:de:7b:
         9d:f7:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:21:31 2025 by rpki-client