Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa
File:                     Z3pcEZRTK88nn-WkAdD8351iOmc.roa (raw, json)
Hash identifier:          u/+tQ3S6yzZeoC0icIsX+T/cAEtsVff2Zzl4aWLSe2I=
Subject key identifier:   67:7A:5C:11:94:53:2B:CF:27:9F:E5:A4:01:D0:FC:DF:9D:62:3A:67
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01FB
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa
Signing time:             Wed 01 Oct 2025 01:33:42 +0000
ROA not before:           Wed 01 Oct 2025 01:33:42 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     59125
IP address blocks:        202.247.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:33:42 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=677A5C1194532BCF279FE5A401D0FCDF9D623A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:1d:fa:24:a5:c4:9b:76:09:23:20:fd:bd:
                    d8:3a:26:3f:3e:ab:c9:84:fc:03:57:d2:c2:6b:3f:
                    ec:b0:f7:8a:56:31:2b:e2:d0:f9:04:b3:37:f5:b6:
                    70:42:03:e9:e5:52:5c:04:f6:fe:11:96:01:57:32:
                    58:3f:17:d0:5d:5d:26:09:1b:10:4a:b1:d2:9c:fc:
                    19:b0:d5:e4:30:49:da:c2:29:2a:f4:7e:f6:0c:71:
                    a0:39:e4:b8:73:74:aa:67:d1:3c:b6:9c:f8:52:e2:
                    10:07:33:fe:1e:5f:e2:03:23:f7:82:bc:c6:61:55:
                    ff:80:c7:95:0c:06:86:78:3f:b3:48:fc:0f:b7:7a:
                    ff:3a:1f:9e:ae:a5:b3:fe:d0:56:93:5e:83:6c:be:
                    fd:69:b0:dd:b4:a4:ec:99:44:95:fd:2f:c2:fc:45:
                    cb:18:c0:1b:cb:e4:4b:a2:65:05:75:fc:b8:7d:cd:
                    fb:6e:06:59:75:4f:49:46:0b:65:24:49:52:07:04:
                    42:25:6c:96:92:08:62:25:76:f9:c2:4c:19:dc:e4:
                    e3:ed:3e:04:aa:45:db:03:f0:ae:6c:61:16:74:92:
                    8b:61:bb:4f:af:50:04:68:b9:a8:40:af:f2:11:59:
                    0f:6a:1b:29:e0:23:b0:6b:88:e2:6f:37:76:3e:71:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:5C:11:94:53:2B:CF:27:9F:E5:A4:01:D0:FC:DF:9D:62:3A:67
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:b2:22:5b:bb:e5:3f:29:6d:ca:e0:36:20:ab:4f:2b:73:61:
         10:37:5e:76:35:58:d9:62:87:14:07:7c:11:7c:9c:7d:61:42:
         9c:4b:d8:aa:75:44:58:09:ba:ac:17:86:ec:36:c9:a3:cb:7f:
         be:7b:b8:c1:3a:3d:0d:fd:81:f3:c3:b8:3e:60:ec:59:37:df:
         3e:24:44:f5:b3:90:a6:46:18:1f:82:39:cf:e3:51:25:86:f6:
         22:1c:4d:8a:f3:b1:e7:34:a8:99:4e:fc:43:94:a1:5f:34:2e:
         9a:cf:dc:bc:1e:f4:a7:ea:37:2b:55:35:c0:70:2d:26:32:56:
         6e:77:c5:c0:28:18:e9:25:38:26:50:bc:49:75:9e:6c:2a:bf:
         10:8a:fa:06:6a:f6:06:cc:63:91:81:f3:e4:17:07:1d:a8:ea:
         2d:60:8a:fd:55:b8:bb:a6:89:4b:fe:7e:bc:53:49:8e:d7:03:
         29:ab:78:17:d6:66:40:39:b0:53:b9:73:97:90:1a:20:a9:43:
         59:f9:6e:d4:9e:e0:4f:e2:5b:13:9b:f7:93:ab:c7:2c:7f:fd:
         1b:ea:8b:0b:0c:82:ca:c1:8e:72:7a:3e:5a:1e:bc:8c:83:9f:
         93:9f:e5:e9:61:33:e0:ad:73:55:9a:5f:dd:25:c3:29:85:f8:
         33:2d:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:40 2025 by rpki-client