Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/n8RQBLqWolQT_SC_PPGp7Byw3fw.roa
File:                     n8RQBLqWolQT_SC_PPGp7Byw3fw.roa (raw, json)
Hash identifier:          GXK8vztODLU4JiMc5BY1MpWIfewRlstUVeIVe2Uie84=
Subject key identifier:   9F:C4:50:04:BA:96:A2:54:13:FD:20:BF:3C:F1:A9:EC:1C:B0:DD:FC
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01C3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/n8RQBLqWolQT_SC_PPGp7Byw3fw.roa
Signing time:             Tue 01 Jul 2025 01:34:44 +0000
ROA not before:           Tue 01 Jul 2025 01:34:44 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        202.238.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:44 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9FC45004BA96A25413FD20BF3CF1A9EC1CB0DDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:b3:9e:65:95:0b:c9:08:ac:21:75:75:2f:
                    64:8d:ae:16:aa:18:6f:a4:37:ae:7b:b5:72:46:ee:
                    62:ff:17:34:15:03:6f:ad:6e:3a:c9:3c:c7:39:b8:
                    94:1c:82:18:ee:c1:f4:7a:11:03:16:f9:ba:46:65:
                    40:6b:89:f8:1d:06:75:61:45:13:6c:65:bd:2e:82:
                    9b:ab:0f:1d:07:31:d4:0a:6a:84:08:b5:a0:f9:dd:
                    cf:ce:fd:0b:1f:e3:a8:2e:07:a2:52:a0:49:44:ca:
                    a5:77:d9:6a:ee:2e:c3:cb:d7:5e:1c:a0:43:93:f3:
                    16:b8:7b:22:59:b0:3b:c7:0b:f7:3d:ce:b6:7c:19:
                    d3:6d:10:03:bc:38:82:c8:4e:e9:7e:7b:d9:d3:ba:
                    ac:e2:cf:5b:2f:b4:59:4f:76:e4:de:2a:1d:32:fb:
                    28:d7:b5:e9:61:c5:6d:55:cc:88:46:6c:28:9d:71:
                    86:7e:57:9e:28:6e:a2:39:c9:6c:ef:db:f0:74:2a:
                    3d:a0:95:7f:25:6a:b8:17:e5:f3:a5:72:63:e6:15:
                    58:68:79:72:79:f8:6e:65:f6:6a:a6:e1:50:ca:ed:
                    5b:f6:f7:62:28:5d:49:c5:2a:56:e1:4c:be:82:9d:
                    44:ca:d7:7d:2e:c6:42:c6:2e:7e:85:d4:57:f9:97:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:50:04:BA:96:A2:54:13:FD:20:BF:3C:F1:A9:EC:1C:B0:DD:FC
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/n8RQBLqWolQT_SC_PPGp7Byw3fw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:05:9b:c6:cd:3e:6d:99:94:5a:4e:b9:10:d3:a0:e0:53:08:
         45:ee:ee:04:9e:8c:a8:bf:b8:39:3a:cf:bd:e4:f8:dc:c7:6f:
         ee:44:e2:d5:d1:b4:1c:2b:75:52:fb:92:65:cf:57:5c:58:f7:
         66:d9:42:af:e8:c0:8e:78:69:af:7e:6f:e7:4e:2c:05:cb:27:
         38:fe:ef:c1:c0:00:a6:a5:04:65:a3:d3:7b:33:f1:36:9b:a7:
         3e:c5:1d:46:aa:5a:87:e1:a5:f4:eb:6c:14:8d:bf:32:2e:94:
         3c:3c:83:84:e4:f1:21:b2:f5:aa:76:d2:d1:7e:8b:c6:8a:21:
         84:bb:fa:7d:d9:a9:ab:3f:63:87:25:49:18:52:e7:63:e2:01:
         8b:ae:d4:84:06:f9:66:c5:0f:9b:26:3c:92:bf:99:47:95:c9:
         b9:6c:27:30:78:32:30:c0:7a:68:67:c5:26:2a:aa:e9:30:43:
         ea:5e:bf:58:96:70:2b:21:49:73:6f:d9:67:3d:be:e5:c8:3a:
         ff:50:39:6b:43:1d:f8:c1:68:46:cb:7d:a6:da:cb:9a:7a:99:
         a8:0e:f6:eb:f1:93:db:61:b7:d8:07:16:fc:04:a0:e8:a9:91:
         eb:06:d7:f5:e5:a5:f2:97:1b:4d:d0:8b:57:e6:c5:74:28:e2:
         80:13:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:11:46 2025 by rpki-client