Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
File:                     a1jW32tO_mL_zHwRgRVnRVm8MpE.roa (raw, json)
Hash identifier:          cyVBfZefqU5UyGJcFti9UUwvdXBmaIyCWlsE7DZmS2Q=
Subject key identifier:   6B:58:D6:DF:6B:4E:FE:62:FF:CC:7C:11:81:15:67:45:59:BC:32:91
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       36
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
Signing time:             Tue 01 Jul 2025 01:32:18 +0000
ROA not before:           Tue 01 Jul 2025 01:32:18 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        61.213.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Jul  1 01:32:18 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=6B58D6DF6B4EFE62FFCC7C118115674559BC3291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:4c:d6:ce:c5:a9:78:c0:43:86:75:87:1c:
                    61:58:48:69:f7:64:65:9a:2b:ab:b2:e3:1f:95:71:
                    23:d0:75:5e:73:55:f4:66:3e:10:10:54:1d:87:95:
                    1c:9d:82:b3:22:42:09:6f:96:4a:df:85:e6:94:e3:
                    f6:8f:e0:1e:a3:60:d6:98:45:0f:ec:2e:05:44:4d:
                    ef:e2:84:82:a0:a4:3b:3c:90:1e:a5:7a:1a:c4:5c:
                    b4:4d:1b:76:fa:92:c3:51:7a:62:a3:d3:26:ea:1b:
                    44:e5:d2:50:24:2e:8c:64:45:cd:5e:fb:06:7d:b5:
                    4f:23:49:91:55:e5:12:df:6a:c0:19:82:44:21:c1:
                    40:d9:73:13:3f:88:ba:ce:fa:1c:32:f1:01:49:4a:
                    0e:77:ac:75:cf:e2:06:38:88:1b:33:1f:9d:2d:49:
                    95:f0:da:b6:0f:78:68:6c:e5:72:40:95:27:97:f8:
                    a4:48:42:6e:95:72:f8:6a:37:80:8c:e2:fe:e9:ba:
                    4a:d1:33:55:34:0a:57:83:26:58:07:a3:3e:71:39:
                    d3:98:be:76:63:d9:9b:7c:3b:6c:d4:9c:6c:d9:09:
                    ba:83:71:b8:e1:cb:52:67:6d:93:93:64:79:3c:e2:
                    46:56:c2:48:95:09:f3:27:82:42:7f:f6:07:ff:70:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:D6:DF:6B:4E:FE:62:FF:CC:7C:11:81:15:67:45:59:BC:32:91
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/a1jW32tO_mL_zHwRgRVnRVm8MpE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:7d:58:d5:20:2f:0f:cb:92:8a:09:d2:00:ea:0c:7a:4d:
         de:02:6d:8d:f8:cb:d3:1b:62:87:d2:d7:39:5f:69:a5:4f:e9:
         a5:e3:20:40:f6:47:b4:fd:6b:38:fe:9c:7b:aa:d7:07:c7:23:
         6a:40:7d:d0:70:42:6b:f4:00:71:c3:29:d6:af:ab:48:53:97:
         22:d4:a8:bf:7c:83:82:57:fe:ff:91:5e:a2:64:17:51:aa:48:
         c0:13:c6:1b:23:7d:f9:07:3a:d8:28:f9:f3:d0:a4:2c:ea:44:
         d9:b6:6f:ff:e7:fc:4b:c0:2d:f8:fd:b1:45:d6:f7:e8:b7:66:
         38:11:59:56:77:1c:88:bc:50:24:f4:9e:52:61:f8:c0:8d:ca:
         60:b6:4c:94:f0:56:f6:06:59:0b:27:b7:03:2f:1d:53:8b:c6:
         2a:bb:f1:1a:d7:a0:a0:ea:e1:71:56:67:d7:ab:72:8d:b5:b0:
         47:12:04:67:a6:bc:6f:46:55:29:fd:2d:12:e3:5b:c3:42:25:
         39:13:4f:63:f2:6e:06:54:0b:db:68:31:cc:06:a5:23:27:e3:
         29:ea:3c:4d:0a:9f:21:d5:13:73:eb:0b:8f:b4:91:0f:b2:59:
         85:d5:85:b8:c6:97:bc:2e:f2:2f:d9:50:f9:fb:49:69:a9:70:
         ee:10:cd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:26:12 2025 by rpki-client