Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/87aYYY2HrJDgNCefDEg6wSrQNyo.roa
File:                     87aYYY2HrJDgNCefDEg6wSrQNyo.roa (raw, json)
Hash identifier:          w+jZxI/yr4hqsQQz4PATRSLSRpCMRAQ03/9LRfqRKeM=
Subject key identifier:   F3:B6:98:61:8D:87:AC:90:E0:34:27:9F:0C:48:3A:C1:2A:D0:37:2A
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       2D
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/87aYYY2HrJDgNCefDEg6wSrQNyo.roa
Signing time:             Tue 01 Jul 2025 01:31:37 +0000
ROA not before:           Tue 01 Jul 2025 01:31:37 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23791
IP address blocks:        110.5.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul  1 01:31:37 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F3B698618D87AC90E034279F0C483AC12AD0372A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:a6:88:a7:ad:6c:41:8a:b2:ec:f7:d9:d6:
                    9a:98:70:92:78:da:1d:15:a5:4a:c3:f4:c5:c9:f3:
                    d9:5b:a3:e4:71:b5:b5:8d:5a:02:0b:53:8d:83:7b:
                    0e:39:e2:6c:1f:6f:d5:48:d0:9e:4d:2d:89:29:86:
                    f5:45:04:16:6c:93:17:38:7d:36:f2:9b:f7:2e:60:
                    2a:52:45:9d:22:da:71:f6:03:0f:2c:01:f6:62:3d:
                    4d:98:52:6c:e2:e0:df:c8:ab:b4:9d:ee:75:0e:c4:
                    26:7b:28:f7:80:73:b7:17:3c:60:17:8a:a1:c7:b0:
                    d4:d0:90:79:c8:3a:7a:4e:9c:a0:1d:f6:5b:44:5e:
                    ea:64:18:cd:d6:cd:01:b7:53:f6:52:40:9c:20:d3:
                    75:4c:1e:e1:37:73:22:46:3b:63:2e:e6:92:f9:d4:
                    76:ca:9c:ea:f8:4b:ee:e0:7b:e8:f9:cf:37:18:b5:
                    e3:a1:0a:9d:42:96:60:89:44:b7:ec:ee:bd:a4:7f:
                    66:0d:03:ef:4f:ce:b0:6b:fa:b4:49:de:c7:94:4d:
                    80:f9:da:3e:5f:8c:d7:ef:81:33:43:9f:31:a0:99:
                    48:03:72:f3:5e:79:16:3e:6e:00:03:12:2a:4f:70:
                    99:67:f2:a1:fd:25:1e:70:a6:7b:97:4b:7b:c8:94:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:98:61:8D:87:AC:90:E0:34:27:9F:0C:48:3A:C1:2A:D0:37:2A
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/87aYYY2HrJDgNCefDEg6wSrQNyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:44:68:a9:20:32:c1:dd:ba:3a:e4:5a:94:ae:20:59:34:1d:
         ff:fd:97:26:11:c2:35:54:ba:52:09:46:19:8c:da:2b:3d:a4:
         c0:54:ac:69:89:c2:93:60:c7:21:08:ae:e6:bc:2b:73:ca:c5:
         72:32:c0:32:c5:cc:e9:ea:ee:84:17:47:cb:08:97:82:18:33:
         8f:83:82:12:98:72:cc:12:51:f6:9e:a4:eb:1c:fb:13:dd:91:
         39:61:ee:54:16:9c:c8:d5:16:22:80:b8:3f:28:9f:82:c9:4d:
         4b:00:8a:c1:62:ab:13:c2:bf:4c:02:28:f6:a7:d0:6f:88:18:
         2d:34:fa:0d:bd:87:f2:7a:63:67:fd:b3:79:30:a3:e1:22:eb:
         6c:9b:db:1f:fd:dd:b1:39:fe:1f:5d:0d:c8:3e:2d:3a:a8:70:
         0d:eb:27:7b:3b:eb:64:f6:af:52:bb:82:7a:12:71:aa:2a:2e:
         b7:48:62:22:55:ba:07:ba:34:53:ba:05:15:35:a7:c6:aa:73:
         0b:a8:c4:c3:9f:84:7e:bd:38:76:e4:38:a6:53:cb:94:96:5c:
         0f:28:77:89:87:da:93:f6:19:38:77:b0:55:44:18:24:52:1c:
         d8:eb:f4:8f:94:84:a0:00:2a:48:72:f1:59:8d:ad:e7:c3:36:
         db:78:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:22:58 2025 by rpki-client