Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/7HkSS_dsZA0dLgQvsgvAZAEbOAQ.roa
File:                     7HkSS_dsZA0dLgQvsgvAZAEbOAQ.roa (raw, json)
Hash identifier:          +/s+7iq9WNs58IHzUDU33XahDFUb1GiX6u7AbP6g9/E=
Subject key identifier:   EC:79:12:4B:F7:6C:64:0D:1D:2E:04:2F:B2:0B:C0:64:01:1B:38:04
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       19
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/7HkSS_dsZA0dLgQvsgvAZAEbOAQ.roa
Signing time:             Tue 07 Oct 2025 01:30:01 +0000
ROA not before:           Tue 07 Oct 2025 01:30:01 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18281
IP address blocks:        202.216.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Oct  7 01:30:01 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=EC79124BF76C640D1D2E042FB20BC064011B3804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:1f:d9:61:39:cf:53:3f:48:39:c5:77:25:
                    b7:e9:b9:3a:64:bc:2a:ff:8d:cc:76:28:1c:19:60:
                    dc:26:9d:fc:85:fb:fe:59:bf:60:6d:98:1d:82:14:
                    02:82:24:3a:62:b3:fb:1a:79:7d:8f:a6:93:37:1c:
                    ef:e2:b0:37:e0:e6:1e:2e:d5:cf:5b:69:bf:64:d0:
                    6b:57:2c:8b:0f:6b:4c:e7:25:e0:c1:b4:c6:8c:99:
                    4d:ab:e5:c3:96:cf:67:09:37:3d:90:b6:0d:70:b5:
                    1e:27:e3:cb:f2:e4:81:52:75:41:f0:db:c5:17:59:
                    c6:0f:9d:8a:06:66:67:73:7a:fe:86:ae:c5:88:7d:
                    32:9d:4d:08:fe:db:44:67:65:cf:c2:3d:2e:d6:b6:
                    7a:88:90:1c:f1:4d:7c:df:93:37:eb:66:41:c7:ea:
                    4d:34:21:c9:44:c2:30:40:4d:52:9e:21:84:7c:eb:
                    43:d7:56:22:a3:54:5b:c3:8a:5e:33:c0:a7:6a:e0:
                    bb:eb:30:c9:57:7b:5f:6a:1a:53:a3:ed:19:7e:ae:
                    bb:97:ac:77:c3:a8:0d:1c:2a:f5:c2:ec:49:4f:f3:
                    b6:48:68:c4:f8:83:fd:61:72:f0:b3:30:ed:65:48:
                    dc:e2:a6:ef:5d:75:1d:05:a0:dc:e2:5c:51:23:81:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:12:4B:F7:6C:64:0D:1D:2E:04:2F:B2:0B:C0:64:01:1B:38:04
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/7HkSS_dsZA0dLgQvsgvAZAEbOAQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:b7:cc:6e:9e:ab:de:68:84:c8:32:4e:84:13:a5:7b:04:bc:
         dc:38:cc:8e:1a:1e:7d:b0:a1:77:ef:32:51:78:4f:21:da:8d:
         9d:dd:d6:ad:56:c1:b0:31:8c:93:33:a5:3c:93:5c:9d:a0:02:
         b4:b1:3f:ba:e6:52:8e:c5:68:f9:28:54:46:84:ee:36:91:e9:
         3d:a0:de:bb:21:05:07:a1:2f:99:b0:34:52:78:99:c1:1a:32:
         9a:5d:96:86:0d:f8:0b:f9:a6:aa:f2:de:2d:3a:27:f0:6c:e3:
         91:39:05:f8:08:6d:43:0e:93:b0:25:9b:2a:55:bf:73:b3:53:
         9b:e3:22:d3:f6:ac:ff:00:96:3a:39:9d:53:a1:e6:1c:75:e2:
         b1:de:fc:a2:7c:c5:b0:f3:90:52:4a:a4:0a:5a:9a:c5:5a:04:
         72:ba:3d:c6:e4:e4:51:22:f8:ed:80:63:10:d1:28:86:77:2c:
         cb:8f:0c:c7:ff:a9:06:cc:54:72:55:9e:e3:3a:79:44:fa:e3:
         6d:9c:02:02:de:bd:55:3d:3d:40:34:db:ba:35:d1:95:79:20:
         ff:5f:30:4b:b9:87:8a:0b:9e:6f:52:5f:69:e3:e5:35:49:46:
         06:8b:bb:8c:c5:4c:c0:4e:ec:31:01:af:10:50:e4:a2:48:cd:
         18:53:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:37:36 2025 by rpki-client