Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/uxzgVbu_WRxay8luTpEN480xfCg.roa
File:                     uxzgVbu_WRxay8luTpEN480xfCg.roa (raw, json)
Hash identifier:          2n9f1P3t5ndDUTw0yrKy63Z5yb36VTaU/LM+DEy4suo=
Subject key identifier:   BB:1C:E0:55:BB:BF:59:1C:5A:CB:C9:6E:4E:91:0D:E3:CD:31:7C:28
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       17
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/uxzgVbu_WRxay8luTpEN480xfCg.roa
Signing time:             Tue 07 Oct 2025 01:29:58 +0000
ROA not before:           Tue 07 Oct 2025 01:29:58 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18281
IP address blocks:        124.66.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Oct  7 01:29:58 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BB1CE055BBBF591C5ACBC96E4E910DE3CD317C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:98:d3:26:95:97:f5:a0:21:67:c4:ec:64:
                    38:b8:3b:77:23:63:31:0a:cd:6c:ce:06:cc:fd:79:
                    87:28:6c:dd:99:e1:01:6f:61:1d:4e:31:f8:8a:15:
                    f4:d5:0d:69:58:87:62:1c:06:9e:46:5a:c9:79:e7:
                    72:d8:94:42:58:f1:54:16:7e:df:74:ab:34:0a:3d:
                    48:7e:50:55:0b:0c:07:01:da:b2:ee:71:b9:cc:b3:
                    9d:56:30:51:a1:73:ee:d3:95:00:c7:e4:ce:a0:61:
                    24:fc:59:e6:13:d7:ec:d5:37:aa:95:04:99:32:d3:
                    62:80:05:1f:a5:ca:4d:a1:ed:e1:79:54:93:d9:55:
                    85:83:4e:1a:50:8c:3e:41:42:a8:68:4a:b7:86:7a:
                    d0:c3:0d:40:94:da:c1:1c:32:37:83:5d:a0:da:94:
                    e5:d2:e7:a5:00:c2:9c:c4:0a:44:4b:20:f9:9d:c8:
                    02:de:28:c3:14:47:de:6f:d3:70:70:79:a8:be:28:
                    86:6a:a9:32:3d:12:d6:e4:a1:9d:f9:2f:82:f8:df:
                    49:60:2c:f0:ce:bf:f7:43:fd:8a:50:dd:3e:3b:ef:
                    a1:56:fd:04:a1:0a:35:66:53:b1:ca:23:66:8a:b1:
                    be:4b:f4:20:13:4c:5a:c6:5a:45:30:e3:f3:e3:7c:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:E0:55:BB:BF:59:1C:5A:CB:C9:6E:4E:91:0D:E3:CD:31:7C:28
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/uxzgVbu_WRxay8luTpEN480xfCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:44:72:7e:0c:68:74:16:3d:e1:94:37:b0:b0:db:21:2f:
         65:29:90:94:59:a1:8d:ee:e9:50:e2:09:f8:ea:ff:57:0f:0c:
         1c:9f:54:cf:9b:0d:ac:73:f0:24:aa:39:c4:fd:b4:1a:d1:6c:
         b8:5b:fb:8a:ed:30:3e:0c:aa:b6:fd:53:19:e4:31:ba:bc:f5:
         b9:a2:7b:0d:ac:a5:a5:3f:d7:38:4b:21:af:a1:9a:c3:79:3f:
         d2:14:d4:48:76:06:50:f2:19:9c:f4:72:da:05:50:5d:68:b9:
         09:3c:d1:9c:54:20:cf:71:6a:ce:35:3d:cb:fe:ee:6b:cc:4d:
         c4:bd:6d:52:d7:2d:e2:83:bf:68:4f:15:62:58:fd:55:60:c4:
         0b:2d:3d:ed:3a:98:d1:71:b6:bc:f4:2b:e3:dd:69:6f:6c:0b:
         7b:b6:a6:b1:f2:91:66:f1:5b:96:5d:57:87:5e:15:5e:77:8f:
         3a:e8:02:b3:41:9b:4d:46:24:d4:f7:95:70:de:d1:c8:47:b3:
         33:56:f6:d4:ab:ca:fc:d0:e2:10:59:62:16:c2:76:48:c6:1f:
         60:3a:3c:7a:93:85:36:8f:82:9e:0d:62:87:c4:b6:11:96:46:
         cd:4a:15:fa:78:6a:b3:ae:84:9d:71:e5:a8:bd:1c:46:d5:ed:
         37:d3:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:53:04 2025 by rpki-client