Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
File:                     _3B7QiwW5sTgx4ua99AczTfcvms.roa (raw, json)
Hash identifier:          NxoL0qLLOYeoaqD3GQAcnJKV949PAp7YjHRbT/ytRm4=
Subject key identifier:   FF:70:7B:42:2C:16:E6:C4:E0:C7:8B:9A:F7:D0:1C:CD:37:DC:BE:6B
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       46
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
Signing time:             Fri 01 Aug 2025 01:35:34 +0000
ROA not before:           Fri 01 Aug 2025 01:35:34 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     59127
IP address blocks:        116.199.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Aug  1 01:35:34 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FF707B422C16E6C4E0C78B9AF7D01CCD37DCBE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:dc:50:16:6a:a5:09:0e:e6:43:95:3b:a8:
                    87:2a:55:d3:3f:bf:d6:cf:f1:70:88:0d:ab:e4:5c:
                    3e:12:13:73:b1:ef:a1:b3:6b:53:50:ba:0d:ad:78:
                    13:01:98:db:b7:ce:22:ac:63:be:54:7a:5f:35:cb:
                    a1:72:25:a4:34:8c:7f:80:8a:92:13:12:29:73:55:
                    21:1d:9e:d9:76:9b:66:e4:86:2d:6e:2c:87:e6:10:
                    16:a2:e4:89:83:ea:81:48:2c:20:c6:32:54:71:e9:
                    77:87:52:60:8c:ae:89:8a:a5:ac:0e:73:43:14:26:
                    0b:a7:eb:24:54:5e:e6:b9:e1:f1:aa:09:43:8d:5e:
                    90:81:1a:4d:d6:f6:50:2c:46:03:d1:88:0a:cf:dc:
                    00:2e:3d:1b:68:1b:a5:26:f6:84:03:54:95:6d:58:
                    ef:20:d1:33:35:09:11:9a:e4:6d:87:be:1e:b9:a0:
                    1b:4a:fe:1e:41:66:03:4e:1a:99:9d:1b:b1:22:f4:
                    eb:f7:f8:b7:14:61:50:30:b2:a3:0e:8e:f8:25:cd:
                    ec:85:7a:7e:a0:22:d5:08:28:d5:08:a6:85:90:2e:
                    82:6c:60:21:97:6a:d7:aa:61:0a:27:eb:35:52:bc:
                    bd:07:a3:8a:3f:98:99:07:ce:90:f5:8a:82:08:78:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:7B:42:2C:16:E6:C4:E0:C7:8B:9A:F7:D0:1C:CD:37:DC:BE:6B
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/_3B7QiwW5sTgx4ua99AczTfcvms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:b0:6e:d0:1b:13:a7:90:14:1e:c3:61:48:fd:08:32:b3:
         23:a2:2b:79:b5:22:3a:e5:27:cd:c0:9b:7e:fe:57:8d:c0:7d:
         00:d1:e4:c9:38:60:be:b7:04:55:32:d1:30:77:f9:82:7e:a2:
         1e:83:0f:89:4d:ed:0b:a9:e7:de:54:87:bc:0c:4b:49:4b:a8:
         d6:39:43:e9:0d:db:6b:5c:87:1a:91:42:22:40:4b:50:83:3c:
         9e:7b:52:fe:4d:f6:5b:8f:db:65:5e:94:4b:13:87:01:3a:2c:
         15:e7:2f:20:83:eb:54:db:aa:bb:38:1e:e1:87:7f:65:7b:44:
         90:7c:2e:c6:fd:30:4c:e9:39:f9:e9:d7:2a:6e:4c:ae:01:94:
         70:ee:3f:02:3d:62:56:92:29:5a:62:e7:bb:1a:3b:9c:11:7e:
         77:aa:88:98:83:e4:a0:42:ea:85:61:50:04:0c:8b:c2:83:fc:
         ba:ba:f6:d0:df:e9:c1:ad:50:c6:a4:1d:df:8c:7f:83:c5:d2:
         b9:0e:84:1a:7f:be:e3:cc:b9:3b:9d:b1:28:ef:18:f3:29:74:
         b2:cf:6e:fb:5f:ef:97:43:8d:4f:98:12:10:ea:5a:ee:6c:2f:
         1d:2c:cb:c3:07:e9:11:9e:da:e8:a9:fb:1b:92:3c:2a:fc:d8:
         d3:4e:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:07 2025 by rpki-client