Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/N2ctY8lAowGZa2HX1fDF1omYFj0.roa
File:                     N2ctY8lAowGZa2HX1fDF1omYFj0.roa (raw, json)
Hash identifier:          T0EeFm/D7NmpP8bdSJpc7rSc1R7R1ohB6Pl4ezaTzmA=
Subject key identifier:   37:67:2D:63:C9:40:A3:01:99:6B:61:D7:D5:F0:C5:D6:89:98:16:3D
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       51
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/N2ctY8lAowGZa2HX1fDF1omYFj0.roa
Signing time:             Tue 01 Jul 2025 01:35:21 +0000
ROA not before:           Tue 01 Jul 2025 01:35:21 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     16509
IP address blocks:        103.167.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Jul  1 01:35:21 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=37672D63C940A301996B61D7D5F0C5D68998163D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:fc:9e:95:64:0a:c2:9a:6e:d3:75:1c:5d:
                    01:b1:3e:13:ee:04:36:a5:9c:9a:25:6c:21:ae:77:
                    cc:f6:5b:25:c9:98:8a:f0:10:90:9c:fd:03:a4:18:
                    3e:79:20:43:63:8a:2f:fe:b4:6f:35:c4:a4:5e:36:
                    19:12:ef:dd:ae:29:d4:76:be:5c:7d:bd:a3:27:5c:
                    b1:71:c7:d1:96:ab:af:32:85:75:e3:17:af:65:de:
                    aa:71:c8:f7:e5:af:c3:a9:55:6b:0d:40:67:6a:eb:
                    85:e1:1d:aa:05:da:7d:33:9c:d4:99:8f:04:a6:02:
                    c7:eb:dd:48:b9:6b:d2:27:54:ad:38:02:4c:d7:9d:
                    aa:d0:1a:4a:5a:4c:c0:f1:46:4f:61:0f:ba:c0:ff:
                    c1:e0:8b:d3:37:2a:26:dc:c9:c0:31:93:35:69:91:
                    d5:51:0c:ae:b2:ea:0f:12:15:82:6a:13:08:89:0b:
                    b0:91:3a:ed:d5:41:58:3a:31:b5:87:64:42:b4:cd:
                    b3:94:68:33:6e:17:f7:27:4c:20:ae:1f:a0:51:94:
                    34:20:69:e0:89:93:f5:a6:ba:5d:fd:3d:37:85:5b:
                    ba:88:5d:a5:2c:60:a5:bf:ce:a9:4c:f2:80:97:8d:
                    ef:3d:54:4a:01:ce:e2:3f:2e:14:a8:70:64:01:8a:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:67:2D:63:C9:40:A3:01:99:6B:61:D7:D5:F0:C5:D6:89:98:16:3D
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/N2ctY8lAowGZa2HX1fDF1omYFj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:dd:13:53:1d:cc:51:91:8f:54:01:23:81:74:67:b8:60:
         18:2a:98:5f:ac:3a:47:a5:9f:62:c0:7e:32:7c:2d:c2:1e:19:
         8f:ef:e1:d5:75:39:54:e6:22:ad:a7:19:7c:57:96:3b:d0:4c:
         46:84:31:3f:6f:1a:37:f7:d8:ef:ba:55:b0:4f:c0:95:bc:5b:
         5b:fc:24:04:94:bc:9c:28:26:00:b8:32:a7:b6:c5:79:18:ab:
         82:b7:3e:31:68:60:cf:a7:ff:99:02:7c:01:16:b3:03:18:20:
         99:ff:24:b2:12:15:a9:00:a7:e3:02:d9:51:54:40:d9:4b:ba:
         00:18:94:32:09:4b:ed:34:d2:a1:54:7c:f1:ef:88:79:db:14:
         f5:4a:08:1a:11:f9:ca:aa:ed:bb:60:35:08:7c:4b:40:70:5c:
         8c:48:24:cc:97:9c:97:a8:08:8b:97:bf:8e:c4:a6:81:dd:d3:
         88:ad:be:41:b1:52:d4:c8:41:c7:fd:c0:3f:02:a4:df:88:c4:
         fa:99:e5:63:ae:74:78:78:b1:37:b2:c6:6b:df:31:36:5e:79:
         7e:87:6f:e4:7b:0a:72:b1:c1:96:4c:93:f7:70:9c:81:a6:88:
         3d:26:64:18:bf:fa:12:da:50:7f:aa:1c:20:ce:b7:72:f6:ca:
         32:36:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:38:10 2025 by rpki-client