Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
File:                     8MqMY6cugCX5FMhF1bonYH7Of2M.roa (raw, json)
Hash identifier:          knd4395KboAKrVGtrXxme87axar3HC2YtqkMGZtfxaw=
Subject key identifier:   F0:CA:8C:63:A7:2E:80:25:F9:14:C8:45:D5:BA:27:60:7E:CE:7F:63
Certificate issuer:       /CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Certificate serial:       30
Authority key identifier: 07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
Signing time:             Tue 01 Jul 2025 01:33:30 +0000
ROA not before:           Tue 01 Jul 2025 01:33:30 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     45677
IP address blocks:        192.92.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
        Validity
            Not Before: Jul  1 01:33:30 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F0CA8C63A72E8025F914C845D5BA27607ECE7F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:b1:5d:df:e9:92:e1:46:5a:b0:23:37:51:
                    7f:18:33:1a:45:a5:94:48:41:e9:8b:6d:b9:ad:44:
                    3c:4e:91:52:e3:cb:f1:53:65:67:84:68:e5:df:0b:
                    17:b9:56:c3:e0:79:17:79:fa:45:cd:f1:3c:1e:c1:
                    f7:66:c1:ba:3c:1e:78:92:74:84:1d:83:e0:e4:8f:
                    d9:32:28:52:7e:59:27:2e:5b:e0:bd:ba:dc:9c:5b:
                    34:2c:fa:8c:6f:0a:a5:8a:34:05:17:3e:bb:e6:be:
                    6f:15:ef:95:67:d4:94:25:cc:3c:4a:b1:f2:b5:93:
                    38:73:a8:a6:4e:00:f1:d4:32:2e:55:35:68:68:f0:
                    aa:4c:ff:4e:21:5f:50:a2:d8:3d:31:16:4e:1e:29:
                    ef:54:16:88:c6:08:c9:0e:c4:07:5a:f6:54:16:cd:
                    b4:fc:d0:ba:37:9a:3d:73:b8:55:e6:c0:c4:a0:1c:
                    6c:79:97:e3:96:42:c8:39:5c:45:11:99:bc:42:ef:
                    a2:cf:46:ea:1c:45:11:b1:fe:f5:13:df:a0:f2:13:
                    3e:4a:56:e4:c5:23:13:73:c3:f6:a8:ac:86:4b:5c:
                    e5:62:f7:68:6a:5f:7c:03:d5:e7:2b:c7:35:3a:2a:
                    b9:ff:3f:77:61:2d:c8:72:f1:38:0e:56:7d:88:87:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:8C:63:A7:2E:80:25:F9:14:C8:45:D5:BA:27:60:7E:CE:7F:63
            X509v3 Authority Key Identifier:
                keyid:07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/8MqMY6cugCX5FMhF1bonYH7Of2M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:d1:dc:4b:d3:63:10:b8:67:3a:5b:18:d5:21:61:33:6a:
         6d:fc:2e:34:53:7c:7c:f4:b2:41:91:1c:ab:ea:cf:c9:28:0f:
         31:22:cb:6a:f0:4d:5d:0d:f4:a6:5b:f7:ce:82:72:64:75:b6:
         e9:43:ca:55:fb:41:d7:11:da:a7:d5:71:64:91:67:f2:79:13:
         72:60:58:e4:8b:55:1e:d4:6f:f0:95:10:e0:20:c9:1f:7f:dd:
         aa:f6:08:48:43:23:9f:93:b3:d8:30:57:e9:6b:39:60:c0:47:
         a4:b4:ee:87:cd:10:50:89:74:05:cb:2b:c7:ad:d9:2c:a7:29:
         33:d0:0c:9a:3c:fe:6e:37:28:01:be:60:bf:fe:75:42:58:03:
         ff:8c:86:e6:ac:81:65:78:d5:10:e9:91:1a:77:ff:a6:56:26:
         56:07:fc:30:79:e3:07:48:5b:02:af:eb:f1:1e:9d:52:c5:0d:
         55:10:8c:b9:b2:41:09:cd:d1:d8:f1:14:3c:8b:27:e1:f8:c4:
         86:78:7d:6b:e6:7b:e6:a8:d0:f7:b5:8d:6e:b9:2d:a9:e6:0f:
         a7:70:72:c5:a3:f2:bb:e6:bf:46:2e:cf:bb:a8:78:8f:20:5b:
         98:5b:f5:43:07:5b:3a:7a:b8:ee:05:ea:d4:3e:51:df:c3:d6:
         39:2f:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:36:01 2025 by rpki-client