Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/YM1DP25a1XDUwAIAYB4VIgTE3Os.roa
File:                     YM1DP25a1XDUwAIAYB4VIgTE3Os.roa (raw, json)
Hash identifier:          Yfw7fBW3tJBCAZPDuKuFsk5lAvea1M34DUKSgJWW0RQ=
Subject key identifier:   60:CD:43:3F:6E:5A:D5:70:D4:C0:02:00:60:1E:15:22:04:C4:DC:EB
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       36
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/YM1DP25a1XDUwAIAYB4VIgTE3Os.roa
Signing time:             Tue 01 Jul 2025 01:33:28 +0000
ROA not before:           Tue 01 Jul 2025 01:33:28 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     45677
IP address blocks:        103.251.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Jul  1 01:33:28 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=60CD433F6E5AD570D4C00200601E152204C4DCEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:fe:53:58:8d:21:3c:b6:53:5d:87:8e:3f:
                    60:6b:5a:34:6c:a1:37:8a:ca:0f:3d:62:87:ee:db:
                    89:eb:23:6e:ab:e5:20:86:82:0a:bb:f6:51:cf:30:
                    7f:d0:6a:9f:fc:06:18:72:e9:10:a5:0e:e7:33:4a:
                    52:16:3d:f5:51:52:b1:d4:06:c4:1f:85:99:ac:22:
                    c7:d1:61:2f:3f:db:74:38:99:86:af:81:71:2a:34:
                    00:59:1b:6b:42:73:27:04:77:a6:3b:c6:65:d8:d7:
                    1e:6f:e8:a1:63:b9:68:89:da:1e:65:be:30:75:08:
                    16:5f:69:b8:21:7e:6b:37:57:df:f8:f1:14:37:13:
                    f2:0a:f2:9e:bd:7a:30:df:66:31:30:10:b5:e0:f0:
                    ed:c3:42:bb:d1:63:78:66:79:93:d6:5a:6a:39:b1:
                    f3:bf:3b:3f:a0:9d:fe:9e:7d:53:82:7d:fb:53:c7:
                    22:03:7e:7d:f5:a6:b4:bf:aa:62:5c:bb:e1:d2:39:
                    f0:68:49:11:cf:df:87:b5:d3:86:54:08:6d:fa:2e:
                    8b:ac:b2:82:dc:fb:57:51:2c:c8:22:a1:22:12:56:
                    ed:0f:6d:17:fc:74:0a:50:6a:83:28:53:95:ca:db:
                    c3:82:7c:73:c9:52:27:75:75:45:47:0c:66:1d:0a:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:43:3F:6E:5A:D5:70:D4:C0:02:00:60:1E:15:22:04:C4:DC:EB
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/YM1DP25a1XDUwAIAYB4VIgTE3Os.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:95:3c:a7:00:b1:d5:aa:a7:90:9b:74:94:ab:f0:43:2e:
         8a:aa:38:28:66:7f:0d:f2:e8:10:2f:b2:05:25:8f:55:d4:46:
         38:49:cc:be:b2:c8:e4:ac:4b:bb:7a:6e:6c:29:cb:91:2c:d1:
         b6:ee:ea:30:b3:46:3d:35:f7:cb:a0:62:c1:c2:a9:a1:28:b3:
         17:e1:d0:ea:56:70:08:3d:79:92:b8:7a:e4:4f:9a:51:d5:17:
         68:4a:66:5f:71:d1:85:22:31:22:0f:0b:26:d6:9e:92:27:4f:
         bb:56:10:b3:2d:aa:ec:e8:8c:8d:a6:5e:77:ae:87:6f:a3:ee:
         70:4f:37:09:9a:9a:a6:7e:b3:bf:dc:99:35:0c:18:7d:46:3b:
         d2:a2:14:d9:c1:8d:fd:6f:0a:32:12:c4:14:37:16:1e:e2:45:
         44:23:d0:e1:bb:66:c4:22:94:fb:8e:29:6e:8c:43:6c:de:2b:
         c4:33:df:0d:4a:a9:4b:b8:61:64:4a:b0:0b:42:82:f7:c7:b0:
         8f:4b:20:5d:f8:c3:cc:30:8d:3c:83:df:3f:a3:a7:b4:42:89:
         13:e3:4e:f5:45:32:8d:79:b4:97:47:33:f6:67:5d:2e:56:bd:
         b0:23:d5:c7:3f:28:59:c3:82:59:25:79:9a:ed:40:83:1e:17:
         0f:f4:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:58:03 2025 by rpki-client