Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
File:                     KQCR2PqzfdWZR_rrEoztAhPhH78.roa (raw, json)
Hash identifier:          oxGWgpp8CPOFA9BBs3iiU/NYyd2Xh9ORDCvpORuC7Nw=
Subject key identifier:   29:00:91:D8:FA:B3:7D:D5:99:47:FA:EB:12:8C:ED:02:13:E1:1F:BF
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       53
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
Signing time:             Fri 01 Aug 2025 01:29:44 +0000
ROA not before:           Fri 01 Aug 2025 01:29:44 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131921
IP address blocks:        157.120.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Aug  1 01:29:44 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=290091D8FAB37DD59947FAEB128CED0213E11FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:10:17:43:ce:38:5d:cf:6f:a1:93:da:10:
                    58:46:e4:3a:5d:29:25:c9:1e:f5:a2:46:c1:17:3c:
                    a6:58:ec:83:eb:38:75:8a:16:44:95:28:98:f3:5d:
                    ac:5b:43:a9:34:d7:ca:16:da:b2:67:bf:50:df:03:
                    82:e4:65:a3:bc:f8:9d:e6:ce:e1:5b:05:24:4e:8d:
                    09:36:2e:1f:86:23:95:1c:99:62:fa:b3:75:e0:3e:
                    22:f0:99:ad:bb:87:ec:3e:88:49:29:c2:70:07:07:
                    78:65:b6:7b:6a:ae:c7:2d:84:c7:a1:68:98:c4:58:
                    98:21:1d:1a:bd:3b:2f:1f:d7:23:99:07:37:a4:af:
                    79:43:2c:cf:24:db:be:01:ce:2b:b2:9e:b4:b7:30:
                    cf:0f:84:96:a5:8d:d6:18:3c:cf:1c:64:f4:06:0d:
                    52:35:64:4e:b4:91:84:40:4f:f6:aa:d7:d0:c8:73:
                    64:a4:0a:a6:5f:c2:e7:4e:8f:eb:0b:71:97:90:85:
                    0e:7b:1b:f0:1c:28:d3:63:68:40:65:1d:22:f0:4e:
                    08:ad:89:65:52:20:17:2d:ba:0f:f0:f6:f9:f4:15:
                    04:91:93:db:77:01:ba:e1:17:02:11:f0:94:a5:c7:
                    c8:c1:3c:be:27:a2:55:57:bf:a5:cc:1b:a6:d1:f9:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:91:D8:FA:B3:7D:D5:99:47:FA:EB:12:8C:ED:02:13:E1:1F:BF
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/KQCR2PqzfdWZR_rrEoztAhPhH78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:e6:f7:03:ff:44:52:96:4b:c2:e5:8d:ec:c9:2c:39:ac:
         c6:35:8d:07:46:28:3b:e5:66:59:b7:33:d8:f5:45:ff:71:30:
         4b:f8:da:dc:4d:4c:02:1f:07:63:b3:a3:74:0e:c2:16:03:46:
         a3:cf:81:4c:d0:c9:3d:52:36:b0:bd:7d:6f:fa:7c:54:3c:d0:
         f6:a5:18:74:82:0d:28:56:26:4a:5c:d8:26:2f:0c:46:ab:ef:
         79:7f:49:41:88:b3:8e:37:86:b6:65:3b:e5:be:83:8a:d2:39:
         13:ee:b2:fe:1c:2a:d8:a8:36:6a:e5:76:47:77:03:18:ed:bf:
         3c:8d:0f:da:95:7f:d3:37:78:0a:e5:df:97:40:fe:b2:5e:d2:
         b7:23:c4:67:ff:03:d9:2c:31:c4:7e:9f:b4:9a:7a:07:81:fc:
         9a:9e:c0:af:1b:91:2c:c3:c8:fe:11:47:85:5f:d5:ab:19:b4:
         6f:bb:0f:2c:8c:04:03:9a:7d:72:b5:92:1f:f6:ba:94:9d:e9:
         f8:87:ce:9e:e1:57:c0:96:e6:57:f1:a1:9a:9d:9d:e3:77:e1:
         a2:9a:3f:2b:a3:d3:8d:6d:f9:bc:b5:2a:27:7d:28:68:2b:60:
         08:d2:ff:c9:4c:b3:aa:88:d7:8e:32:0f:a3:6e:42:f4:bf:69:
         53:8d:1f:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 13 23:16:14 2025 by rpki-client