Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eGd28wJPGsCW2OqH0nLvNrC7h-8.roa
File:                     eGd28wJPGsCW2OqH0nLvNrC7h-8.roa (raw, json)
Hash identifier:          m7U40XEN1+JsNjnQx1ncOA83o+p72tter0VXmLzrZmE=
Subject key identifier:   78:67:76:F3:02:4F:1A:C0:96:D8:EA:87:D2:72:EF:36:B0:BB:87:EF
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       8A
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eGd28wJPGsCW2OqH0nLvNrC7h-8.roa
Signing time:             Fri 01 Aug 2025 01:29:54 +0000
ROA not before:           Fri 01 Aug 2025 01:29:54 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        175.111.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:29:54 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=786776F3024F1AC096D8EA87D272EF36B0BB87EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:33:80:51:2b:3e:4b:0a:c4:79:40:7c:4b:
                    4d:d3:84:9e:8e:49:04:06:53:62:3f:c7:d2:d6:82:
                    a7:cd:07:68:1c:9e:06:f7:da:37:1c:69:9c:49:08:
                    51:13:e5:b1:50:eb:a2:f1:4c:0c:58:17:e4:10:78:
                    e2:8b:63:84:f0:11:22:18:c6:8d:fc:04:ea:00:00:
                    05:96:e2:b4:fb:54:79:5a:24:d2:e4:58:90:87:0a:
                    69:53:94:6d:dd:73:ad:e2:33:5d:39:f2:e8:19:3c:
                    b8:20:52:69:7f:5a:72:48:c3:08:05:2a:3d:2a:c0:
                    48:f4:9d:dd:dc:57:dc:26:3c:41:a6:6b:92:79:6d:
                    5b:09:d9:bb:87:37:7f:aa:0a:b6:a9:33:e5:d1:ef:
                    9c:8b:86:d0:ee:a6:0d:0a:4b:32:68:d0:0c:5d:b4:
                    ee:4f:90:db:76:61:9e:02:f4:af:62:da:09:ae:8b:
                    ca:49:a7:6b:a8:47:0a:64:13:cd:94:5a:12:08:aa:
                    d2:32:93:24:c6:c3:03:cf:3a:86:cb:9d:84:fb:ad:
                    ee:d2:d1:93:70:bb:81:6b:1a:ab:df:3d:31:bd:95:
                    1f:46:d9:1e:d8:10:49:fc:31:84:08:4c:e0:88:a4:
                    5c:59:02:4a:57:e8:88:05:07:c6:34:14:84:58:c2:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:76:F3:02:4F:1A:C0:96:D8:EA:87:D2:72:EF:36:B0:BB:87:EF
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eGd28wJPGsCW2OqH0nLvNrC7h-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:45:c9:41:f5:99:55:22:91:8c:f8:e8:ed:83:e0:a2:7b:01:
         ea:0a:7a:1d:1f:ca:88:09:cc:13:b6:20:ca:68:0c:59:31:d7:
         14:68:38:ae:3c:c5:0d:4c:55:1a:8d:9d:af:1b:1c:fb:25:7a:
         63:bb:fe:c8:b4:a6:42:84:f8:bf:5d:c1:a6:a0:9f:93:7c:1c:
         47:a5:77:c8:1f:d2:54:ac:18:ea:ef:ad:ee:c2:bc:82:df:76:
         a3:41:a4:0a:60:52:51:bd:55:0f:19:92:ae:9c:61:ac:bb:8b:
         55:01:6c:cd:ca:75:5d:bf:c7:01:2b:04:75:c1:f9:b9:0b:39:
         1a:a8:4c:01:95:2a:51:b3:dc:8e:11:c4:e5:c1:dc:3f:3d:94:
         d6:0e:36:73:34:4d:15:d4:99:6c:fd:96:17:b2:42:55:32:b1:
         99:59:d4:25:a2:84:5b:f8:4c:8d:10:7c:03:3e:fa:16:9e:2d:
         d4:e6:c9:fc:96:60:61:80:6a:2d:05:0e:b9:48:7d:b2:4e:06:
         ee:a6:c3:93:66:6b:7f:b4:f3:bb:df:d9:68:a5:65:b2:56:a0:
         e9:cc:25:d3:1a:e9:0e:e2:23:cb:c1:98:87:31:7f:7e:9c:64:
         94:7d:f5:cd:2c:1a:24:c3:bc:02:26:9f:e6:fc:dc:be:c5:5c:
         b4:ad:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:21:30 2025 by rpki-client