Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa
File:                     h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa (raw, json)
Hash identifier:          UNvvBLc8nbMmM23sWxHwczhG6wRHOey7P8iCXoxaXWs=
Subject key identifier:   87:A6:49:84:8C:67:48:88:15:14:AC:ED:A0:46:D7:6B:95:B9:51:3C
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       88
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa
Signing time:             Fri 01 Aug 2025 01:29:53 +0000
ROA not before:           Fri 01 Aug 2025 01:29:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        119.75.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:29:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=87A649848C6748881514ACEDA046D76B95B9513C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:ca:e3:ca:4d:ac:65:1f:5e:42:b9:0e:fd:
                    d3:7b:46:1f:ef:33:0f:5c:d8:3b:03:19:9a:64:8d:
                    01:37:e9:96:9a:c0:33:30:9d:c6:b7:f9:54:3e:cc:
                    3e:3e:a0:80:ef:76:ff:2c:cc:ce:d2:8f:a5:77:4d:
                    ba:f3:9a:bb:bb:76:2e:1e:08:5e:02:33:71:b6:6c:
                    f1:37:83:c6:de:fe:c9:5c:d5:ad:d0:a3:d4:c1:30:
                    f2:5c:c9:48:5c:ee:4b:50:d7:9a:5f:df:9c:5a:bd:
                    36:c6:66:4c:ba:7c:b3:b8:fd:1a:76:2b:22:a2:4c:
                    29:85:59:11:f1:f1:12:45:db:53:58:7a:16:6e:41:
                    6e:b7:45:f3:77:2c:0a:4a:1b:ff:1e:f7:86:de:06:
                    cf:c1:44:95:56:46:06:82:d3:18:f9:3c:95:fd:31:
                    3a:49:94:97:b7:98:a6:45:77:10:f9:62:98:a5:be:
                    43:4b:16:7b:94:79:3f:36:3c:c4:76:2a:40:1e:74:
                    cd:1e:76:a3:52:16:ab:c1:83:f5:a8:c4:42:5f:f6:
                    7b:d7:a9:2d:5a:59:92:e9:74:fc:83:b3:76:16:9f:
                    68:7b:8c:be:dc:ff:f2:d9:d2:f5:a3:64:68:d2:54:
                    db:76:7f:69:78:cd:94:d3:74:89:9b:21:de:3e:33:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:49:84:8C:67:48:88:15:14:AC:ED:A0:46:D7:6B:95:B9:51:3C
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:75:ff:26:0b:52:c7:3f:67:de:e7:9f:0d:0d:1d:b5:d0:a3:
         2d:17:5f:6c:7a:34:bc:20:7f:b6:31:5f:a8:e3:05:6f:94:0b:
         4e:7c:12:97:f1:8c:5e:05:dc:1e:88:05:52:ef:5e:90:38:ff:
         1e:54:fc:d7:46:25:13:0e:c9:39:f3:45:c9:66:c2:47:71:b7:
         8d:0c:4e:63:f7:ea:f0:ef:06:f3:38:9b:9b:70:e9:fc:0c:c8:
         48:81:69:bf:e3:b7:32:aa:b2:89:ff:06:0b:6d:10:9a:14:aa:
         1e:cd:5d:cc:7c:9a:4b:ad:92:f1:35:7d:d8:77:48:e3:6d:5e:
         aa:34:19:84:69:1e:ef:d1:c8:c9:da:63:20:8e:50:a7:38:0d:
         18:ae:e6:9e:f3:56:f0:19:02:a5:09:60:e9:49:64:4b:24:a7:
         06:8d:0a:16:07:d2:4b:7c:13:8a:51:cf:84:a9:8f:50:b1:58:
         e7:fc:13:45:9c:7c:e2:94:57:05:90:50:88:7b:c9:56:cc:2c:
         68:5a:10:41:1d:03:ca:0f:a1:7c:d4:54:37:6e:d1:ae:50:79:
         0f:0e:a5:ac:d9:2d:f7:cb:82:8e:10:a6:ba:36:27:dc:12:7c:
         3a:ac:3f:50:24:a5:5d:b3:d2:ea:3d:2d:8a:ee:06:e1:36:57:
         37:1c:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:23:41 2025 by rpki-client