Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/qxp4D-zzEvA6Bc6YdCU0X82RrQI.roa
File:                     qxp4D-zzEvA6Bc6YdCU0X82RrQI.roa (raw, json)
Hash identifier:          Fi1WKkgREsvJfo3G/opDstrKLMCuhb/FyBm30WNa0sU=
Subject key identifier:   AB:1A:78:0F:EC:F3:12:F0:3A:05:CE:98:74:25:34:5F:CD:91:AD:02
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       52
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/qxp4D-zzEvA6Bc6YdCU0X82RrQI.roa
Signing time:             Wed 06 Aug 2025 04:43:47 +0000
ROA not before:           Wed 06 Aug 2025 04:43:47 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        133.106.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  6 04:43:47 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AB1A780FECF312F03A05CE987425345FCD91AD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:71:80:27:f2:cb:ac:ee:9f:1c:c0:f1:e4:
                    f8:d3:00:c5:ba:31:03:17:b6:05:f9:7f:c4:08:6f:
                    ac:c8:b2:e0:a8:14:e5:53:17:2f:4f:3e:10:ff:be:
                    ba:cc:04:04:a3:7e:f4:58:ac:30:6e:6e:bc:50:69:
                    d7:0c:1b:e9:23:e5:3c:e6:93:f5:d9:20:47:11:c5:
                    27:17:7b:40:ae:d1:01:ea:ee:e3:ae:c6:25:8a:f7:
                    3a:0d:da:64:fa:b2:f6:2a:58:c9:65:68:21:cb:1b:
                    4e:71:9c:db:fa:6d:35:a1:94:5a:1c:18:f0:1e:24:
                    a7:ae:7f:08:a8:a1:bf:20:e5:fc:d3:01:c9:4c:37:
                    9d:cd:fc:c9:b9:2f:e2:6c:ad:99:b7:d0:9f:5c:c5:
                    68:48:25:dd:04:67:34:57:92:20:e1:b7:71:06:f6:
                    63:8c:56:08:0e:61:f5:3e:97:bd:04:39:d2:35:48:
                    62:37:e9:52:e1:a7:22:9a:75:78:32:67:35:de:6e:
                    69:51:9e:40:57:60:81:1b:13:d1:52:e5:2f:fb:f7:
                    3a:c3:89:36:da:0e:1e:5d:db:21:15:46:95:1d:c9:
                    8f:c0:0a:2d:87:ef:e8:05:09:af:51:5f:c5:d0:ec:
                    cc:09:dc:bf:44:ea:48:da:e0:c6:98:6b:95:ee:74:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1A:78:0F:EC:F3:12:F0:3A:05:CE:98:74:25:34:5F:CD:91:AD:02
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/qxp4D-zzEvA6Bc6YdCU0X82RrQI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.106.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:2c:c7:ef:01:dd:e6:ff:14:73:c6:e2:d9:1b:a3:26:d2:
         83:a2:c3:75:b7:7d:e2:67:99:e5:e4:6f:f0:57:1c:c2:a9:a2:
         ef:05:88:37:ff:69:8c:68:b4:9c:9d:4d:eb:fe:39:2f:5e:bf:
         17:ab:ff:67:c1:46:e9:30:9a:fe:41:f5:48:5c:4e:98:6d:72:
         5e:ae:4b:19:bb:9d:dd:54:53:14:43:d6:ce:fd:d5:6d:5d:fc:
         c8:32:15:7e:e4:cf:1f:ba:6f:e0:92:75:70:75:ef:2f:20:ae:
         2f:24:2c:09:98:a9:d6:89:ea:a9:64:5a:72:e5:4e:12:f8:50:
         c3:8e:2f:d0:02:b5:52:48:d2:f0:23:5b:f5:3a:f8:5c:f7:08:
         0a:0e:e3:6f:09:be:e8:3a:33:05:c8:02:6a:71:d8:9c:86:ac:
         5c:1d:3c:72:9c:1f:0f:5b:f3:8c:d5:ef:86:7a:ee:95:56:d3:
         21:95:a8:3b:70:2b:e6:ca:c7:f0:c1:57:33:e4:43:eb:e6:77:
         55:ab:f7:f0:b2:1a:7c:6a:be:56:dc:8a:6f:3b:65:d1:08:8e:
         11:ce:f2:bf:de:10:7f:ee:7a:f3:ee:f1:38:02:5d:41:28:df:
         74:60:68:15:d6:90:14:65:32:0e:78:9f:78:65:b4:51:72:db:
         b8:2d:69:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:49 2025 by rpki-client