Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/vixvzmTLFVL9qdLkAO9YPa3p-a8.roa
File:                     vixvzmTLFVL9qdLkAO9YPa3p-a8.roa (raw, json)
Hash identifier:          DJjXdF5+Wp6GjKaJfcBBO9hfYZcGjDeCgcBHShYxypM=
Subject key identifier:   BE:2C:6F:CE:64:CB:15:52:FD:A9:D2:E4:00:EF:58:3D:AD:E9:F9:AF
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       4D
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/vixvzmTLFVL9qdLkAO9YPa3p-a8.roa
Signing time:             Tue 05 Aug 2025 01:16:59 +0000
ROA not before:           Tue 05 Aug 2025 01:16:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     138384
IP address blocks:        219.106.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Aug  5 01:16:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=BE2C6FCE64CB1552FDA9D2E400EF583DADE9F9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:d2:2f:c6:2f:16:2c:8b:69:f4:d9:14:89:
                    98:f7:e5:b7:6b:71:8a:d8:09:93:53:37:e2:b7:97:
                    f7:fe:8a:30:4b:52:23:4e:9b:b6:5e:1c:e5:78:08:
                    5d:66:6e:03:8b:fa:b6:02:ef:45:04:ec:87:c7:92:
                    74:84:aa:ec:ce:be:06:af:82:63:b4:d8:dd:a3:cb:
                    81:5c:d5:16:73:b8:69:2f:4d:7b:f9:74:6f:d8:a0:
                    3d:16:e5:e4:e8:12:60:bf:ad:7e:31:41:86:c4:e2:
                    bd:33:e3:34:83:89:dc:79:00:e6:ab:cf:35:55:a5:
                    59:3e:d1:9a:9b:6d:db:5a:4d:37:4c:3a:c9:c5:03:
                    99:07:63:b8:59:71:d8:31:e0:f9:c0:fc:ee:ad:44:
                    ee:7c:b8:e9:e7:7c:0b:03:c7:d7:17:07:e2:89:aa:
                    48:bb:56:82:bf:92:e3:be:69:9e:f9:69:c6:4c:72:
                    b0:03:6a:0d:38:4a:32:70:5b:40:3c:0d:93:1f:e5:
                    75:44:24:51:2e:ba:7d:e5:ae:1b:30:df:92:c1:c6:
                    83:c8:6b:68:c9:58:99:8a:21:42:79:7e:be:e7:04:
                    d9:7f:95:b8:91:b4:32:32:ce:d3:18:ca:2f:67:3e:
                    32:37:db:5f:34:50:3b:ee:39:0d:dc:19:e1:08:39:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:6F:CE:64:CB:15:52:FD:A9:D2:E4:00:EF:58:3D:AD:E9:F9:AF
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/vixvzmTLFVL9qdLkAO9YPa3p-a8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:ad:60:22:7a:98:b7:08:f3:b0:32:9a:93:67:57:11:4f:0d:
         a2:8a:eb:d8:fe:c3:44:fd:2c:8c:60:4b:a4:c3:0a:3d:db:37:
         01:e5:2b:ce:18:ee:0b:f5:5e:0b:f3:9c:12:9a:3b:be:55:65:
         c7:99:5a:21:05:51:c1:fd:e3:d2:24:3a:86:1a:8f:c4:10:a2:
         28:cd:32:0d:bb:6c:1d:5b:8d:02:22:7d:da:85:9e:43:80:ca:
         89:78:ef:92:30:38:e5:da:64:ec:5f:1f:63:09:31:fb:09:d6:
         d7:fd:25:18:d1:09:22:f6:54:f7:92:07:41:eb:60:00:bd:10:
         1a:12:e2:99:0c:c6:3a:62:5b:80:95:35:75:cc:cf:94:da:7e:
         47:31:ef:7b:2b:e2:1d:d8:f8:a1:ee:6d:4b:43:dd:c6:f1:90:
         96:e5:d1:a8:c9:22:9e:ec:e8:c8:40:1a:95:ae:ba:bf:6d:f8:
         5c:a1:42:17:5a:3c:e3:28:58:83:c9:74:4e:0e:1a:5a:1f:4a:
         cc:f0:1a:93:a8:b6:6c:04:c7:a2:2f:1b:13:3b:b8:a2:86:d5:
         05:b8:c7:55:90:a1:75:26:1a:0f:8c:70:8d:98:67:37:cb:29:
         17:6b:8f:e5:be:37:78:65:76:7c:09:20:8e:43:38:fd:ee:ea:
         74:09:66:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:18 2025 by rpki-client