Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YjdtVkQ5-6ZsE48j2DCUpiCWfC4.roa
File:                     YjdtVkQ5-6ZsE48j2DCUpiCWfC4.roa (raw, json)
Hash identifier:          R+jbyGswvnUjDmzWF40X/BDAacgXD/wP0wpzasR52b8=
Subject key identifier:   62:37:6D:56:44:39:FB:A6:6C:13:8F:23:D8:30:94:A6:20:96:7C:2E
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0126
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YjdtVkQ5-6ZsE48j2DCUpiCWfC4.roa
Signing time:             Sat 01 Nov 2025 01:39:04 +0000
ROA not before:           Sat 01 Nov 2025 01:39:04 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2914
IP address blocks:        210.175.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:39:04 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=62376D564439FBA66C138F23D83094A620967C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:d2:54:06:ae:95:3f:d9:c5:e3:f6:3e:e8:
                    29:cf:6d:af:1d:29:da:39:5d:a1:02:73:0a:74:93:
                    6a:31:1f:20:cd:45:aa:3f:d5:35:44:ac:20:59:b4:
                    b9:0a:a3:cf:57:59:0f:57:9f:51:c4:76:7f:5b:0d:
                    d2:c7:03:00:06:ed:e5:48:d8:b0:2e:5d:03:08:c9:
                    98:4f:22:81:a4:c6:dc:a2:5a:f0:e4:9c:f6:ec:d0:
                    a4:66:c7:ed:d7:b2:86:cd:f1:75:f3:d6:85:7c:c3:
                    77:dd:eb:0e:00:81:da:3c:9f:82:f2:66:77:a8:0a:
                    6f:1b:76:3f:35:38:4e:9b:c1:09:eb:3f:b0:ac:9c:
                    e2:fb:39:df:3f:89:1d:0c:0b:ca:bd:4e:a9:a1:9c:
                    cc:7b:32:c5:7c:be:01:c1:b6:1d:d7:43:23:c2:c1:
                    7e:9b:1d:e8:82:ad:d8:c9:20:81:55:ca:90:38:8c:
                    78:62:3c:20:75:7e:6a:10:9c:c9:13:b7:a3:9d:d5:
                    72:4f:e7:8d:2f:07:07:46:d0:7d:30:50:41:aa:6f:
                    a5:5b:88:6f:99:0e:d6:6e:cc:17:fc:80:0b:2d:d2:
                    50:cd:c9:24:93:f5:fd:e7:aa:41:21:27:68:0a:8b:
                    19:94:09:73:78:62:68:e0:a7:73:af:87:2d:db:ed:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:6D:56:44:39:FB:A6:6C:13:8F:23:D8:30:94:A6:20:96:7C:2E
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YjdtVkQ5-6ZsE48j2DCUpiCWfC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.175.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:13:3a:87:17:5a:24:4c:58:cf:6f:7a:5f:a1:15:55:a2:
         44:90:7b:a7:f4:d0:61:93:55:87:07:c4:1c:b7:fb:2e:da:4f:
         16:9b:32:ae:7b:65:20:24:39:5b:f3:f7:02:3d:56:22:cf:1d:
         f6:bf:c5:e4:67:fc:40:d4:8c:40:3b:05:0f:9e:ac:d5:38:e3:
         84:fd:16:d6:c8:9a:ad:e0:cd:9b:0c:34:27:6c:20:eb:1f:38:
         fa:56:4e:e8:7d:fd:b4:cf:97:68:44:94:bf:d6:78:ef:81:87:
         99:1b:84:78:43:3d:68:1e:e9:0c:15:ff:c3:20:47:0e:4b:b8:
         51:dd:57:98:cf:97:da:c7:fc:5e:f1:ed:d4:c5:6f:8a:07:e9:
         87:ea:19:e4:e5:d9:da:6e:87:95:d7:19:3c:81:d6:a1:19:b1:
         95:2b:b3:fa:bb:e0:7a:be:b3:03:71:5d:e6:74:4c:39:4d:4e:
         f0:b0:a3:0e:ce:5f:ca:6a:64:b0:35:08:ef:66:03:a8:1f:b8:
         12:b7:39:9b:e5:99:9f:46:87:ea:0a:35:a1:fa:d4:9b:12:71:
         65:3c:1d:e1:84:db:83:17:cd:b6:17:84:36:a3:8b:dd:35:11:
         88:b0:fd:33:a1:ec:0b:79:24:a2:6a:a7:91:8b:61:df:01:12:
         03:d0:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:54 2025 by rpki-client