Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/q55W-jiXYj9pipYZ55OKoZuHUZg.roa
File:                     q55W-jiXYj9pipYZ55OKoZuHUZg.roa (raw, json)
Hash identifier:          WtoMlfuIzZFoWwxTN7NyWp1cOZIDnRLFMYfYdHslePg=
Subject key identifier:   AB:9E:56:FA:38:97:62:3F:69:8A:96:19:E7:93:8A:A1:9B:87:51:98
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       6C
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/q55W-jiXYj9pipYZ55OKoZuHUZg.roa
Signing time:             Fri 01 Aug 2025 01:30:53 +0000
ROA not before:           Fri 01 Aug 2025 01:30:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        180.214.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AB9E56FA3897623F698A9619E7938AA19B875198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:07:91:4a:da:06:79:78:ab:60:1e:6a:d7:
                    a8:11:40:2f:c1:ab:0c:33:56:79:1f:5d:0a:b5:07:
                    be:6a:2c:96:4e:c9:a9:6b:c8:d4:bf:6a:ee:67:a5:
                    89:05:b8:50:fd:0e:cc:d9:d4:58:db:1d:88:13:67:
                    2f:5b:83:ad:73:a5:59:43:6e:26:d7:2d:b7:04:36:
                    e6:53:9a:43:fb:28:9f:a5:76:51:91:c6:c0:5d:8a:
                    7d:14:bf:9b:e5:ca:94:3b:f4:ff:37:dd:01:d6:d5:
                    08:dc:0e:3a:40:8c:40:50:3d:d3:0d:8e:6f:6f:bc:
                    c7:95:ab:e2:51:04:9d:a3:a3:a5:b1:0b:91:89:69:
                    67:b6:41:ce:f3:79:80:83:18:90:46:db:cf:79:22:
                    8f:18:46:d9:cf:8c:d6:f5:2c:c4:dc:fa:9e:fd:03:
                    a3:dc:04:2e:05:9b:c2:59:28:8c:4d:6f:cc:51:47:
                    8f:34:eb:2b:e3:c4:0b:db:32:dc:45:61:5b:93:36:
                    af:33:04:c8:50:27:57:6f:e5:b4:91:49:e8:cf:68:
                    04:ff:d2:8d:11:89:ca:8a:a6:ee:51:c2:54:20:db:
                    e3:52:26:a1:3d:43:2a:15:86:24:6f:6b:9a:53:75:
                    1c:a0:2a:7f:61:6b:a0:6f:ac:a6:c4:9e:ec:a3:53:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:56:FA:38:97:62:3F:69:8A:96:19:E7:93:8A:A1:9B:87:51:98
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/q55W-jiXYj9pipYZ55OKoZuHUZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:78:5c:de:0b:40:a4:b9:80:44:de:26:4a:df:3f:97:31:1d:
         f1:f5:24:06:fa:9c:12:eb:23:be:f6:b5:f0:50:34:f4:98:6b:
         08:da:cb:b5:41:ff:fe:a4:7e:67:a5:88:7f:9e:ed:8d:49:42:
         9f:eb:15:3b:83:40:62:e4:2b:04:8e:08:3b:6f:d3:41:4f:66:
         d8:c6:e3:41:fa:ee:03:00:bc:e9:1e:40:57:64:0a:51:b2:0f:
         32:dd:0f:2a:86:af:94:e7:56:f8:d8:13:ef:87:d3:16:4c:bc:
         30:28:3b:50:1c:41:42:6a:50:8b:5b:de:c6:7e:fa:f9:22:80:
         e3:88:28:cb:5e:e2:a0:a7:de:90:5c:fd:cc:42:b4:a8:b4:74:
         47:9b:a4:c4:e6:28:51:ac:2b:b2:9d:08:d6:19:dc:fa:aa:eb:
         e0:37:f3:a8:44:73:b9:55:a0:34:1f:9d:b6:3d:72:86:d5:89:
         9e:25:c4:ea:c0:a2:8c:9c:f1:d6:c6:2e:e9:c6:a7:97:1f:ae:
         5f:42:e3:49:78:fd:16:90:fe:88:e2:2a:14:8a:2d:0e:e4:ea:
         fe:3e:11:2c:46:8a:79:34:3e:24:53:94:7a:95:bf:6a:6f:14:
         7c:f2:34:5e:d0:2b:97:2c:5f:5b:a0:19:48:e7:da:5d:be:e1:
         34:a6:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:39:40 2025 by rpki-client