Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/7O81rRkxMQ7ANfgFEAL7wi1P0v4.roa
File:                     7O81rRkxMQ7ANfgFEAL7wi1P0v4.roa (raw, json)
Hash identifier:          9KvT1fHnNHV8wWWKxq5yKt1QY14AKZNvMr2SN0L23SQ=
Subject key identifier:   EC:EF:35:AD:19:31:31:0E:C0:35:F8:05:10:02:FB:C2:2D:4F:D2:FE
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       B3
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7O81rRkxMQ7ANfgFEAL7wi1P0v4.roa
Signing time:             Fri 01 Aug 2025 01:31:41 +0000
ROA not before:           Fri 01 Aug 2025 01:31:41 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        111.234.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:41 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=ECEF35AD1931310EC035F8051002FBC22D4FD2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:f1:4e:50:3e:cc:50:18:57:e4:00:10:a8:
                    3c:f4:e0:d2:9c:52:48:77:a3:1a:23:c6:dc:5b:19:
                    84:cb:7c:d0:1d:4b:dc:ad:2e:d9:57:7a:94:36:75:
                    c0:e6:db:e4:64:86:ba:ec:aa:85:de:fe:d4:de:e1:
                    e9:53:db:b5:26:d3:46:b9:38:fa:ca:a7:62:05:dc:
                    c1:93:e1:c5:16:d2:0c:e1:15:01:8d:f5:f3:6c:f9:
                    3e:e8:17:0f:66:99:49:83:19:92:f2:45:40:cd:29:
                    a5:a8:02:3e:73:59:00:7d:64:6e:d9:26:47:9c:58:
                    8c:24:9d:0d:a1:d1:59:a2:97:20:29:04:a9:8a:ad:
                    89:df:db:cf:a9:9d:e2:91:60:44:41:09:03:a1:97:
                    87:38:81:45:02:a2:f3:ac:a1:da:ab:9d:d9:80:0c:
                    d2:ad:ab:c9:8b:75:56:c0:51:31:88:98:32:8e:76:
                    f1:72:0b:35:83:30:d4:e0:ca:8d:c9:37:63:c8:73:
                    b3:61:36:13:f6:80:c4:97:0c:12:df:ac:30:c7:ba:
                    39:84:4e:bf:77:a8:4f:71:a3:d8:b3:60:a9:95:8f:
                    25:16:88:e0:0a:3a:ea:ec:a9:ad:8f:d2:e8:ff:77:
                    e2:9a:eb:cb:1a:b9:6e:68:32:6f:e0:dd:8a:1a:c5:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:35:AD:19:31:31:0E:C0:35:F8:05:10:02:FB:C2:2D:4F:D2:FE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7O81rRkxMQ7ANfgFEAL7wi1P0v4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:80:ed:99:40:d2:5e:7b:10:9a:34:3e:dc:69:a4:a1:9a:
         04:5b:e9:68:b9:a5:86:d4:ee:4a:c2:33:c4:db:83:d6:9b:35:
         33:41:b8:ab:67:b7:84:c6:d3:d8:70:fe:5a:e6:57:12:fb:51:
         08:96:d6:4d:77:2a:50:67:b3:0e:67:a3:56:b2:e0:b7:9a:6d:
         64:c2:60:e4:df:a9:84:7e:d8:b1:79:4e:bb:2d:30:a2:90:0d:
         a8:51:7b:f4:53:fd:8e:4c:e2:b0:7b:66:54:09:2d:10:af:9a:
         cb:0d:d0:37:86:9f:1a:30:9e:53:a6:2b:6e:3b:3b:02:04:87:
         89:8e:ba:03:46:74:6f:ce:d4:1e:7a:1b:ef:2c:46:7a:7a:f5:
         56:d5:54:ac:82:95:c8:a5:c3:84:da:24:5a:09:47:01:95:ee:
         07:1d:ca:f0:f7:58:27:16:d7:3e:ef:58:14:a6:41:4c:67:15:
         cf:3f:41:2c:b0:32:36:bc:1d:e3:22:85:0d:50:9d:de:2a:6c:
         52:d3:5f:33:f3:0d:4e:02:31:ce:4a:8a:5d:e8:b8:37:69:bd:
         2c:8c:da:5a:23:f3:6b:e1:ca:a6:58:c9:ac:40:dd:06:1b:1e:
         1c:dc:1f:6b:53:11:43:d5:03:47:09:6e:ae:07:36:47:c0:1f:
         86:3e:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:36 2025 by rpki-client