Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/7VVohjT5rVLazAAueheo37iPy1w.roa
File:                     7VVohjT5rVLazAAueheo37iPy1w.roa (raw, json)
Hash identifier:          XluN8OY7hGljxztNSWgFXTTVlT9gaCFSLfNqf9jV2og=
Subject key identifier:   ED:55:68:86:34:F9:AD:52:DA:CC:00:2E:7A:17:A8:DF:B8:8F:CB:5C
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C2
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7VVohjT5rVLazAAueheo37iPy1w.roa
Signing time:             Fri 01 Aug 2025 01:37:52 +0000
ROA not before:           Fri 01 Aug 2025 01:37:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        203.181.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=ED55688634F9AD52DACC002E7A17A8DFB88FCB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:45:d8:81:64:fb:ab:db:66:49:fd:98:1d:
                    35:87:7d:57:50:b2:e4:25:c5:bd:87:b8:cb:e0:18:
                    9f:6a:9b:af:e1:e2:6c:30:88:ee:b2:40:49:f3:de:
                    e7:58:e8:26:dc:13:1c:d4:22:49:30:ca:d0:19:21:
                    8f:89:00:d9:e7:3f:04:38:07:3f:e4:cf:05:36:5e:
                    a0:69:01:75:f5:49:eb:1b:25:42:3e:0d:8a:03:02:
                    89:84:23:8c:81:62:a4:9f:4e:53:fa:e5:d6:46:6b:
                    13:88:8a:f9:5c:cd:4d:be:e4:a2:4f:0d:d2:47:cc:
                    a8:a3:a7:45:c1:83:9e:aa:2c:c8:55:d2:60:9d:0c:
                    5b:d7:97:fc:05:c1:f5:6f:eb:a5:2f:b3:3c:23:ff:
                    94:30:8c:c6:8c:16:ea:22:51:a1:2a:70:90:a1:9d:
                    16:c7:fa:90:e5:4e:41:5a:e8:5f:e5:e9:27:f5:16:
                    42:c6:b1:2a:b4:58:9c:50:b6:03:bf:1a:4b:15:c9:
                    63:2e:48:7c:73:12:98:61:a2:d7:1b:e0:7e:25:d9:
                    e1:0d:79:47:b6:ac:c2:ae:23:d3:dc:f0:8a:a3:64:
                    d2:31:16:5f:22:e6:68:eb:41:7e:9b:71:0e:7d:e2:
                    c6:cd:4d:2a:fd:38:39:8c:23:b0:32:f9:25:37:13:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:68:86:34:F9:AD:52:DA:CC:00:2E:7A:17:A8:DF:B8:8F:CB:5C
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/7VVohjT5rVLazAAueheo37iPy1w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:90:06:96:db:df:6c:e5:83:09:53:e3:30:ab:0a:c0:60:
         46:6a:c3:ec:45:00:4b:ff:fe:09:8d:d4:e3:67:0d:13:09:64:
         90:89:64:cb:cc:33:a3:97:af:41:cb:79:9f:23:30:b9:98:ca:
         a7:99:a8:2f:0a:ae:df:97:19:9f:02:1a:24:a0:bf:26:59:04:
         ca:04:f4:32:91:f3:79:98:bd:bb:59:49:69:df:8b:9a:11:bf:
         28:5a:62:2b:27:b8:4d:47:88:07:48:61:29:a8:7f:40:7f:92:
         bd:dd:0a:3a:02:77:4c:5d:79:42:55:da:d3:38:14:98:89:0d:
         36:ab:f4:1a:1d:10:a9:25:ca:37:fc:7f:18:7e:19:c5:bc:ec:
         1b:0f:92:c8:fe:dd:39:79:d9:ae:30:ff:b6:10:86:37:40:e5:
         ce:60:0f:19:c1:27:40:b4:05:0e:6d:f3:93:6c:01:cb:ed:49:
         5f:59:b8:b0:6b:6c:eb:3b:24:71:9a:48:65:23:09:aa:4d:5b:
         f0:ca:08:50:75:ec:57:10:a7:51:45:a4:26:d2:bd:2f:db:e9:
         3e:fd:67:c9:f9:6f:02:d1:b4:f5:d3:ab:98:d5:8b:85:69:b7:
         45:6f:f9:15:2d:0e:e5:62:5f:32:a9:ad:af:9c:a3:8c:30:a1:
         15:85:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:13:48 2025 by rpki-client