Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/YrpKujCNKogf2KA_l60p-xqA-rk.roa
File:                     YrpKujCNKogf2KA_l60p-xqA-rk.roa (raw, json)
Hash identifier:          LcXfEzuct6BEkK51ENb7yLF+dSO0mJ/IbiEk2ZHA36Q=
Subject key identifier:   62:BA:4A:BA:30:8D:2A:88:1F:D8:A0:3F:97:AD:29:FB:1A:80:FA:B9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       C7
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/YrpKujCNKogf2KA_l60p-xqA-rk.roa
Signing time:             Fri 01 Aug 2025 01:37:55 +0000
ROA not before:           Fri 01 Aug 2025 01:37:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        220.146.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=62BA4ABA308D2A881FD8A03F97AD29FB1A80FAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:04:fe:5c:4f:12:c3:3f:02:fb:2f:d2:e7:
                    20:24:0e:e3:17:6b:53:a3:04:5a:bb:f6:f7:b1:74:
                    2a:61:11:f4:6a:e2:dd:01:ef:e2:8c:1a:fc:28:bb:
                    aa:e5:56:f6:4c:d1:4e:35:b2:cf:5f:a0:05:f6:b4:
                    e6:40:07:c9:34:1e:33:92:23:6f:f0:08:29:f0:89:
                    b8:e0:a5:8c:1e:8b:dc:ad:e6:35:97:43:a3:80:c2:
                    7c:63:92:f4:ad:39:9b:f3:40:6c:f5:2e:cd:86:8d:
                    ca:90:74:17:ab:03:63:7f:3e:08:33:15:27:1e:c0:
                    74:d6:39:18:fc:81:f2:9f:45:41:f6:41:f1:06:74:
                    1f:d1:6b:65:82:09:86:ca:50:87:91:2f:5c:12:83:
                    a9:50:8c:93:f3:66:6f:fa:07:63:f2:bd:ca:9f:19:
                    72:a0:b3:eb:67:ac:90:69:f3:05:2d:81:f6:da:ac:
                    cb:6a:ff:19:e4:04:0f:c5:e5:44:bd:a3:9f:7a:61:
                    9c:8d:fa:05:de:2f:a0:92:32:44:10:bc:7c:6c:0e:
                    a7:54:79:7d:88:f9:39:ea:25:3f:8e:8a:f2:5f:f6:
                    e1:7d:0f:21:a1:b5:d2:17:1f:a1:1a:64:fc:89:c1:
                    bd:b4:38:01:3a:7f:c5:d2:8a:16:a8:54:f1:ec:9b:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:4A:BA:30:8D:2A:88:1F:D8:A0:3F:97:AD:29:FB:1A:80:FA:B9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/YrpKujCNKogf2KA_l60p-xqA-rk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:71:35:b2:94:dd:4b:8c:7f:51:cb:7f:0a:82:51:61:cc:
         cc:cf:20:c2:8c:6d:a6:30:b2:5e:43:92:d2:c0:79:50:51:c2:
         1d:b1:b6:fd:fa:9b:0a:63:97:9d:42:d1:85:a2:95:63:40:b2:
         ac:3b:de:40:f3:01:a9:35:b6:7a:56:1a:5c:2c:6d:6f:3a:69:
         a9:b2:38:17:13:1f:3d:eb:b8:5a:82:87:1a:a8:72:f6:c4:6b:
         53:56:bb:7f:82:9d:55:cc:8d:37:b2:7d:76:25:ae:13:2e:4b:
         58:48:05:70:b6:4c:84:78:11:98:7d:dd:55:7d:31:a2:8a:c9:
         58:5d:b2:bd:cc:2d:81:a4:0e:49:9c:f7:94:2c:79:e1:8b:e2:
         1d:27:dd:61:7d:7c:43:b1:d3:9c:14:f7:0f:9c:89:a8:02:fc:
         0f:d4:25:21:15:85:d2:ce:44:ba:18:07:1c:ba:d6:40:32:a9:
         10:50:85:b2:f0:e9:a9:9e:ae:9a:f8:f1:7c:de:6d:a3:8f:c0:
         c6:b1:0c:10:b6:09:a6:a7:6e:16:37:d0:41:cb:0b:f9:2c:d0:
         7f:88:a4:1f:6d:b6:c8:44:af:57:65:42:49:6f:6d:9b:91:50:
         39:99:51:ad:03:be:1a:bc:f3:aa:6a:a9:59:73:51:c3:cd:74:
         9b:2a:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:26 2025 by rpki-client