Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/fa2eX1moCBYUEYEpn3OgcGmGA18.roa
File:                     fa2eX1moCBYUEYEpn3OgcGmGA18.roa (raw, json)
Hash identifier:          Y6ZNVqN4NnyNEdVuJCIrm/dYps/dvs/lu6tatUzdxxU=
Subject key identifier:   7D:AD:9E:5F:59:A8:08:16:14:11:81:29:9F:73:A0:70:69:86:03:5F
Certificate issuer:       /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial:       36
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fa2eX1moCBYUEYEpn3OgcGmGA18.roa
Signing time:             Fri 01 Aug 2025 01:31:46 +0000
ROA not before:           Fri 01 Aug 2025 01:31:46 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        131.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 Aug 2025 22:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
        Validity
            Not Before: Aug  1 01:31:46 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7DAD9E5F59A80816141181299F73A0706986035F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:bd:c1:a3:67:a9:f0:40:42:bc:b7:25:98:
                    7b:33:ca:23:9e:78:18:da:a1:c2:8f:39:3b:cc:f0:
                    f8:cb:d2:74:a9:28:ec:ff:14:6d:9e:05:70:5d:98:
                    b2:fc:21:6f:59:d4:7c:96:73:ff:66:a9:6e:16:f5:
                    d7:5f:53:08:cd:56:33:31:36:a0:e7:35:8d:b3:79:
                    d3:ce:eb:ee:50:d7:c5:1d:76:11:c8:cf:cb:0c:db:
                    73:87:a0:b4:fb:c0:a2:c4:c2:4f:f1:3b:d8:41:d2:
                    cc:b7:27:e1:14:48:9f:e2:73:40:f6:6a:a6:01:6c:
                    01:62:8c:b3:07:16:0d:32:98:78:03:1a:d5:c5:8d:
                    b7:af:36:73:90:08:0e:85:69:1b:e1:f3:82:a9:a6:
                    bd:bd:ac:d5:a5:0b:8e:9c:9b:88:38:5f:7d:cc:0d:
                    f6:7a:13:eb:11:e1:81:08:92:52:ca:33:88:b2:34:
                    2e:b9:07:5f:b6:8e:cb:9d:87:14:8e:cc:a0:79:ac:
                    36:c5:8e:08:67:77:35:ec:69:2c:09:c2:29:6f:50:
                    7b:c4:ae:e8:7c:13:3b:1c:fd:8e:ff:86:42:7b:3b:
                    d4:83:83:ba:2e:5d:d7:9c:81:97:7c:ff:e3:10:cc:
                    23:21:a5:b1:8f:7f:fd:9c:b7:ca:cc:c9:bb:2b:68:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:9E:5F:59:A8:08:16:14:11:81:29:9F:73:A0:70:69:86:03:5F
            X509v3 Authority Key Identifier:
                keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fa2eX1moCBYUEYEpn3OgcGmGA18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:98:9f:79:61:96:fa:cc:6e:21:13:10:ca:c0:c8:e7:c3:64:
         57:1f:08:3c:05:33:63:6a:3c:5c:a5:42:cf:8c:b4:18:e3:ad:
         f4:8e:0b:65:cc:ee:fe:08:2f:bd:f0:0f:e3:2b:b0:93:01:be:
         3d:7c:44:80:82:4e:df:56:61:2e:e1:c5:67:68:9c:87:48:96:
         76:b2:3e:e2:81:69:43:2d:19:75:3f:35:63:56:5d:d1:88:3f:
         0a:45:ff:b9:6f:0b:f2:fd:31:2d:22:3a:0a:94:8b:f9:bb:0a:
         fd:a0:ca:31:d4:b7:9b:14:0b:ff:b1:ae:30:a7:6f:66:88:a5:
         e2:1f:f4:35:4b:67:2f:d1:da:4f:63:17:bb:72:48:82:01:92:
         07:8b:25:e2:aa:dc:e8:6e:bf:72:96:bb:97:54:bb:64:ef:af:
         cf:92:cd:65:3d:1a:61:04:8f:40:96:21:87:78:f5:45:b9:65:
         e0:bd:26:ff:78:12:cd:5e:8e:c4:01:87:8d:85:bd:53:13:f8:
         13:a4:b8:27:b7:ea:90:d2:e8:12:44:6f:9d:78:20:8c:65:a7:
         2e:d9:9b:6e:33:f2:e0:11:d5:2b:69:52:6a:67:ab:2a:cb:73:
         aa:ce:2a:e1:49:49:8e:0a:c9:76:c0:2b:67:9b:88:0e:de:88:
         0e:e8:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 15 00:24:57 2025 by rpki-client