Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
File:                     XN9saAmNzkalvx56Mcuy_Cts4Yw.roa (raw, json)
Hash identifier:          sFFcqbZ/KeetgHrqsvBoVaJpMe+YlX/heM5fde639Zs=
Subject key identifier:   5C:DF:6C:68:09:8D:CE:46:A5:BF:1E:7A:31:CB:B2:FC:2B:6C:E1:8C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01F2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
Signing time:             Fri 01 Aug 2025 01:33:49 +0000
ROA not before:           Fri 01 Aug 2025 01:33:49 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     38628
IP address blocks:        163.131.96.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug  1 01:33:49 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=5CDF6C68098DCE46A5BF1E7A31CBB2FC2B6CE18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:4d:4f:92:53:41:ac:ea:eb:af:c4:96:75:
                    0e:8a:57:35:71:3a:d2:7a:1d:18:02:67:43:1d:0c:
                    31:73:17:99:5f:34:36:5a:5f:1c:b3:6e:f0:f8:f2:
                    3a:86:24:c3:61:fa:fd:75:bf:57:97:08:b8:6e:01:
                    e3:22:99:60:b4:ec:a9:a5:77:ad:2d:be:e3:d3:22:
                    7e:8f:b9:72:f3:4e:8c:c4:8e:b7:b6:7b:93:45:81:
                    07:27:23:0b:0e:eb:a1:63:48:f9:d9:7c:55:8c:44:
                    2b:98:ab:35:96:51:6d:49:87:56:44:64:05:6f:a5:
                    3b:55:3a:29:3e:fe:69:67:12:43:d8:0c:67:2a:b9:
                    69:69:48:09:4d:e7:a8:d8:be:22:b8:68:13:49:de:
                    07:d3:f7:ed:54:ed:be:36:f8:de:a8:dd:79:28:16:
                    67:66:ab:c1:ca:92:21:b3:15:ee:32:34:e8:d9:53:
                    46:b3:1a:40:ae:88:ac:65:55:2a:b7:8d:77:bc:51:
                    bb:77:21:01:16:bd:fa:cb:dc:41:bd:1c:8b:a5:ac:
                    e7:2c:08:94:83:e9:e9:7a:90:e6:3f:02:67:06:f2:
                    49:21:5c:f0:99:d8:8e:ba:32:39:c6:2c:bf:8d:f3:
                    94:c3:38:f1:18:98:0b:ee:4f:ee:0a:ac:a2:58:5d:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:6C:68:09:8D:CE:46:A5:BF:1E:7A:31:CB:B2:FC:2B:6C:E1:8C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/XN9saAmNzkalvx56Mcuy_Cts4Yw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.131.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:87:cc:97:6b:87:c4:bc:46:5f:88:92:98:40:81:c1:5c:90:
         08:78:f7:85:c1:e5:44:41:dc:4b:63:69:3a:a1:fb:69:4a:43:
         21:c1:33:f5:ff:dd:aa:93:09:90:e7:62:be:3a:43:e3:17:fb:
         9e:8f:4f:6f:cf:d2:0e:c9:fc:0d:90:2c:b3:bf:0e:0f:a0:b6:
         1b:1b:9d:54:e1:bc:0c:1f:e7:26:ba:ce:05:aa:d0:12:fa:57:
         5e:bb:b7:ac:86:dd:da:1e:96:37:0a:55:1a:e4:0d:9d:1d:cb:
         03:93:53:b6:50:b8:d1:bb:97:39:63:98:b3:01:79:46:59:1e:
         30:d3:36:4f:b1:2f:a9:b8:f8:0c:4b:40:48:48:20:68:72:b7:
         45:b5:7a:2b:42:a6:6b:b1:3e:6b:4d:12:6e:b1:70:cb:cc:44:
         71:91:f7:fc:4e:6b:99:7f:2d:50:25:56:eb:9d:76:0f:ec:c0:
         ba:a8:03:21:8c:a7:61:84:7f:34:05:ea:04:b5:3a:b1:b3:aa:
         bf:c3:c7:5b:13:c0:3d:83:8d:ef:e5:ff:92:57:18:29:f4:c4:
         08:7d:bc:6b:5b:90:ac:b3:a2:68:a1:9d:df:18:36:1c:39:bc:
         1c:01:24:d2:8d:34:46:66:12:b5:17:02:04:94:86:83:19:07:
         57:91:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:48:54 2025 by rpki-client