Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/CcCL7TsUibym9T3gXzVKgz5JSmw.roa
File:                     CcCL7TsUibym9T3gXzVKgz5JSmw.roa (raw, json)
Hash identifier:          wbvD152d5Mllj9dbG0oaiqd65ZIWoT22sfblduBcs0I=
Subject key identifier:   09:C0:8B:ED:3B:14:89:BC:A6:F5:3D:E0:5F:35:4A:83:3E:49:4A:6C
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       7A
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/CcCL7TsUibym9T3gXzVKgz5JSmw.roa
Signing time:             Fri 01 Aug 2025 01:31:15 +0000
ROA not before:           Fri 01 Aug 2025 01:31:15 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        202.165.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:15 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=09C08BED3B1489BCA6F53DE05F354A833E494A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:e4:66:0d:eb:45:42:a3:67:a7:cc:3d:69:
                    2c:de:ad:cc:23:86:e2:94:aa:f0:4c:54:62:07:09:
                    ce:9b:8a:6e:a6:52:97:5a:50:61:d1:df:42:16:9e:
                    6d:7b:cb:d6:ce:ac:b3:e9:05:29:6b:4e:c2:7d:7c:
                    ed:92:63:3e:e7:29:21:63:12:0b:6c:c6:8d:bd:cc:
                    5f:da:0b:7b:13:64:6f:9f:0e:90:d5:39:2b:d0:4a:
                    29:17:ea:c3:31:40:30:63:ff:48:65:6a:24:60:17:
                    0e:1d:fb:53:ed:0c:b6:26:1d:06:f4:aa:11:a7:b1:
                    13:a7:2b:c6:6c:56:7b:01:1c:f4:99:9b:a4:ec:cb:
                    8c:4d:32:92:99:4e:af:a8:0b:a7:ee:74:d4:e1:3a:
                    09:b0:2f:b8:3b:77:e6:7c:91:ad:79:37:a5:49:22:
                    60:b2:b0:12:d2:2d:dd:ff:54:ba:5d:db:22:ef:f6:
                    df:5b:7b:2a:02:0f:3f:ed:5b:c8:d1:0f:9e:5a:43:
                    cc:7f:b5:2c:ca:c2:c3:67:e9:f0:1c:dc:d6:e6:60:
                    a0:64:7e:1b:ca:e5:0e:aa:fb:76:08:01:87:7d:49:
                    24:af:35:f9:5a:21:02:e5:ce:66:95:32:b7:d4:37:
                    45:ea:d0:22:6b:1a:fa:29:9c:96:3e:2c:e0:82:a9:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:8B:ED:3B:14:89:BC:A6:F5:3D:E0:5F:35:4A:83:3E:49:4A:6C
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/CcCL7TsUibym9T3gXzVKgz5JSmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:82:40:f7:1f:99:93:53:c8:0f:34:28:44:ce:37:88:1e:
         4d:f6:95:55:ab:90:e3:eb:d5:e2:f8:7d:8f:8f:05:f6:0f:78:
         fb:02:59:03:d5:54:8e:80:0e:a9:f2:fe:ca:bf:80:6a:38:d5:
         a1:1f:ed:9c:6d:3a:3f:ce:7f:d3:eb:7d:f7:69:58:ac:20:29:
         d7:50:86:e3:65:eb:d5:71:3b:85:0f:85:5b:87:84:d6:59:11:
         04:cb:f6:a4:4a:58:73:8e:44:90:49:84:4e:03:20:75:49:15:
         38:90:68:42:66:de:9d:88:8a:97:0d:a0:f4:0a:df:5b:f4:2a:
         d3:69:12:bb:31:3e:c8:bb:a2:cd:2a:2f:79:a2:1c:26:c8:5e:
         92:2a:48:65:03:6a:be:a0:d1:e6:30:aa:21:43:44:4d:bd:4a:
         bf:8b:f9:2a:59:7b:ab:73:8c:a5:03:01:fd:a7:43:10:fd:2e:
         55:07:95:a7:ba:26:4b:c0:6f:3a:75:1c:db:1f:f0:19:5d:5a:
         94:d1:75:08:6b:cd:09:ce:7a:4e:43:5a:9c:fc:e7:cd:17:4e:
         05:e2:a5:41:6b:03:b9:41:db:bc:bc:27:d4:f2:4f:0d:07:60:
         69:a5:4c:1f:3c:f3:e1:25:62:21:33:1b:6c:42:35:cd:cd:30:
         3e:05:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:18:36 2025 by rpki-client