Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/R5HmIG8tOM-yMWgTvnU4X2a38h8.roa
File:                     R5HmIG8tOM-yMWgTvnU4X2a38h8.roa (raw, json)
Hash identifier:          qmycos5s2NSDs9+ZuSzuuzZQakq6EMVk+xWtiIG1oZI=
Subject key identifier:   47:91:E6:20:6F:2D:38:CF:B2:31:68:13:BE:75:38:5F:66:B7:F2:1F
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       75
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/R5HmIG8tOM-yMWgTvnU4X2a38h8.roa
Signing time:             Fri 01 Aug 2025 01:31:13 +0000
ROA not before:           Fri 01 Aug 2025 01:31:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        123.255.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=4791E6206F2D38CFB2316813BE75385F66B7F21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:b5:14:f6:e2:42:d1:1e:0b:e4:cf:20:15:
                    ee:4b:dd:e1:b9:4c:16:75:24:55:8c:46:94:ca:30:
                    41:34:22:53:99:92:e0:32:da:07:2f:99:7d:98:03:
                    8d:9f:35:5c:b7:8b:38:3e:18:f5:ba:c7:5c:16:84:
                    51:84:af:dd:2a:bb:f6:31:55:79:d5:d0:be:7a:2b:
                    1a:9c:a0:f6:e2:7c:bb:77:ee:6f:79:17:ba:45:fd:
                    e7:cb:51:30:72:03:4d:47:ee:eb:f2:eb:58:69:75:
                    0e:7a:b3:87:96:42:14:ea:ca:8a:98:0e:a1:72:48:
                    0f:a9:a0:26:82:14:38:fd:9a:21:50:9d:e2:e5:d5:
                    a4:29:ba:7b:a2:6d:01:50:0c:00:39:6c:1a:36:24:
                    76:27:78:ef:c1:0d:e1:c3:c4:fe:3f:98:5a:48:1b:
                    1a:bf:f9:bf:a6:58:49:f9:3d:6e:00:32:2b:22:26:
                    fc:f3:66:22:d5:a1:01:62:c4:17:d3:c2:a4:40:a7:
                    a7:bb:d5:87:f0:60:12:2b:b6:73:51:e6:cd:06:c8:
                    18:f5:3b:f9:82:77:38:cc:9c:70:cf:92:1f:1c:ed:
                    eb:99:9d:37:7a:48:48:46:85:50:68:57:15:68:ee:
                    ce:76:8a:ae:fe:e8:fb:50:33:b4:e1:6d:e1:a5:95:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:E6:20:6F:2D:38:CF:B2:31:68:13:BE:75:38:5F:66:B7:F2:1F
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/R5HmIG8tOM-yMWgTvnU4X2a38h8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.255.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:37:f6:d1:82:87:44:de:6d:af:7e:e8:0c:d7:00:19:56:
         57:00:09:a9:18:a4:74:4d:65:95:84:9f:25:6e:06:0e:96:2c:
         0d:16:72:19:f8:f8:f7:41:a2:47:04:aa:e0:ca:c8:56:b0:46:
         12:e7:e0:41:f4:c6:b1:d4:5d:1e:27:64:fd:c4:0e:ea:d8:5b:
         02:c2:f0:54:12:9c:fc:4b:fc:b0:5b:0a:58:5e:62:af:d1:a9:
         b6:8f:1a:9c:57:1a:52:c0:e3:40:5d:86:b0:d0:ae:30:f1:b4:
         c2:73:29:9c:25:2a:bf:5e:37:46:8e:d6:61:c3:e9:9c:93:41:
         46:41:0d:7b:fb:0e:b9:69:3c:d5:84:27:1a:a1:b9:9b:16:61:
         36:00:3c:70:d0:3b:c2:d2:b2:71:47:4a:da:38:a4:ef:08:31:
         da:98:2f:b5:e4:01:6e:6b:be:8b:2a:92:d2:91:14:4f:f1:67:
         31:dd:86:76:f6:5e:1a:7b:5b:78:55:9f:1d:b3:13:c1:37:33:
         47:da:d5:5e:5b:50:b3:2f:77:4c:f2:6f:07:33:76:80:67:ed:
         6f:41:5c:69:d7:5f:c9:f6:ab:9b:b6:a7:c9:d2:39:8f:48:08:
         e6:27:cd:6c:39:67:ef:68:9d:f6:14:78:19:4f:4b:26:e1:bb:
         31:94:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:17:06 2025 by rpki-client