Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/fxLWeu1r9PxqrG3u68l7NYIz9y4.roa
File:                     fxLWeu1r9PxqrG3u68l7NYIz9y4.roa (raw, json)
Hash identifier:          cucZWzKqNFTBEaVnWGteaYaYvEVo0xW5d1tHwJnYG7o=
Subject key identifier:   7F:12:D6:7A:ED:6B:F4:FC:6A:AC:6D:EE:EB:C9:7B:35:82:33:F7:2E
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       80
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fxLWeu1r9PxqrG3u68l7NYIz9y4.roa
Signing time:             Fri 01 Aug 2025 01:31:18 +0000
ROA not before:           Fri 01 Aug 2025 01:31:18 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        210.237.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:18 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7F12D67AED6BF4FC6AAC6DEEEBC97B358233F72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:b7:c8:06:18:4b:6e:bc:8c:1a:f3:da:f8:
                    07:b1:ea:25:76:3c:c4:eb:f6:64:94:dc:48:8e:b1:
                    69:ab:6e:40:0f:bf:6f:2e:a6:af:ad:6f:27:bd:a2:
                    13:ec:77:f4:00:5f:a8:e9:ab:45:80:55:15:d7:f1:
                    fe:a1:48:28:e5:fb:80:24:f3:a9:12:b2:5b:68:c9:
                    93:0a:c7:aa:d0:4d:89:25:6c:2e:1b:0a:89:31:7c:
                    22:a6:43:4d:3a:82:d8:66:b3:b5:50:07:e5:37:2c:
                    fa:6c:dc:24:72:9c:ca:96:35:b8:2e:c4:83:98:2c:
                    30:a0:6f:2d:67:67:5e:d3:02:67:1e:ba:20:68:56:
                    e4:4f:2a:d8:61:00:6e:5d:66:28:30:e8:47:c9:47:
                    cc:3c:b7:0f:cf:60:da:92:d9:51:0f:e3:0e:01:0d:
                    92:52:4f:3e:d6:73:21:5d:f5:5a:7c:7b:ef:8b:b1:
                    0b:aa:93:bc:cd:42:57:c7:b8:d3:62:9e:2f:f2:1e:
                    42:57:ca:6e:ec:86:fe:bb:17:91:dc:d3:9e:33:a6:
                    62:33:9d:c9:c4:ff:3b:90:89:2f:65:ee:8a:d9:74:
                    f6:af:24:08:33:4d:c7:c0:70:85:e9:81:d0:7c:1d:
                    a3:ac:d2:cd:d0:a1:a3:f6:2c:7a:51:eb:cd:7b:cf:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:D6:7A:ED:6B:F4:FC:6A:AC:6D:EE:EB:C9:7B:35:82:33:F7:2E
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fxLWeu1r9PxqrG3u68l7NYIz9y4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.237.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:33:cb:5a:cb:7e:37:54:9c:43:cc:a5:6d:87:58:e6:b6:f6:
         09:82:45:12:72:4e:fd:13:10:09:ee:00:98:d8:c4:01:08:6e:
         29:04:ce:20:9b:89:90:62:38:a7:18:3c:6b:ba:e5:3f:ca:a5:
         7b:b4:2b:bf:67:c9:bf:03:84:ac:ef:a5:e8:23:f4:d4:a3:3f:
         ac:3e:a6:a1:be:8b:18:36:6e:78:cd:18:f6:a4:97:9e:bb:f5:
         51:0c:69:82:83:23:a6:39:40:a2:43:f6:83:c0:d5:66:f0:2f:
         ec:39:c7:76:ea:0c:ac:61:e5:0a:19:18:48:3a:55:56:82:79:
         e5:27:92:1c:21:fa:88:50:ff:50:70:4d:46:8c:36:0e:88:7f:
         a6:79:2e:36:8b:2e:11:aa:3c:c3:b6:dd:d9:d2:9d:77:a6:10:
         51:1f:19:01:94:d2:50:bd:50:4c:eb:b0:e3:11:98:a3:6a:24:
         9f:fd:d0:3d:0d:a7:7f:9e:63:3c:57:28:69:85:b4:87:27:90:
         b1:c1:e1:be:e4:35:90:31:1d:f5:5c:8c:eb:2c:71:a7:2e:d9:
         36:ca:cf:47:32:14:ed:7a:a1:f1:4a:c0:b8:18:d8:f9:6f:44:
         79:34:e9:2c:79:29:d0:c5:e5:d6:c6:9d:40:61:0e:4b:c4:60:
         5b:4d:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:20:50 2025 by rpki-client