Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/bKF-H9TXIpugKjGd00XviQjPhVk.roa
File:                     bKF-H9TXIpugKjGd00XviQjPhVk.roa (raw, json)
Hash identifier:          iYbvi/rPAEPlSdGiWEl313DptgiaKiWf3AjrLTTH5EI=
Subject key identifier:   6C:A1:7E:1F:D4:D7:22:9B:A0:2A:31:9D:D3:45:EF:89:08:CF:85:59
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       35
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/bKF-H9TXIpugKjGd00XviQjPhVk.roa
Signing time:             Fri 01 Aug 2025 01:32:09 +0000
ROA not before:           Fri 01 Aug 2025 01:32:09 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2519
IP address blocks:        219.121.255.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug  1 01:32:09 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=6CA17E1FD4D7229BA02A319DD345EF8908CF8559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:f3:db:d6:80:8b:ef:6e:8c:1a:c6:85:e0:
                    cc:1c:3a:1d:d2:07:b5:67:e8:50:99:61:ad:37:de:
                    5e:c2:e7:50:89:34:ff:57:dc:e5:02:af:71:88:c0:
                    9f:b2:42:13:19:a4:20:64:a6:be:cc:4a:17:95:21:
                    ce:58:77:6e:e7:8b:ec:35:4b:bc:37:5d:35:5d:dc:
                    6e:c9:11:5a:56:bf:83:be:c7:e6:2f:e0:c1:69:73:
                    60:4a:eb:ed:08:85:e8:cb:2a:31:66:74:4a:01:86:
                    fa:04:4e:4f:28:de:f8:e8:bd:8a:12:1d:0c:7f:c1:
                    c5:68:46:f8:6d:38:98:59:15:eb:6c:cb:0c:ad:fb:
                    68:58:ab:8d:ae:6a:47:7b:cc:7d:10:e6:fa:9c:f7:
                    8c:e5:18:c6:25:a0:2e:17:66:36:58:91:5c:39:d1:
                    38:6c:9a:f9:99:f6:7f:83:4a:1f:cb:57:23:91:f9:
                    03:41:7c:6c:b6:e4:ae:da:80:24:33:e1:85:53:27:
                    2a:f5:b9:66:5d:ae:30:6e:f8:e3:e1:22:fe:e2:f3:
                    c6:1f:80:2a:8e:6a:71:f0:7f:7e:f5:aa:46:a1:8d:
                    cf:7b:d4:e0:98:81:53:ce:f5:8a:8d:54:fb:2c:18:
                    33:eb:86:27:a6:f6:8b:7d:18:34:45:94:78:75:a8:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:7E:1F:D4:D7:22:9B:A0:2A:31:9D:D3:45:EF:89:08:CF:85:59
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/bKF-H9TXIpugKjGd00XviQjPhVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:68:d1:ea:97:30:c1:38:ad:91:3a:38:87:13:9e:b5:6c:
         32:9f:84:eb:55:c2:8e:d6:29:f3:82:03:b5:4a:44:4c:6e:c4:
         5f:c3:ef:de:57:73:8d:61:cd:ea:ed:4b:fa:9c:15:60:8c:90:
         b5:3e:b0:e9:3a:96:1c:c5:63:f5:8a:42:21:04:47:96:71:42:
         b9:b0:dd:04:02:29:d4:a6:04:81:c5:78:cf:82:f1:fc:3d:e7:
         f0:d0:5a:3d:96:76:6f:e1:6a:07:dc:c7:58:59:70:5c:fe:49:
         7e:65:75:eb:b5:8a:fb:59:16:28:29:ee:16:99:a0:6f:c8:bc:
         a5:9f:cd:cd:b5:90:7c:1f:bb:ac:64:6e:33:de:5f:ac:0a:ae:
         31:92:08:4c:83:9b:03:0a:2e:c0:b0:32:8e:60:ec:bd:bd:c5:
         61:21:09:92:c6:b7:d5:8a:8c:84:92:37:c2:8d:8c:e7:39:37:
         28:4b:6f:6a:48:f0:d4:5e:0a:2f:7d:4d:5f:3e:be:05:0f:3c:
         40:e4:90:5d:dd:bd:84:e4:5d:78:30:20:68:71:3f:61:f0:c5:
         a0:b3:d4:3f:be:03:d7:4d:f7:54:75:03:db:f2:bf:3c:b1:3a:
         d3:1c:49:8d:8e:67:7e:90:f8:5f:80:e0:17:d9:da:e9:06:d9:
         51:72:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:25 2025 by rpki-client