Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/OoJQXh4j-xNYcYzT6bL2Dkl5N0M.roa
File:                     OoJQXh4j-xNYcYzT6bL2Dkl5N0M.roa (raw, json)
Hash identifier:          ZCSimUWbFCGIZRd9b2EaahEWNlIebTASreV/hUgpKeA=
Subject key identifier:   3A:82:50:5E:1E:23:FB:13:58:71:8C:D3:E9:B2:F6:0E:49:79:37:43
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       77
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/OoJQXh4j-xNYcYzT6bL2Dkl5N0M.roa
Signing time:             Fri 01 Aug 2025 01:29:20 +0000
ROA not before:           Fri 01 Aug 2025 01:29:20 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18144
IP address blocks:        58.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug  1 01:29:20 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=3A82505E1E23FB1358718CD3E9B2F60E49793743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:88:70:ea:77:cf:ae:bc:9c:9b:79:2e:08:
                    8e:a3:e5:2c:3b:32:a3:18:69:b4:f5:0f:90:e0:c5:
                    71:7d:d5:f7:7c:fa:a9:5d:82:c3:4a:09:bf:86:ab:
                    1a:ac:a3:43:6b:e6:38:b7:a7:0f:f8:c8:4e:66:23:
                    e3:c1:5d:24:95:17:da:45:27:f7:9d:9a:4c:43:06:
                    36:87:43:cd:da:44:fb:3c:48:85:ed:80:b3:86:77:
                    8f:91:5f:74:05:79:81:60:a1:99:13:fe:4d:b7:4a:
                    82:18:e2:f5:0e:83:2a:87:32:e2:10:02:ea:32:de:
                    f7:b8:0e:5e:9b:41:ea:06:55:c4:7d:74:32:1e:e0:
                    12:67:16:59:20:9a:19:ac:5d:8d:5d:9b:87:64:25:
                    4c:6f:34:3b:c2:76:d1:4d:c8:1d:e5:13:21:4e:e5:
                    74:ee:fe:7a:6a:b1:0d:cb:71:43:d2:25:9a:81:a1:
                    0b:0e:dd:5c:66:9f:3c:8b:ad:e3:e6:5e:15:c8:1c:
                    21:d9:09:75:9e:a6:11:2a:b2:e5:a5:c9:9b:29:be:
                    69:4e:ad:10:1d:3c:b0:54:45:19:ac:68:55:fa:b7:
                    6f:f0:d0:98:ee:a2:e4:9e:c7:7b:b7:12:05:3a:f8:
                    da:ec:c7:7f:0a:2c:b3:1a:7b:e7:d8:01:f8:e3:ad:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:50:5E:1E:23:FB:13:58:71:8C:D3:E9:B2:F6:0E:49:79:37:43
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/OoJQXh4j-xNYcYzT6bL2Dkl5N0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:aa:54:e8:41:39:18:b2:72:53:8f:80:f5:bc:41:2f:ed:
         e2:7b:46:3b:8d:28:a9:9c:b0:c1:99:7a:50:6f:44:13:90:60:
         98:ab:d8:b8:03:64:1d:a1:39:a1:b9:6f:6f:70:e7:83:2d:60:
         80:d9:9d:b8:36:5d:a6:b4:8e:86:04:52:e5:0c:6e:f5:04:66:
         71:3f:7e:8c:a3:4b:79:97:22:fc:26:a6:9b:62:0b:e9:e5:b1:
         15:a2:fc:a7:ee:21:9b:d0:f5:e5:ab:cd:c3:c8:94:5a:1c:02:
         cf:b9:0f:dc:c2:7c:48:c3:74:c8:64:81:88:eb:df:ae:97:a3:
         45:63:a6:39:d8:75:89:df:30:ba:94:d5:de:6d:fe:9a:7e:46:
         bf:f3:75:97:a0:8e:49:02:18:19:73:5d:8f:b9:f0:70:d9:05:
         1b:04:f4:ca:fb:fd:41:04:a8:93:77:22:cd:c2:b5:04:13:58:
         f0:f7:69:a7:67:29:c1:b0:ab:b0:91:b5:0e:71:fd:a5:34:06:
         23:bb:e0:6b:bd:87:d3:e8:4c:6c:f0:5d:89:1f:a9:07:42:c8:
         4a:46:72:1d:57:60:f3:f4:e7:f9:26:16:0c:63:51:9e:9c:9d:
         81:36:10:1c:ec:44:a0:52:f6:88:41:8f:a8:40:2e:4c:57:6a:
         47:65:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:54:33 2025 by rpki-client