Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
File:                     88KZBtS7bsmWCDVnYBuBWyON4EU.roa (raw, json)
Hash identifier:          jOwUVHLNtMC1m/imqxAGkQ//ypuNmv7Iv0KAVZt7MP0=
Subject key identifier:   F3:C2:99:06:D4:BB:6E:C9:96:08:35:67:60:1B:81:5B:23:8D:E0:45
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       43
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
Signing time:             Fri 01 Aug 2025 01:30:34 +0000
ROA not before:           Fri 01 Aug 2025 01:30:34 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18274
IP address blocks:        202.173.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Aug  1 01:30:34 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F3C29906D4BB6EC996083567601B815B238DE045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:6f:4c:ae:e8:5e:b7:fd:fe:67:78:15:7f:
                    a3:d1:c5:3b:f2:d1:78:03:c5:43:3e:4d:f6:c5:5f:
                    8f:49:9b:1e:9f:27:ae:ac:3a:85:6d:12:8a:be:e4:
                    8b:8b:42:fa:85:b4:9b:90:72:d9:72:60:b7:28:a8:
                    11:6d:5e:ec:16:e3:4f:cb:00:aa:2f:c6:28:f1:2b:
                    7c:ea:75:f8:46:9d:a4:a4:60:44:9c:e5:eb:8a:3b:
                    87:cf:89:7f:63:b4:8e:81:9f:71:e4:4f:a7:85:e0:
                    dd:f6:de:c6:89:9d:ba:48:83:c0:8a:38:a4:35:a8:
                    5b:14:78:9c:51:d0:11:ae:f8:91:9b:0a:b5:09:e4:
                    5e:07:e2:1a:80:24:86:a5:8f:a7:9e:b3:0b:2f:29:
                    e5:8c:55:71:85:4b:f1:31:5c:2d:a4:fd:99:a1:1c:
                    d7:60:73:a5:d9:f9:7f:d3:68:25:25:ad:81:dc:50:
                    3c:71:84:69:42:a3:bb:19:eb:32:b4:d7:31:2a:8f:
                    75:25:18:b0:3d:80:1e:02:28:be:8a:d1:24:fd:db:
                    69:14:c4:f0:32:b4:09:78:de:6a:8d:18:44:80:bd:
                    76:40:64:37:27:4a:23:7f:a0:0b:0b:e7:ab:eb:8e:
                    94:61:50:94:49:74:64:da:af:a0:04:21:35:8f:82:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:99:06:D4:BB:6E:C9:96:08:35:67:60:1B:81:5B:23:8D:E0:45
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/88KZBtS7bsmWCDVnYBuBWyON4EU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:1d:83:84:68:89:10:b8:a0:c0:ac:3a:f5:78:36:c5:02:
         d4:47:06:8e:ac:7b:ce:50:29:b1:82:db:d9:96:6d:ef:d2:62:
         f3:ca:25:9d:f7:a8:db:fa:9a:84:4d:b3:c1:64:7a:eb:5b:47:
         1e:fb:de:e1:f9:24:7e:3d:59:13:6b:79:8a:69:d3:9c:4c:1c:
         c3:0d:2c:a6:ff:1a:18:ee:f3:6c:a8:ce:fb:2f:99:84:13:f2:
         5b:28:93:82:f2:83:66:33:3a:81:af:5e:84:bd:f9:cd:b0:99:
         50:75:43:a9:fa:ad:5d:66:99:dc:ff:10:88:c8:43:17:7c:4c:
         4a:50:13:1d:1c:33:55:eb:c3:82:3d:be:9e:5d:fb:4a:bb:f2:
         a5:97:a1:ba:a8:99:17:c8:d3:55:0e:ef:2a:83:c3:61:83:89:
         2d:be:df:9d:36:b8:9b:fc:52:7c:5d:c1:ed:18:fa:9c:e2:c9:
         b1:bc:81:84:8c:93:73:83:dc:5d:aa:33:62:c5:b7:a0:21:58:
         af:8a:f4:23:3d:fd:9b:ad:60:b2:72:9c:2a:66:fc:bf:6a:15:
         b1:01:26:02:38:3b:e9:64:4a:e0:29:46:a7:86:86:b8:db:86:
         01:ad:38:d4:31:9d:84:84:6c:4a:61:16:7d:19:37:87:0e:bd:
         bc:a7:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:55 2025 by rpki-client