Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/6GOaiy8naqc-5Bhw64hkQ7I8d6g.roa
File:                     6GOaiy8naqc-5Bhw64hkQ7I8d6g.roa (raw, json)
Hash identifier:          xlW0UPruyUbCMpZ0ZXWhICRtBW7oaC1TPuootXM2Jd0=
Subject key identifier:   E8:63:9A:8B:2F:27:6A:A7:3E:E4:18:70:EB:88:64:43:B2:3C:77:A8
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       2A
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/6GOaiy8naqc-5Bhw64hkQ7I8d6g.roa
Signing time:             Fri 01 Aug 2025 01:36:00 +0000
ROA not before:           Fri 01 Aug 2025 01:36:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24255
IP address blocks:        182.50.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Aug  1 01:36:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E8639A8B2F276AA73EE41870EB886443B23C77A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:77:77:6d:eb:43:26:90:0e:93:e7:16:3c:
                    5b:ac:1f:f2:a1:99:e4:1d:4c:19:38:be:58:7e:51:
                    2f:09:92:98:a3:39:82:f1:89:9e:b9:4b:89:2c:46:
                    f3:74:52:e6:48:2c:02:55:2d:62:15:0c:d1:ee:06:
                    75:f4:cc:36:56:22:4a:f0:e6:3f:da:5f:18:7b:e8:
                    bc:5f:d0:03:30:b1:cd:57:93:84:49:0f:4f:96:e0:
                    fd:36:f2:70:fa:f5:7b:77:f3:12:c7:b7:3b:33:ef:
                    95:8a:47:69:1e:93:a0:bc:e6:37:c2:86:f8:f5:5c:
                    c2:98:fc:7e:a9:e3:e1:dd:64:f4:f2:0c:56:92:97:
                    ce:76:40:d3:72:f2:39:4c:c2:2f:55:71:74:c3:a7:
                    da:f8:f0:27:e6:b1:e9:f2:ed:62:16:8a:6b:3c:df:
                    fc:22:06:1f:95:bd:58:d4:73:1f:02:11:a7:f7:35:
                    78:e4:b4:3f:32:dd:b5:3d:74:1e:c0:85:e1:b7:28:
                    3b:a5:bd:14:5c:20:e0:4f:20:c5:a1:65:fd:80:2c:
                    44:50:fd:60:88:f3:eb:c4:f1:24:49:9d:b2:b4:39:
                    e2:e7:9e:c8:65:35:43:6c:19:b6:f3:8a:41:12:d0:
                    d1:0d:62:5f:e1:e0:c5:6f:30:ba:1d:31:e4:e8:ec:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:63:9A:8B:2F:27:6A:A7:3E:E4:18:70:EB:88:64:43:B2:3C:77:A8
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/6GOaiy8naqc-5Bhw64hkQ7I8d6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:85:c4:e2:44:14:58:1d:0e:9c:bb:e8:a3:13:a7:ad:c4:
         9e:8a:78:a6:f2:ba:85:88:7d:0c:ee:8a:3d:b4:06:43:da:20:
         05:48:7e:83:81:65:86:fd:a5:03:06:3d:62:f0:ca:9d:76:50:
         ba:a4:ad:69:6a:f0:fb:27:a6:2a:40:1d:a7:e8:fa:c1:47:a4:
         93:23:6d:a9:0c:d9:19:43:5e:71:cd:ca:18:bb:3b:e7:4a:2e:
         d3:e7:4c:b8:cc:e7:65:2d:94:d4:18:db:2d:e7:9d:ec:eb:2c:
         76:0d:50:bd:43:4a:fa:d7:73:3a:74:7a:a3:34:ee:39:de:97:
         fb:99:ca:09:7f:9d:a0:a6:0f:bb:d8:1f:78:2c:1e:84:bd:57:
         1a:88:62:8b:c8:e6:a6:c8:38:b7:1e:f2:ab:d0:d3:4d:34:2a:
         90:a1:2f:48:4b:d6:9e:12:c1:82:df:f3:6a:5a:b9:72:5c:85:
         dc:c3:4f:cd:0a:c5:8a:39:ae:9a:09:ef:32:97:18:80:2d:4d:
         75:fd:c8:d0:3f:33:0d:4f:68:39:86:cb:f9:8e:e7:80:58:6b:
         30:fc:17:aa:0d:b0:df:c2:f8:eb:6f:9a:d1:85:0b:c9:1e:9e:
         50:ad:8b:d5:39:a8:06:7d:ce:95:ff:86:e3:e8:f9:1c:ab:95:
         b3:28:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:09:54 2025 by rpki-client