Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/77d_NB6-BPsDHNHq1qFbNR29K8s.roa
File:                     77d_NB6-BPsDHNHq1qFbNR29K8s.roa (raw, json)
Hash identifier:          Dzu83RLk7932jxZ8FAE8Oeltt3fZVWj1s1tyxWnLyjM=
Subject key identifier:   EF:B7:7F:34:1E:BE:04:FB:03:1C:D1:EA:D6:A1:5B:35:1D:BD:2B:CB
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       67
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/77d_NB6-BPsDHNHq1qFbNR29K8s.roa
Signing time:             Sat 01 Nov 2025 01:28:08 +0000
ROA not before:           Sat 01 Nov 2025 01:28:08 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131971
IP address blocks:        202.1.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Nov  1 01:28:08 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=EFB77F341EBE04FB031CD1EAD6A15B351DBD2BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:f8:03:17:db:97:80:08:fb:3f:72:42:59:
                    f8:c8:be:2b:76:56:05:91:da:57:bb:47:48:9a:db:
                    ad:c1:16:f6:53:30:2d:c6:34:58:56:c6:ba:ac:bf:
                    2e:50:19:cd:12:f5:35:0c:9a:5e:fc:fd:68:1d:15:
                    45:d3:57:a2:6e:0e:51:fb:fc:bf:f7:a2:4e:65:9f:
                    88:31:61:89:59:05:14:af:66:e4:32:63:0c:a6:69:
                    4d:ae:26:2c:56:07:5a:c3:91:5e:e7:b9:e6:72:fd:
                    ce:5f:12:7f:13:2a:34:ef:06:37:4f:dc:17:65:61:
                    da:80:69:d4:6d:d2:b2:f8:69:d3:78:3a:d8:68:c8:
                    27:88:3f:c8:98:2e:fa:14:47:d9:d7:89:93:e5:9c:
                    fd:65:1e:1a:1c:d0:5f:14:20:29:64:e0:a1:b1:6f:
                    13:fd:6e:04:ff:03:d2:24:e4:01:1b:a1:e3:bf:b4:
                    28:28:5c:07:28:28:7f:79:fc:e1:36:64:a4:fe:ad:
                    55:27:55:bb:66:72:40:06:4c:ea:0d:1e:e1:2d:0d:
                    0a:12:d1:44:0e:a0:a8:a6:34:b9:d8:86:d0:89:0e:
                    b4:41:dc:7d:c2:98:fd:2a:94:c3:8a:a7:6f:16:5e:
                    50:a2:b7:e2:96:63:2e:c9:f3:87:17:71:0f:9d:c2:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:7F:34:1E:BE:04:FB:03:1C:D1:EA:D6:A1:5B:35:1D:BD:2B:CB
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/77d_NB6-BPsDHNHq1qFbNR29K8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:bd:b5:dd:5e:a6:52:c8:b3:22:aa:b8:9a:e3:55:c6:87:
         ae:2f:c4:3a:5d:e6:7a:63:c6:22:15:79:3e:12:db:6a:29:d8:
         81:dd:82:05:51:b0:d6:47:7e:dd:ce:59:81:2c:58:6e:d3:35:
         75:17:67:ea:14:98:f4:04:55:c6:4b:29:78:ca:48:24:9d:0e:
         76:e6:c4:fa:c1:04:29:b4:ad:8d:3d:22:77:60:55:cf:36:16:
         cf:03:65:c2:81:2a:33:bd:9a:82:15:89:54:42:11:64:b4:97:
         95:52:9c:df:66:bd:6d:ae:ab:42:54:9a:ca:a2:3f:32:49:3e:
         8d:32:cc:c3:6a:6c:31:74:b4:58:30:3b:89:5f:71:82:91:28:
         9a:d9:db:1e:56:f6:ca:7c:88:cd:14:4b:31:cd:67:ba:e0:bf:
         f0:f7:b5:c8:a2:cb:e8:18:70:89:f8:de:bc:cc:45:36:54:c1:
         28:a8:cc:9d:ce:59:6f:16:0c:dd:bf:c7:9c:27:82:4d:82:fc:
         77:26:7c:7f:35:1f:1c:a7:b9:a2:47:73:12:17:e1:81:3c:e2:
         34:c8:6d:7a:f7:00:5a:6f:0c:0c:a0:19:45:d9:7a:da:e0:f8:
         a8:b5:35:5f:40:2d:d6:eb:41:2c:ee:39:da:48:04:35:80:ec:
         b8:fe:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:29:39 2025 by rpki-client