Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
File:                     d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa (raw, json)
Hash identifier:          14LCYv+M1QAE6geWjma/muR7/AjjGBrPv4rInpw3ZD4=
Subject key identifier:   77:F5:20:D5:A8:9B:3A:57:C1:3F:A4:CD:0B:53:7F:64:CF:74:3E:7A
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       68
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
Signing time:             Sat 01 Nov 2025 01:28:12 +0000
ROA not before:           Sat 01 Nov 2025 01:28:12 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131971
IP address blocks:        202.1.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Nov  1 01:28:12 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=77F520D5A89B3A57C13FA4CD0B537F64CF743E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:98:73:2d:f5:d1:a8:35:5e:c7:df:eb:a1:
                    33:d5:f3:b4:52:92:72:e0:1c:03:29:f2:44:9b:b8:
                    9d:a4:9d:3f:b6:12:c7:46:28:e7:a8:eb:dc:5b:b3:
                    ff:10:23:11:68:a7:b8:c2:85:4d:70:7c:60:a6:d7:
                    e4:3a:7c:75:e6:75:d5:c8:6a:77:63:a5:35:4a:15:
                    1e:a0:c0:b0:a6:59:04:41:60:d1:da:a9:73:9b:73:
                    23:6c:b7:8e:12:32:7d:ec:6d:d9:1d:6a:54:6f:17:
                    38:45:31:e8:6b:60:83:dc:ef:1e:7f:7e:d7:a9:da:
                    16:4f:29:55:7b:23:09:cd:e6:96:90:86:b1:32:88:
                    90:e0:97:16:3a:ff:25:77:f7:39:65:9f:37:6a:5f:
                    c0:c3:14:5e:c7:41:18:04:f4:44:c7:c0:e8:48:f8:
                    41:7f:55:e0:68:f7:3c:0c:ba:ed:41:5b:9d:f9:54:
                    9c:40:61:e0:dc:45:c0:62:f5:08:bb:96:ea:de:6a:
                    7e:2b:31:d8:61:3b:17:be:75:6a:8c:50:d6:30:dc:
                    2e:8a:3f:dc:a0:72:1c:e7:64:5f:72:5e:ba:fa:5a:
                    29:45:10:c1:3d:43:b3:73:bd:f8:c2:cb:b4:99:77:
                    05:ef:e4:ff:70:3e:b8:84:77:a9:5e:25:50:ca:d0:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:20:D5:A8:9B:3A:57:C1:3F:A4:CD:0B:53:7F:64:CF:74:3E:7A
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/d_Ug1aibOlfBP6TNC1N_ZM90Pno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:73:2d:8c:85:32:12:a0:3f:2c:cf:1f:b0:ea:d3:ce:b2:12:
         fe:8e:d3:74:91:e8:93:a4:ae:40:0b:61:7b:36:c4:d3:16:9a:
         7b:e2:0f:d7:94:00:08:56:27:5d:e2:1e:b3:99:bc:ad:9e:b8:
         e0:40:3f:71:cb:16:40:d7:04:76:1b:bd:ea:89:de:ef:b4:42:
         da:07:44:13:87:26:f0:e1:c6:7b:fa:1a:05:52:c7:c7:90:62:
         d1:4c:95:e9:8d:91:14:78:9e:4b:73:47:36:f8:a2:e6:bf:e2:
         5b:f3:58:7c:40:75:0a:fa:50:5f:5d:12:43:77:d2:44:05:c0:
         64:47:51:2b:e6:cb:be:1f:e6:fc:63:5f:ee:52:d7:84:45:93:
         87:4c:9f:65:c0:f3:26:c9:c9:6b:43:15:c0:6b:3e:23:38:fe:
         a0:a2:b9:73:38:37:34:4e:7c:fb:c2:d6:97:e4:d8:3e:82:c0:
         44:32:96:31:71:af:c1:72:5d:54:37:82:a8:36:b7:dc:2d:fd:
         2e:93:55:e5:d0:62:0c:77:f6:ec:c3:ca:b2:49:d0:91:cd:58:
         86:93:e1:ea:59:41:b0:14:dd:7c:e9:23:fb:df:67:71:d4:d6:
         7c:4a:4e:4e:ff:f9:e3:52:e2:ea:e5:cf:1c:8e:9e:43:d6:37:
         40:ac:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:10:38 2025 by rpki-client