Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/4FydPfpOUmi6a4KaEjgKJAFMECo.roa
File:                     4FydPfpOUmi6a4KaEjgKJAFMECo.roa (raw, json)
Hash identifier:          RtZtc6Awv7/b3+fyJQyh18GfpNNGn0t9LD3q9FJkVq8=
Subject key identifier:   E0:5C:9D:3D:FA:4E:52:68:BA:6B:82:9A:12:38:0A:24:01:4C:10:2A
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       52
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/4FydPfpOUmi6a4KaEjgKJAFMECo.roa
Signing time:             Fri 01 Aug 2025 01:29:43 +0000
ROA not before:           Fri 01 Aug 2025 01:29:43 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131921
IP address blocks:        157.120.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Aug  1 01:29:43 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E05C9D3DFA4E5268BA6B829A12380A24014C102A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:ec:ed:0d:13:94:ca:6e:e0:83:1f:f6:84:
                    2d:11:60:6c:61:5b:3f:85:31:a7:1f:d0:fe:b2:d7:
                    43:8f:0f:a2:55:86:f6:aa:2e:0d:2c:c4:1a:2c:82:
                    84:52:3a:c5:4b:97:b3:98:d1:ed:be:be:f7:81:4e:
                    79:38:d6:e7:40:04:2d:0c:8d:db:87:a3:7d:34:f5:
                    0f:1d:e9:45:37:67:6d:a1:cc:b1:de:2d:bc:3f:97:
                    f1:de:9f:9d:37:3c:66:29:82:92:4c:5e:f1:72:db:
                    75:59:47:31:38:6a:77:f7:36:f2:da:04:4b:24:c7:
                    83:02:a4:67:33:6b:f7:10:f2:38:69:b9:ca:62:18:
                    c4:59:70:07:f0:f5:b9:d2:55:15:1b:cc:b7:55:d1:
                    a7:df:a1:f1:82:41:39:e0:b3:c3:46:45:1f:71:70:
                    da:e4:85:9b:73:8d:12:15:47:de:62:63:e3:ce:c5:
                    a7:4f:26:59:37:6d:f4:c1:a3:93:5c:41:47:93:cc:
                    32:d8:e7:27:89:d7:05:0b:81:72:f4:ea:c1:72:e8:
                    fb:af:70:ea:33:c9:c3:7f:d9:2d:7d:c8:4c:db:25:
                    82:e7:c7:bf:4c:0b:1b:87:f1:74:0e:24:9b:54:8b:
                    76:4d:33:b1:da:6a:d3:3a:b5:14:3e:70:b2:4a:b6:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5C:9D:3D:FA:4E:52:68:BA:6B:82:9A:12:38:0A:24:01:4C:10:2A
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/4FydPfpOUmi6a4KaEjgKJAFMECo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:36:6b:bd:fc:6e:cc:fc:a2:a7:c4:85:80:f8:8c:c1:a3:92:
         1e:5e:f6:3d:40:f6:48:91:e4:d7:02:00:4e:79:89:df:a2:27:
         cd:4e:4b:75:c2:44:bb:32:e5:41:ff:05:e9:be:6a:2d:7e:9f:
         b3:db:04:0f:68:5d:3c:5b:e5:53:f9:d9:3f:9c:8f:bc:9f:54:
         30:5f:44:11:dc:69:97:3d:c2:e5:82:34:1f:98:f4:f3:b1:da:
         af:16:b0:5f:bb:13:7f:cd:83:cb:15:7b:91:e8:98:cf:54:14:
         0e:55:d2:88:9a:5c:3a:21:94:05:7d:d2:21:aa:6e:99:da:86:
         55:42:cf:97:27:88:e0:51:3e:c0:ee:3d:3c:fc:66:32:a6:de:
         92:ef:66:0a:d3:86:30:6b:d2:43:e1:a7:63:50:0b:f8:f2:c6:
         da:87:33:b9:cb:b9:f2:68:b8:7e:9a:9a:da:cb:1a:a9:ca:d7:
         1c:85:82:77:e8:1c:ff:d9:98:35:39:90:48:59:b1:ec:d1:ee:
         b3:d5:0c:77:53:a6:87:6f:c1:45:03:78:84:61:29:1a:0d:67:
         25:0f:da:71:a6:1f:d1:f1:5c:ac:bf:ab:75:24:80:e7:b9:22:
         c4:ed:e8:cf:1e:0e:70:ad:bb:3b:5a:82:b7:0a:8f:0b:84:7d:
         e8:33:15:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 13 23:07:58 2025 by rpki-client