Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
File:                     Npfb4C8e79gLGycJS0xyJdXQs-4.roa (raw, json)
Hash identifier:          mGIfnB1Uynl6YudXTOzs/FKSL1UNx/9izCE+Q5RDTBY=
Subject key identifier:   36:97:DB:E0:2F:1E:EF:D8:0B:1B:27:09:4B:4C:72:25:D5:D0:B3:EE
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       CD
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
Signing time:             Sat 01 Nov 2025 01:32:42 +0000
ROA not before:           Sat 01 Nov 2025 01:32:42 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:32:42 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=3697DBE02F1EEFD80B1B27094B4C7225D5D0B3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:19:a7:f5:ab:e2:03:5a:f3:0e:16:01:06:
                    dc:b2:a4:d5:b7:1e:0b:52:52:38:cf:b3:26:a6:ef:
                    05:7d:fd:c4:13:5d:5d:0b:dd:18:6c:3e:b6:66:9e:
                    5f:5f:8a:49:ed:f5:f7:d9:c3:89:0b:95:38:2b:52:
                    ef:cc:e0:4a:b6:a9:33:59:76:96:79:39:4d:a7:1f:
                    a7:f8:30:a8:af:e0:d5:ae:99:fa:f8:56:3d:86:8d:
                    8a:d4:77:60:43:84:59:db:3b:99:ac:88:46:67:3f:
                    88:a9:73:83:90:e9:89:38:33:71:ef:51:bd:35:fe:
                    9a:b1:9e:e0:58:bb:54:3b:b7:c4:74:33:ac:eb:e5:
                    d2:ac:7d:32:af:21:a7:8b:0d:26:35:09:d6:24:3f:
                    12:2d:6b:11:4c:43:a0:9c:57:32:ec:62:5f:f8:ac:
                    97:fa:0a:df:88:03:97:38:2b:49:cb:85:fd:5d:bf:
                    14:85:f1:41:48:ee:a8:7e:a0:c6:e8:80:d8:12:29:
                    3e:a2:a0:22:24:87:c4:f0:aa:5d:d5:51:29:be:37:
                    68:c9:fb:57:d3:2c:87:52:c8:d3:11:55:ae:21:a6:
                    ea:b1:17:ce:74:ba:d2:e2:b3:91:83:df:b5:81:2f:
                    b5:b1:c7:f9:ea:39:e3:e0:85:d4:74:94:6e:1e:a4:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:DB:E0:2F:1E:EF:D8:0B:1B:27:09:4B:4C:72:25:D5:D0:B3:EE
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Npfb4C8e79gLGycJS0xyJdXQs-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:ba:b7:d8:0d:f0:55:8e:aa:f1:54:47:ad:80:b2:2d:48:
         9f:c5:5f:a1:b2:cf:a9:54:d1:0f:4b:9d:20:66:fc:ae:53:79:
         48:f5:17:83:04:0a:c6:5e:bd:7b:02:c9:a6:88:8c:50:6a:17:
         65:6b:ce:43:55:81:e1:94:9b:bd:2d:9c:e5:f7:60:85:47:93:
         2f:c8:ee:86:55:08:bf:a2:42:c0:fb:84:1d:0d:ee:c9:0d:b0:
         6a:7c:45:fb:31:a1:f3:24:d0:45:a7:4d:cb:a9:a6:98:0b:d0:
         de:89:b1:a7:23:dc:93:c8:bd:1b:0c:37:c2:6d:e5:a2:49:48:
         93:0e:26:98:53:dd:9f:eb:fc:bf:be:6a:e7:e2:59:9b:2f:c5:
         3f:90:bb:4b:33:b1:7f:7b:96:26:4b:10:b2:fc:2b:f6:58:38:
         20:7b:fb:dc:f8:33:b8:56:95:cc:07:3a:f1:fc:50:6f:da:cc:
         6b:bf:b6:46:a7:79:7f:3c:9c:a3:91:2f:1b:c9:dc:47:86:76:
         7f:af:5b:ae:dc:cf:ee:44:68:c6:09:f2:92:1e:5a:95:e2:e7:
         61:36:5e:2b:90:1b:08:e1:b6:ef:a8:db:f4:de:12:a7:65:4f:
         fa:61:60:79:3c:b4:98:93:f9:73:90:23:ed:d1:b1:22:e5:70:
         f6:06:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:21 2025 by rpki-client