Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
File:                     FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa (raw, json)
Hash identifier:          9xIQ1aoYhLmNaKV0qTMShB6r+L42mmz0vEe1O2sJ6Yc=
Subject key identifier:   15:CB:40:C5:B2:6E:A2:77:26:1B:46:3A:0B:2B:F0:D1:C8:3B:16:97
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       6A
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
Signing time:             Fri 01 Aug 2025 01:30:51 +0000
ROA not before:           Fri 01 Aug 2025 01:30:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        114.134.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=15CB40C5B26EA277261B463A0B2BF0D1C83B1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:e9:18:4f:7d:ff:84:8c:60:80:81:26:cd:
                    f4:d9:f9:49:a6:96:d5:7a:b5:51:d7:c0:d9:4a:bc:
                    e8:f7:6f:3e:95:9e:94:22:bc:57:8b:32:f9:a0:58:
                    90:cb:60:85:8f:d5:cc:76:cf:78:c1:62:cb:e0:bb:
                    86:30:1f:94:eb:88:bb:1e:c5:6f:42:bb:c5:71:08:
                    ac:7f:b1:79:99:8b:b8:5f:c2:60:90:b8:57:88:15:
                    1f:08:fe:7a:8e:b1:44:e1:1d:42:10:a5:64:cf:b6:
                    32:32:5b:46:14:0b:f8:7e:4e:ad:27:21:49:63:b4:
                    be:38:dc:c7:1d:fa:82:30:87:c1:2b:dc:9e:44:e9:
                    e0:a2:bd:fe:b0:02:4c:a1:bb:90:9c:cc:d3:32:51:
                    cf:00:82:b1:30:ea:69:d4:62:a6:7b:79:97:dc:67:
                    c9:62:e2:de:29:d4:38:b1:9a:1e:5a:13:e2:7d:ec:
                    b7:d7:73:e8:92:4b:df:c6:36:f4:fd:26:1b:15:e3:
                    f0:26:a5:cd:fe:3c:5e:79:66:2a:eb:ce:44:04:b0:
                    ea:80:84:e6:90:7d:ae:82:1e:e1:04:f6:01:23:fd:
                    18:0f:21:cc:da:65:73:8f:aa:a6:8b:43:26:24:05:
                    91:37:82:a1:a1:65:29:86:b5:68:53:6a:36:29:2d:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:40:C5:B2:6E:A2:77:26:1B:46:3A:0B:2B:F0:D1:C8:3B:16:97
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:86:a1:25:3f:d6:76:e1:c3:18:63:3f:c7:c2:7d:ea:d6:
         e0:53:9d:84:3c:43:2d:28:83:92:f8:ee:ec:4e:0d:6a:5f:96:
         b6:59:54:23:2d:0c:ae:fe:c0:54:4e:93:4b:b7:ae:69:db:5e:
         89:90:91:05:70:98:76:54:9f:52:4f:c9:00:e5:9a:52:25:b0:
         16:3f:df:e3:13:bf:39:6d:15:1c:a2:b4:c1:63:08:78:d6:1b:
         73:71:a7:cf:ba:d6:76:e2:30:d8:26:d3:67:71:ef:08:cf:b1:
         6d:e8:86:9d:27:97:a3:04:b2:86:a7:38:57:92:20:2d:82:f7:
         96:d9:ab:f9:0d:f1:f4:b6:69:b4:2b:13:3d:76:f5:6b:e4:fc:
         b5:7e:ba:6c:59:79:a8:d4:68:37:d0:4f:5c:a5:c5:b6:e3:58:
         2f:51:9c:05:b6:57:0a:29:aa:58:ee:68:f0:2d:ec:04:a8:e7:
         f5:84:9b:e7:47:96:e5:b9:29:f8:eb:dc:29:48:02:37:a2:51:
         9f:52:a8:f6:8a:6c:44:da:c4:bc:e9:05:cd:07:ef:91:a7:87:
         67:1d:c6:66:e7:b7:89:54:7f:b5:0a:d6:0a:5c:00:0f:4b:13:
         fa:7c:d1:c6:bd:3f:3d:5e:5a:61:d8:b5:dd:74:c5:2c:f6:10:
         f2:4b:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:37 2025 by rpki-client