Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2_AMGuCiBzRntpiEmWvgst03Juk.roa
File:                     2_AMGuCiBzRntpiEmWvgst03Juk.roa (raw, json)
Hash identifier:          TTwOqZwoJURhHby/1U8+H2oRjpMP1nIosWrdKZyAJ3s=
Subject key identifier:   DB:F0:0C:1A:E0:A2:07:34:67:B6:98:84:99:6B:E0:B2:DD:37:26:E9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03B7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2_AMGuCiBzRntpiEmWvgst03Juk.roa
Signing time:             Fri 01 Aug 2025 01:58:49 +0000
ROA not before:           Fri 01 Aug 2025 01:58:49 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        61.125.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:49 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DBF00C1AE0A2073467B69884996BE0B2DD3726E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:f3:25:6d:74:e3:a8:f1:38:79:8f:82:83:
                    a8:f8:19:10:ec:43:70:0c:e9:5a:aa:48:04:20:1e:
                    bd:4c:46:c4:d2:f9:0a:c3:8e:54:b8:de:36:4a:8b:
                    a8:71:14:7f:43:2a:a1:e4:bd:9f:3c:fc:6f:6c:25:
                    b9:aa:7e:6c:98:8a:52:92:71:af:76:06:aa:df:15:
                    84:fd:73:1a:dc:ec:b2:44:36:3a:5d:a0:88:76:a9:
                    7f:65:8c:fa:ec:37:20:73:e8:a2:4c:2d:8c:04:c8:
                    50:54:9f:f5:f1:43:da:47:1e:af:f3:43:8e:bd:b9:
                    c0:b7:4a:25:92:e2:f4:e1:0c:c9:2f:24:a2:34:72:
                    b8:a1:5c:9a:b1:b0:3e:28:2a:02:8e:f1:2d:9d:9e:
                    11:c4:d0:3f:de:63:1b:f6:a8:4d:49:4f:f9:8c:7c:
                    d8:47:e5:4a:ab:bc:bc:c0:60:2a:94:22:b8:2c:d5:
                    72:bf:af:95:40:3f:f0:04:89:11:04:7c:88:c9:6d:
                    2a:f9:f2:15:38:cb:cc:95:79:2c:8c:2a:2a:97:63:
                    f3:f1:6f:72:87:b9:04:de:35:ea:d1:b5:ef:35:bc:
                    70:2e:ef:be:fd:d1:7c:78:dc:83:c5:48:d0:7d:7e:
                    37:c5:48:3e:bd:35:bc:6c:57:34:55:3b:4d:b6:ff:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:0C:1A:E0:A2:07:34:67:B6:98:84:99:6B:E0:B2:DD:37:26:E9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2_AMGuCiBzRntpiEmWvgst03Juk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:c0:53:b1:6e:58:c6:29:b4:c4:3d:6b:7d:ae:de:68:49:
         15:51:62:57:b4:e4:3b:af:f3:48:74:70:79:4f:b9:a5:2f:3c:
         d8:89:b8:de:b4:37:c9:8d:49:1d:11:85:e0:3e:b4:06:10:45:
         0d:e5:33:30:ba:f9:a7:f1:b9:b1:7b:c1:3a:38:7f:da:bf:c8:
         76:12:e8:92:bb:e7:27:63:84:a6:58:14:c4:a6:1c:a2:7b:76:
         f0:cd:71:69:3f:3c:18:46:e9:23:34:45:f5:59:54:c7:d2:61:
         90:b5:bc:2c:f4:62:f0:da:12:4f:fb:9e:60:28:8c:6b:0e:86:
         b6:55:05:e2:6f:f2:6b:d8:47:cd:34:1d:a4:ba:89:82:f0:ee:
         a6:ec:a8:74:39:40:95:cd:68:a9:4e:57:3e:ee:2b:53:f4:b1:
         9d:d4:89:1b:aa:48:e6:18:7e:69:12:f7:f5:34:e5:3c:12:6d:
         e1:b8:ea:de:68:81:1c:da:be:0d:c3:84:ba:3d:8b:b6:33:86:
         60:99:1c:b6:68:06:f6:01:8c:8b:9a:d9:a5:3f:e2:86:f1:41:
         af:ed:f6:f1:1c:db:92:61:b6:3e:32:fc:0b:d8:af:33:cf:21:
         bc:f0:4b:1a:2b:9c:2d:13:a0:36:83:b2:e4:ed:5d:a1:48:78:
         11:6d:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:13:46 2025 by rpki-client