Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/4Dg8JYoCdb1n_PPn2HFiHqnBvjc.roa
File:                     4Dg8JYoCdb1n_PPn2HFiHqnBvjc.roa (raw, json)
Hash identifier:          uCQqYwhLSRfM5xad2utju/iEZk8HGTW6KxR4uz2v+GI=
Subject key identifier:   E0:38:3C:25:8A:02:75:BD:67:FC:F3:E7:D8:71:62:1E:A9:C1:BE:37
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0329
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4Dg8JYoCdb1n_PPn2HFiHqnBvjc.roa
Signing time:             Fri 01 Aug 2025 01:34:51 +0000
ROA not before:           Fri 01 Aug 2025 01:34:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9378
IP address blocks:        61.215.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E0383C258A0275BD67FCF3E7D871621EA9C1BE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:0b:59:ca:7b:cb:47:09:98:80:86:ce:e7:
                    11:1b:47:c8:3c:85:c1:fd:b8:b4:0e:f5:c1:c8:01:
                    df:33:e6:67:9c:9a:cb:49:d9:4d:44:e4:35:3f:53:
                    72:16:5b:a5:b0:01:81:eb:c4:86:73:79:01:94:ed:
                    bb:53:de:37:9e:6c:66:f9:65:0a:54:83:b4:e0:64:
                    68:ac:54:b4:87:e3:e3:7a:c7:a3:15:d6:87:d5:f5:
                    74:0c:20:6a:4f:69:f6:68:39:ed:44:84:4f:37:fe:
                    c9:0d:4e:a2:de:a6:b0:4c:52:c3:3a:e3:19:28:9f:
                    3f:9e:33:32:a8:89:7f:1f:ec:52:13:8a:01:b4:7f:
                    51:30:38:16:3a:79:c8:f0:52:52:01:a1:21:52:c7:
                    af:59:8e:fd:7b:65:46:1f:61:a8:ad:61:0d:85:85:
                    d2:59:e4:56:38:19:c9:49:71:47:2f:87:60:ba:b4:
                    f0:a0:06:3d:86:e7:fa:fd:60:d4:2f:63:5f:e5:39:
                    8a:51:9f:9a:f3:5f:f0:f5:41:26:fa:d4:95:85:b7:
                    a3:37:b8:8d:3c:58:14:8f:29:32:53:8a:5e:08:41:
                    9e:95:0e:91:59:27:18:0b:ad:e8:e8:3a:2e:82:97:
                    95:67:18:04:e3:ee:34:af:92:dc:b4:95:17:4b:16:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:38:3C:25:8A:02:75:BD:67:FC:F3:E7:D8:71:62:1E:A9:C1:BE:37
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/4Dg8JYoCdb1n_PPn2HFiHqnBvjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:9e:a5:f1:c3:b8:d6:38:2c:75:a3:61:24:7d:75:85:af:b1:
         53:53:f4:9a:8b:70:6a:8c:4e:94:5b:3f:83:cf:65:59:a0:b5:
         30:a5:91:f5:01:63:ec:4b:49:9a:90:0a:e0:2f:70:b4:67:ea:
         a3:3d:9b:79:e0:c6:24:88:88:61:5b:2c:81:f0:d0:b7:44:15:
         87:93:20:28:09:ce:e8:64:34:8b:c7:21:30:9d:7c:41:35:88:
         ee:ff:f3:b3:e6:52:16:5b:95:5e:09:ba:62:32:3d:3f:83:b3:
         33:b6:fd:44:30:f0:d6:e2:91:64:25:5d:d1:a5:06:50:91:63:
         e4:1e:ce:e9:af:78:5f:de:2a:f7:a3:57:43:f2:71:4d:1a:c3:
         f6:4f:c4:fa:95:68:45:7c:86:96:f1:c8:17:54:ff:db:56:db:
         37:a0:f3:c7:a6:b1:52:83:70:7f:b3:d2:cb:c6:81:db:c3:2a:
         20:d4:9e:00:36:90:ac:a3:6c:68:2e:da:e0:a3:90:64:53:93:
         17:5b:86:53:cf:cf:a8:d3:e9:7b:53:05:08:bc:1d:cd:1b:00:
         f2:5a:33:46:42:af:c3:4a:4f:a0:cf:bb:e4:8f:28:ce:29:3a:
         08:4a:e5:53:47:4a:f8:3e:7a:4a:30:ef:16:97:a8:92:4a:d8:
         77:a2:36:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:20 2025 by rpki-client