Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7ObOGMhn7CsCrmzM7tkg3KtZIDc.roa
File:                     7ObOGMhn7CsCrmzM7tkg3KtZIDc.roa (raw, json)
Hash identifier:          GZZb50/X6SJBW32uM+UCbBezUPZ133J3F3B913iwTkg=
Subject key identifier:   EC:E6:CE:18:C8:67:EC:2B:02:AE:6C:CC:EE:D9:20:DC:AB:59:20:37
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0399
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7ObOGMhn7CsCrmzM7tkg3KtZIDc.roa
Signing time:             Fri 01 Aug 2025 01:54:51 +0000
ROA not before:           Fri 01 Aug 2025 01:54:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        210.135.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=ECE6CE18C867EC2B02AE6CCCEED920DCAB592037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:d0:29:b2:92:54:73:c9:ea:fb:ff:41:ba:
                    6e:29:89:c9:02:ba:37:2b:23:c5:58:24:0c:e9:94:
                    ae:1f:08:70:3f:26:59:3f:c3:59:86:e5:50:0a:dd:
                    12:52:2e:bf:a2:74:bf:08:24:af:d1:91:f6:ad:ad:
                    b9:45:1c:cc:2a:44:16:8f:6a:fa:dc:00:88:1c:71:
                    ea:c4:3e:ed:4c:c2:11:67:fc:45:86:a6:cf:b8:b6:
                    ba:29:2f:1d:41:13:d7:91:73:6f:85:ab:87:c0:18:
                    9b:35:57:c9:1d:dd:1b:13:2a:25:0e:85:46:4f:77:
                    11:47:fa:e1:53:aa:6b:25:f9:dc:81:66:e2:a0:08:
                    85:e9:6b:34:44:f6:c2:21:ed:2e:05:ff:1d:86:07:
                    03:73:8a:b9:1b:66:38:4e:29:75:de:2d:95:ec:4f:
                    12:31:aa:e9:8e:f0:83:d3:ac:0e:06:b2:fa:06:82:
                    0c:48:51:3b:bf:e6:98:fa:03:92:fc:8a:9f:cf:87:
                    f6:70:cf:80:3b:d9:2b:ef:43:be:5d:89:ed:fb:f7:
                    f7:6a:b8:93:db:ea:9f:09:9b:66:ec:a7:6e:75:78:
                    5a:ed:5e:3c:7a:f7:4d:af:b4:b8:66:43:3c:8c:9f:
                    c6:ed:60:54:97:33:01:83:71:e5:f5:8a:42:00:a4:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E6:CE:18:C8:67:EC:2B:02:AE:6C:CC:EE:D9:20:DC:AB:59:20:37
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7ObOGMhn7CsCrmzM7tkg3KtZIDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.135.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:fc:e3:2b:75:e2:bf:10:d0:f7:43:c0:af:f5:07:a5:95:a3:
         7e:f3:b3:7c:dd:fe:ba:66:42:d6:1a:1c:4b:85:61:8b:0d:ce:
         7c:33:88:4b:af:ae:b6:bd:0e:71:dc:43:90:3b:fd:35:49:e1:
         e5:74:f4:08:76:5d:36:18:1d:2d:49:90:b5:64:35:8b:7e:be:
         54:f8:a0:1b:d4:9b:ef:fb:39:51:8f:81:23:34:fc:3b:80:fb:
         0a:3e:02:c6:94:a0:bd:d2:c4:31:6b:4d:c2:b8:c1:4a:0b:2e:
         4f:5e:bd:9b:24:bd:a8:c7:65:4d:3b:92:92:3c:ff:36:70:19:
         5c:49:ce:15:8e:db:2c:10:cb:5d:72:72:a6:3f:97:f3:6e:c3:
         2e:47:bd:24:bc:bf:f2:ff:dd:a7:d0:46:82:cd:76:88:4e:de:
         67:ab:73:05:e7:fc:b5:6f:d2:0e:16:94:fb:90:51:1a:16:12:
         36:3f:9f:bd:62:e8:7a:14:e9:fa:01:83:d3:03:8a:ff:8b:ff:
         da:14:cc:1d:74:d5:f8:0d:9f:8a:ee:da:86:ad:bd:30:45:a1:
         b0:4e:f8:01:6e:b3:7d:c9:54:c7:da:ba:25:ff:e6:74:cc:f6:
         f4:4e:be:67:5e:82:3d:eb:a4:99:f4:91:4d:67:b1:24:48:cd:
         ec:b5:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:23 2025 by rpki-client