Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/D06vyYIUCoxtgz3DBxEn6IMtRI4.roa
File:                     D06vyYIUCoxtgz3DBxEn6IMtRI4.roa (raw, json)
Hash identifier:          txZKR19Q7BrJ6Tr4sh/v6Bgmft33ciLlWCJ++HOCnN4=
Subject key identifier:   0F:4E:AF:C9:82:14:0A:8C:6D:83:3D:C3:07:11:27:E8:83:2D:44:8E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       033C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/D06vyYIUCoxtgz3DBxEn6IMtRI4.roa
Signing time:             Fri 01 Aug 2025 01:39:59 +0000
ROA not before:           Fri 01 Aug 2025 01:39:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        113.197.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:39:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=0F4EAFC982140A8C6D833DC3071127E8832D448E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:73:56:a0:c4:4b:fd:42:1a:5e:c9:9e:34:
                    3f:cf:d7:ac:3c:8c:64:b9:09:e6:c7:6a:bd:2a:15:
                    93:9b:da:5c:29:fb:c8:6c:70:61:34:ee:2a:61:c0:
                    4c:d4:ae:cb:12:a2:2e:4d:f7:ff:1c:a0:b4:66:b7:
                    08:b7:69:78:84:05:04:1c:6d:01:f5:e6:16:d7:d3:
                    e7:1b:da:d7:37:d9:da:8b:c3:90:45:95:e9:47:fd:
                    3c:24:ea:08:be:38:49:4e:a5:70:d7:d8:e1:c9:ab:
                    41:e3:06:44:54:fe:25:37:33:66:bc:df:78:99:3a:
                    84:8f:3f:e0:79:cf:1d:95:47:0b:9a:16:c3:56:32:
                    0b:e1:12:09:16:2a:be:ad:58:ef:10:9e:33:d9:13:
                    21:e3:36:e0:47:e7:8c:ee:68:76:80:9f:69:c6:e8:
                    62:d0:8b:a4:da:a9:11:30:07:f4:7b:b7:c6:ec:20:
                    03:30:1c:52:85:66:34:64:70:e3:ca:98:bb:22:48:
                    ac:76:89:a2:06:d7:bc:52:56:7a:6e:44:57:47:ad:
                    67:73:d2:0c:ce:7d:0a:27:e8:a0:99:f7:97:3d:e6:
                    ce:c3:2f:c5:e9:ea:4a:06:2c:64:82:4c:c5:1a:91:
                    45:04:c6:86:8d:ed:eb:78:07:04:bd:82:ad:af:0e:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:AF:C9:82:14:0A:8C:6D:83:3D:C3:07:11:27:E8:83:2D:44:8E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/D06vyYIUCoxtgz3DBxEn6IMtRI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:2c:87:b5:2a:45:a6:ce:8a:59:d0:de:05:be:ca:eb:f0:fd:
         f1:9f:b5:67:6f:e7:29:a6:ce:48:c2:b4:38:85:14:f5:61:cc:
         f0:21:8f:89:fb:b8:53:99:1c:3c:c3:3f:e9:5a:ec:c6:78:0d:
         49:7b:51:74:88:4b:f6:89:21:e7:5b:57:5d:c8:c4:7f:aa:e5:
         79:d7:b8:a4:a1:44:af:55:24:a4:b5:5b:fa:0e:ce:dd:f9:9b:
         2b:24:8e:5b:79:25:8d:70:61:4d:01:5d:06:24:9f:6b:86:7f:
         5c:9f:88:34:ea:89:f0:3d:e0:82:f7:ad:38:d4:60:6e:f0:2c:
         30:27:6c:a1:10:dc:4d:6c:5f:4a:7b:bc:7f:e4:b7:0d:ce:73:
         b5:70:b4:90:aa:a3:ef:1c:90:24:ad:d1:95:d4:e5:b1:42:f8:
         bf:19:5c:bf:7d:78:4a:89:bd:7e:f2:52:c1:bf:bf:91:8f:c1:
         25:71:5b:46:68:7c:d3:55:0f:81:3a:76:a5:83:0d:80:da:e0:
         f5:e9:c7:99:a8:73:29:c9:fc:f7:55:d2:ac:d6:04:a2:df:7e:
         ce:85:ba:c8:a3:ee:06:6d:9f:b5:cd:42:8b:f3:93:4a:48:3c:
         7f:10:08:ef:16:97:b3:6c:bb:e4:d7:d2:63:58:e7:5d:6d:72:
         c0:48:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:46 2025 by rpki-client