Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/F5SXLFpu24giv5wszG7RS1EiW0I.roa
File:                     F5SXLFpu24giv5wszG7RS1EiW0I.roa (raw, json)
Hash identifier:          4SVOkm/z0ZvcIX3qyFwEQmHlX90lVF0SWKIGPGRXWWg=
Subject key identifier:   17:94:97:2C:5A:6E:DB:88:22:BF:9C:2C:CC:6E:D1:4B:51:22:5B:42
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0366
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/F5SXLFpu24giv5wszG7RS1EiW0I.roa
Signing time:             Fri 01 Aug 2025 01:43:52 +0000
ROA not before:           Fri 01 Aug 2025 01:43:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        211.120.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1794972C5A6EDB8822BF9C2CCC6ED14B51225B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f6:41:c6:07:3e:b7:3c:f5:e6:41:09:45:0a:
                    36:df:a6:6d:50:9d:f4:73:c5:9f:45:83:f1:75:b7:
                    c6:65:0f:25:2f:36:0d:a9:c8:46:72:c8:a9:42:16:
                    94:cc:d4:19:12:bc:89:be:51:86:74:9b:ae:7b:41:
                    80:bc:f9:64:22:99:74:1d:c8:fd:8f:06:94:9b:f7:
                    21:d4:14:85:3b:d7:32:0e:d7:96:df:e0:f6:04:0d:
                    5b:17:e1:da:28:1d:d4:8c:35:63:88:fa:a1:72:ca:
                    39:37:ce:4f:0b:49:99:52:d8:87:eb:41:f7:f2:48:
                    4b:21:25:89:d8:90:05:71:ee:af:f2:d3:16:d2:21:
                    01:88:4c:66:e4:6e:3e:cc:b4:c2:7f:96:5b:08:39:
                    36:4b:13:90:86:70:2f:bd:89:9f:bb:64:b0:5c:bd:
                    d7:3a:8a:d9:4f:28:e1:93:0e:c1:88:ea:5a:22:f5:
                    79:d1:e8:41:37:12:b8:ac:87:64:33:48:25:18:dc:
                    ef:3c:6d:8e:fd:73:2a:95:14:93:74:44:ad:4b:6d:
                    16:5e:34:4e:cd:be:48:7f:71:ec:54:36:01:d8:8f:
                    3f:38:c8:ac:87:7f:c3:1a:79:97:ea:ba:02:5a:32:
                    17:d0:54:f2:4d:03:5c:f4:da:5e:55:90:88:af:14:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:94:97:2C:5A:6E:DB:88:22:BF:9C:2C:CC:6E:D1:4B:51:22:5B:42
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/F5SXLFpu24giv5wszG7RS1EiW0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:c9:02:e1:d0:58:bf:20:11:31:9a:97:5e:82:f0:f3:d9:
         00:aa:4f:10:10:6d:0b:e9:19:74:c3:d4:47:2e:16:4e:0f:72:
         a9:89:4b:31:e2:ce:18:a2:93:4b:b1:ef:ad:a2:4c:ac:fd:f0:
         37:00:19:03:e5:b7:99:0b:11:fb:45:aa:1c:71:94:ef:8e:5f:
         86:04:69:a8:6b:b4:cd:5f:0c:4b:2b:af:ad:a2:bb:a6:22:77:
         b1:f7:a9:ac:92:b0:e7:a8:46:d0:12:3d:82:9e:42:3d:59:91:
         13:28:1d:6a:d4:9e:b1:38:dd:d0:12:8e:f3:b6:33:1d:11:ec:
         24:78:47:95:61:7f:8a:9d:db:bf:d4:ee:c2:f4:4f:8c:94:6f:
         09:0b:07:06:d9:8e:5f:94:64:12:b8:c6:71:a1:d4:4c:23:95:
         27:de:56:78:76:52:fe:28:05:43:14:94:6f:a1:c3:9e:4d:78:
         e3:7b:81:90:50:e6:6c:55:07:52:aa:f7:b6:cb:a7:6f:ba:bd:
         3c:ed:29:89:9e:ce:c5:7d:23:b7:f8:99:08:e5:74:ea:3f:9f:
         c5:e1:88:2b:86:0c:b7:4a:55:8c:50:25:12:d4:19:25:39:f9:
         39:c5:2b:ad:c6:b2:d0:44:a2:27:bc:dc:79:dc:2e:05:d8:15:
         b0:1d:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:42 2025 by rpki-client