Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KKC5uS_ncsOrm9ps7FBSik8mlg8.roa
File:                     KKC5uS_ncsOrm9ps7FBSik8mlg8.roa (raw, json)
Hash identifier:          7NiN2sMDGcl3uoE6OkpTD2M2Ex+IFt9k860NwVvt8T4=
Subject key identifier:   28:A0:B9:B9:2F:E7:72:C3:AB:9B:DA:6C:EC:50:52:8A:4F:26:96:0F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KKC5uS_ncsOrm9ps7FBSik8mlg8.roa
Signing time:             Fri 01 Aug 2025 02:03:07 +0000
ROA not before:           Fri 01 Aug 2025 02:03:07 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        14.193.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:07 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=28A0B9B92FE772C3AB9BDA6CEC50528A4F26960F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:f2:70:c5:fd:d1:da:e8:49:6b:d0:00:1a:
                    28:ab:ac:68:17:a9:d7:39:e3:2b:00:95:8f:74:a6:
                    7b:5e:87:3a:ad:b2:36:ef:47:f3:4c:80:a3:c5:6a:
                    94:47:12:db:96:68:d1:93:57:e0:c1:15:8f:c9:b5:
                    37:3a:73:58:6b:fb:a9:96:db:9e:98:29:f8:f2:13:
                    ac:d7:29:72:10:3f:23:9f:ec:66:22:88:60:21:1d:
                    f6:9f:4f:43:b4:9a:e2:d8:a6:71:95:5c:74:49:c9:
                    4f:05:29:74:a7:e5:1c:ef:f9:c7:c6:d8:93:61:e8:
                    48:b5:88:dd:98:1b:04:28:14:bc:c2:0c:be:8f:54:
                    3a:fc:5f:d5:ee:89:57:57:f5:31:6a:98:ef:ac:1e:
                    96:76:f0:3d:c6:33:7f:a8:04:c6:a0:cf:99:19:f8:
                    52:05:ba:14:c4:0f:c9:7b:d8:b5:5a:3b:da:b6:5f:
                    48:04:68:59:3d:6b:79:eb:c3:e0:9c:64:56:86:e9:
                    4e:bf:62:56:17:18:50:ea:72:ae:a1:ae:c6:94:bb:
                    d7:06:cf:29:aa:f4:a2:4b:72:7e:99:8f:f7:b0:0b:
                    68:70:2a:9a:4e:3e:02:ab:bb:b6:8e:40:4d:8d:1a:
                    3a:4a:87:51:0d:9b:22:db:70:2a:c7:fc:b9:ac:3c:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:B9:B9:2F:E7:72:C3:AB:9B:DA:6C:EC:50:52:8A:4F:26:96:0F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KKC5uS_ncsOrm9ps7FBSik8mlg8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:e2:76:8a:4c:9e:9d:af:6f:ac:e7:b1:e4:29:ab:ba:28:
         83:ca:61:78:40:3c:2e:46:8f:af:73:8d:b3:7c:90:1f:fe:ab:
         4d:08:e1:f0:41:5a:1c:68:1b:07:5b:c4:6a:83:d3:ad:61:95:
         d4:b2:e8:8f:53:00:30:12:f4:d6:87:c1:b5:8e:a4:9e:c3:34:
         dd:ef:a3:f0:c6:57:0a:79:3d:f6:66:23:a8:79:59:87:f4:6c:
         ec:b1:3c:82:4b:d0:7c:3f:8b:bf:c2:94:4f:5b:70:46:8d:6a:
         7b:f6:82:b6:68:9c:c4:98:9c:fa:3d:75:6d:a5:b2:7c:66:f1:
         20:c3:ef:ae:91:98:67:65:0e:20:54:85:6a:73:65:99:f2:fe:
         fc:81:5c:b1:48:f3:d5:77:4a:1d:e2:43:08:40:8e:b9:f3:86:
         c5:84:74:1f:26:e0:03:c5:8b:6e:e2:5a:54:89:24:f9:6e:af:
         96:21:b4:b4:34:b6:07:ad:06:32:7c:9f:3e:2f:43:78:44:88:
         50:b5:21:6a:ce:71:63:be:3b:47:0b:fa:50:19:1c:d0:5c:21:
         6b:a2:a9:4e:8f:75:af:e4:ba:ee:be:c6:ff:03:30:5f:83:d0:
         8f:3b:b2:8b:2d:fc:65:fe:69:1e:38:64:c3:6b:46:9c:d5:16:
         26:e1:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:30 2025 by rpki-client