Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NRkOXxo6YFfYWFYajD6jxclZTQk.roa
File:                     NRkOXxo6YFfYWFYajD6jxclZTQk.roa (raw, json)
Hash identifier:          8rNV6vu1RMGxnx6uJjATjNn/3EW8QaZkC2OljlgXX0Q=
Subject key identifier:   35:19:0E:5F:1A:3A:60:57:D8:58:56:1A:8C:3E:A3:C5:C9:59:4D:09
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       036B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NRkOXxo6YFfYWFYajD6jxclZTQk.roa
Signing time:             Fri 01 Aug 2025 01:47:10 +0000
ROA not before:           Fri 01 Aug 2025 01:47:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        110.92.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=35190E5F1A3A6057D858561A8C3EA3C5C9594D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:71:4b:a1:a0:f6:32:06:42:49:d5:bd:46:
                    3f:40:ab:53:d1:06:db:43:cb:4a:9b:7c:b2:ac:97:
                    82:9f:8c:89:d1:a5:9b:14:4f:eb:77:18:61:e0:98:
                    80:a7:72:d2:2d:98:c8:95:f9:fd:7f:68:57:1c:49:
                    a8:36:5a:46:c2:4b:ea:f6:53:75:5c:02:ab:0c:52:
                    54:a7:d8:9d:2a:6e:55:61:45:2e:49:11:c0:b6:50:
                    24:b6:4b:f8:67:57:a1:73:da:74:be:39:ce:22:01:
                    53:33:da:07:45:c8:cb:93:67:12:3a:87:fc:75:b2:
                    0e:b3:94:cd:2d:cf:e6:33:e9:aa:15:12:61:be:57:
                    08:c6:44:bc:df:47:81:41:51:cc:a0:2b:39:1a:16:
                    a1:e7:7e:5f:68:d1:1a:83:8d:f1:6d:a8:fa:d3:76:
                    25:d4:e3:96:66:52:d1:4a:f8:54:db:82:4d:9f:ad:
                    41:16:90:8b:ac:14:40:19:29:7a:bd:6c:8f:70:45:
                    f4:4d:c6:88:d9:67:d4:18:42:8c:c7:71:a2:15:a7:
                    7b:51:44:7b:e7:65:4b:db:94:f5:66:8f:24:86:dc:
                    69:69:96:8c:04:cb:19:6e:2d:68:d2:34:41:0d:15:
                    a9:c4:6a:24:8b:dc:5c:b4:db:8d:27:75:bb:84:3c:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:0E:5F:1A:3A:60:57:D8:58:56:1A:8C:3E:A3:C5:C9:59:4D:09
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NRkOXxo6YFfYWFYajD6jxclZTQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:b8:de:3e:fb:46:60:52:ed:ba:f4:fd:2e:c1:24:a0:ce:
         04:4f:85:41:d1:ff:d3:ec:59:41:95:b7:11:d0:22:de:3a:91:
         fb:c5:f4:10:13:be:7e:9a:c9:f8:54:c6:ff:f5:9b:10:05:0d:
         fd:8a:64:0d:4e:c8:07:9f:9f:88:e0:17:24:21:52:9a:a0:2a:
         51:d9:c2:0b:e6:c3:8c:db:80:9f:16:d4:91:ca:ab:75:04:49:
         95:28:d3:2d:dc:21:a6:c2:06:f0:34:d6:87:ae:5e:6f:d4:a3:
         eb:47:3c:10:8d:88:62:96:52:0b:70:b9:5e:5f:0a:81:30:fa:
         86:50:5d:f1:58:3d:ed:82:d4:b8:12:32:d5:81:50:7d:ac:ea:
         24:cf:f6:97:d4:c9:75:b0:ac:36:d7:4f:92:ab:e5:fc:10:08:
         e1:0d:47:77:dc:da:7d:86:c2:40:00:6c:7e:99:79:bd:67:d8:
         09:39:4c:b9:1f:4c:de:b6:b3:7c:bd:9c:fa:32:99:0e:03:7f:
         df:0c:21:c2:e7:ab:05:2e:58:91:eb:30:6b:18:08:8d:ad:06:
         4e:c5:bc:77:28:ac:f3:fb:98:dc:d5:dd:9c:ec:c5:1c:08:02:
         b9:ac:f2:a9:eb:06:28:d0:fc:1a:d8:f2:f0:be:f1:6f:a0:db:
         e6:7e:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:51 2025 by rpki-client