Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/TT2F1EOcLnjxEfkR3SLS5YfAn7c.roa
File:                     TT2F1EOcLnjxEfkR3SLS5YfAn7c.roa (raw, json)
Hash identifier:          hKNI/mFlDofYAScHbJu7+dqL1ZVzgXnhYhiG6XlGxNg=
Subject key identifier:   4D:3D:85:D4:43:9C:2E:78:F1:11:F9:11:DD:22:D2:E5:87:C0:9F:B7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0333
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TT2F1EOcLnjxEfkR3SLS5YfAn7c.roa
Signing time:             Fri 01 Aug 2025 01:34:59 +0000
ROA not before:           Fri 01 Aug 2025 01:34:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9378
IP address blocks:        180.131.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=4D3D85D4439C2E78F111F911DD22D2E587C09FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:81:22:ba:48:52:a5:34:38:80:60:54:18:
                    20:e5:84:48:13:7d:b9:80:c2:74:96:b1:13:1d:2d:
                    6f:4a:19:44:24:5c:48:dc:3d:5d:02:40:fd:cc:9e:
                    ed:48:fb:6e:f5:19:69:ee:05:66:1d:12:60:ed:03:
                    dc:a6:f0:d0:84:0e:d6:1e:72:a9:0b:83:26:d2:3f:
                    ca:4c:ad:15:9b:01:ae:4f:81:ab:fe:96:cc:e2:f3:
                    09:27:46:91:58:4d:c0:99:dd:ea:6c:0a:13:10:90:
                    61:81:f9:33:91:34:a2:37:a9:ee:d8:5a:80:1c:ae:
                    19:78:02:5e:f1:63:57:fd:7b:d8:d9:cd:7c:8b:fc:
                    c9:8d:53:5a:78:ae:69:a7:de:16:fb:c1:7d:7e:d4:
                    c4:d0:75:55:68:26:d6:1e:be:6d:96:3c:da:59:23:
                    3d:1e:54:76:65:6e:29:ee:6c:4c:3f:a4:43:5c:90:
                    03:6a:ce:06:20:2e:5b:a0:bb:af:23:56:b1:16:95:
                    ba:2c:c6:b8:e0:3a:09:42:58:5b:95:89:3d:7d:8c:
                    70:3f:37:f1:59:0f:0a:89:96:5d:ff:6f:ae:9b:f1:
                    b1:bb:85:93:8a:38:39:ec:59:a4:ee:58:1e:8a:1d:
                    29:9f:96:3c:c4:78:7e:02:a3:30:42:28:10:f7:72:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3D:85:D4:43:9C:2E:78:F1:11:F9:11:DD:22:D2:E5:87:C0:9F:B7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TT2F1EOcLnjxEfkR3SLS5YfAn7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:b5:4c:21:b2:6a:ef:1c:a3:fc:62:40:59:75:94:d1:b1:
         a7:83:dd:0e:1d:77:d4:63:e6:81:73:e9:e1:b5:08:d8:ab:cd:
         b7:f1:50:1d:23:dc:ff:1f:26:87:db:5d:8b:7b:b7:a2:69:ab:
         75:c0:5c:87:8a:8e:52:f4:ab:97:85:0b:21:6c:f2:1b:58:b3:
         27:fe:35:55:d4:93:1b:ae:20:e7:d6:ec:58:ee:a0:83:64:1d:
         77:5f:36:4b:ff:b2:57:8c:71:c2:f9:3b:07:9e:34:33:cf:c3:
         6a:cc:3b:2a:1c:d5:c5:d4:55:f3:be:d2:6b:b9:9a:98:fe:56:
         2b:b1:3b:10:a7:6c:82:70:54:2c:dd:05:73:c2:f2:00:b1:6a:
         e7:9f:ff:f5:d9:12:5b:f3:e1:94:35:be:98:7d:74:98:cd:65:
         ba:8f:27:d6:ff:d2:b4:9b:83:24:61:15:dd:2f:8a:0a:f5:aa:
         e7:39:de:80:bc:c2:93:7b:bf:f2:ac:e2:46:49:87:41:c9:b6:
         25:fd:a2:bc:5b:72:51:ed:57:70:a4:e1:3d:6f:04:c5:88:26:
         fb:9e:5e:58:7d:ce:c1:d6:81:6e:1d:1f:78:8b:db:15:27:04:
         3a:02:1b:88:38:a4:53:7b:5c:8f:0c:30:68:60:6a:8e:02:ef:
         be:24:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:52 2025 by rpki-client