Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/XY1O8uRIxfQtA2nLEqS0bOEVDgo.roa
File:                     XY1O8uRIxfQtA2nLEqS0bOEVDgo.roa (raw, json)
Hash identifier:          gypc+DmD+uppN9pWUsk2woK+ynRRoTzOoOXRZty3Tls=
Subject key identifier:   5D:8D:4E:F2:E4:48:C5:F4:2D:03:69:CB:12:A4:B4:6C:E1:15:0E:0A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03A3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XY1O8uRIxfQtA2nLEqS0bOEVDgo.roa
Signing time:             Fri 01 Aug 2025 01:54:56 +0000
ROA not before:           Fri 01 Aug 2025 01:54:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        219.113.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=5D8D4EF2E448C5F42D0369CB12A4B46CE1150E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:c2:f4:36:8d:ff:4b:59:bc:dc:4e:af:d2:
                    b9:f9:dc:e2:3a:9d:c1:be:92:71:09:74:a4:2b:f0:
                    16:d8:21:59:05:33:64:a5:29:f3:42:05:99:42:f1:
                    f3:94:00:00:5d:18:74:58:91:87:88:ba:01:6d:93:
                    4d:08:51:32:b7:ea:f3:35:81:10:6b:ce:ff:bc:79:
                    bb:2b:e1:70:ed:70:a1:ba:e0:02:58:09:c8:37:06:
                    50:fb:52:ae:bd:84:09:3f:cb:10:8d:15:71:05:54:
                    11:d8:ce:86:86:0d:3d:84:43:c6:61:dd:66:ce:8a:
                    3a:b5:30:b2:af:7a:b8:87:bd:35:40:36:07:e4:3e:
                    3b:e8:f9:91:ca:af:f1:39:51:bb:a5:1e:d3:a7:07:
                    7c:09:ce:08:5b:44:63:db:e9:d0:1f:3e:05:42:1f:
                    e7:de:74:38:2a:09:df:8d:33:b9:f5:b6:33:fe:27:
                    b8:aa:7e:eb:b9:60:f5:89:6a:47:65:47:9a:5c:65:
                    48:bb:d3:c6:42:f5:06:d1:08:18:12:71:60:7d:d2:
                    1a:11:e0:ac:e7:3d:56:3f:7d:12:0e:f1:d7:08:72:
                    b8:8b:d0:06:1e:45:60:82:35:85:34:a3:3a:65:48:
                    d2:0a:20:b4:e4:03:44:a8:17:04:f6:3f:af:1e:50:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:4E:F2:E4:48:C5:F4:2D:03:69:CB:12:A4:B4:6C:E1:15:0E:0A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XY1O8uRIxfQtA2nLEqS0bOEVDgo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:59:3c:15:31:51:5f:d5:36:02:ce:e5:00:6d:d2:a2:e3:
         be:b2:61:e6:fb:f2:68:fd:2a:cc:9e:3a:22:9f:c0:45:ec:b4:
         cd:55:77:31:7a:a8:86:49:d4:67:8e:d0:cc:94:7f:71:51:6a:
         77:c6:2e:d5:04:26:e0:27:8e:90:95:52:51:93:63:99:0a:c0:
         72:38:75:86:dc:56:f1:d8:d5:c5:a1:db:c0:66:d2:63:0f:22:
         11:99:ff:24:67:6b:37:d6:9d:52:1a:5b:f8:6f:ac:df:8c:6d:
         a4:f4:4a:44:4b:0f:22:da:f1:61:b6:f3:69:90:b1:56:32:9f:
         9d:b7:2e:e1:72:5a:98:7c:1d:95:76:78:e6:40:ae:cc:73:9a:
         1f:0f:7c:24:ed:78:24:0f:f3:e1:29:ee:5b:4e:c8:bd:a2:36:
         22:30:3e:b4:93:c0:11:0d:e6:27:37:11:1d:e4:f6:75:99:b1:
         dc:c9:d1:26:d6:35:05:06:11:83:fd:b0:b1:c7:13:75:2c:ee:
         72:76:fb:3d:f0:5a:dd:15:a1:1f:ad:6d:4b:c0:3f:e2:b6:76:
         03:14:26:91:9e:8e:3f:62:ac:44:79:b9:a3:8d:d7:92:df:43:
         ef:06:90:ba:a9:41:a0:f7:25:e7:ca:e6:ec:db:01:e5:08:b2:
         40:f5:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:28 2025 by rpki-client