Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
File:                     ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa (raw, json)
Hash identifier:          +M7pRiOl6geNetCI0h6eTfGidx1rqu64SAjlgUO37/s=
Subject key identifier:   65:3F:9F:AE:40:B3:0C:C7:C3:00:81:FB:44:2D:20:CE:01:DC:A5:1E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       038A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
Signing time:             Fri 01 Aug 2025 01:50:56 +0000
ROA not before:           Fri 01 Aug 2025 01:50:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        182.50.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=653F9FAE40B30CC7C30081FB442D20CE01DCA51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:78:4b:cb:8b:c3:2c:b3:53:4b:9e:c7:33:
                    68:76:45:15:22:88:30:f3:09:f8:3e:8e:b8:00:15:
                    25:2d:5a:32:79:a5:a5:36:e4:58:a0:df:7b:2d:57:
                    fa:f4:70:9a:75:b5:72:4d:cb:d1:79:37:f5:13:d1:
                    4d:e8:be:a5:b5:14:a1:a4:67:f8:c4:4d:7f:84:a8:
                    66:78:7c:f3:38:c8:83:05:3f:cd:7f:30:d0:b6:dd:
                    a1:8b:28:9f:65:8e:5e:aa:77:52:55:d3:05:1b:04:
                    67:76:1a:20:38:a5:0f:2d:fb:f0:9c:92:f3:37:21:
                    57:ba:82:4e:55:9f:d1:ec:e2:08:4b:eb:0e:d2:e9:
                    d5:ba:9b:e7:e9:31:f7:cb:b5:27:58:23:48:44:6b:
                    28:77:6c:65:14:f9:00:c8:91:74:a4:5d:92:0c:59:
                    77:9a:3b:4c:3d:8f:d4:8d:c7:b9:86:85:65:89:9c:
                    f0:b2:1c:2d:4a:91:66:14:57:f6:07:de:9a:ba:d9:
                    cb:48:33:f3:c2:4c:ae:25:db:15:46:ed:91:bf:dd:
                    80:c6:f6:34:df:09:65:1e:ce:8f:c8:20:c3:e8:cf:
                    7d:bf:c0:09:b5:54:9e:7f:a2:14:dc:b7:0e:a8:49:
                    4d:17:15:b2:31:34:f2:66:3d:3e:72:12:12:3d:92:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:9F:AE:40:B3:0C:C7:C3:00:81:FB:44:2D:20:CE:01:DC:A5:1E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZT-frkCzDMfDAIH7RC0gzgHcpR4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:6f:1d:26:80:fd:d9:18:bb:cb:2c:39:78:ce:9a:a5:a5:
         04:8d:6a:41:9c:78:f7:ff:fd:24:77:4f:f8:53:0a:1c:67:1f:
         c3:fc:52:2f:45:5b:d7:99:05:f6:d3:2a:3c:f0:55:9f:69:d9:
         37:e5:74:9a:ab:da:a3:5f:40:47:25:2e:bc:47:a6:ce:7c:ed:
         9a:44:8f:a0:66:8d:3b:74:49:9c:27:2a:fd:58:78:5b:db:19:
         ac:7c:6f:7c:3c:0f:3c:9e:8b:87:5a:33:c8:d0:ee:b2:b1:4b:
         d2:10:e8:33:03:bb:3b:1c:b3:a9:20:8e:d4:5b:7b:53:09:c7:
         83:e4:fc:9b:ed:d8:66:ec:38:cd:c2:aa:33:18:6e:76:cb:bf:
         9d:8f:af:3c:48:93:27:35:1a:80:36:a3:24:7c:6d:76:ed:ea:
         38:7c:08:1c:ff:0b:9c:8c:ed:d1:51:ab:44:43:c9:bb:44:49:
         1b:61:cd:e0:15:83:9c:63:2c:77:87:29:04:e7:3d:55:f2:b6:
         c5:e7:eb:65:a1:c9:12:43:d6:84:7f:df:4e:8e:2e:5f:95:03:
         af:c4:a6:a6:a7:37:1c:0b:09:31:f7:f1:b6:47:0e:38:3c:0a:
         f3:4c:7e:a3:bb:2a:5d:55:f0:b0:39:7a:77:9d:20:71:8e:31:
         5e:7d:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:18:13 2025 by rpki-client