Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eNaf-cqewbPf0BMYmvL3BW37cLk.roa
File:                     eNaf-cqewbPf0BMYmvL3BW37cLk.roa (raw, json)
Hash identifier:          j5AhrTqME3YeKjvlnS7eUx/mZs7o5BQkIxzQcAfp0Ms=
Subject key identifier:   78:D6:9F:F9:CA:9E:C1:B3:DF:D0:13:18:9A:F2:F7:05:6D:FB:70:B9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03B9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eNaf-cqewbPf0BMYmvL3BW37cLk.roa
Signing time:             Fri 01 Aug 2025 01:58:50 +0000
ROA not before:           Fri 01 Aug 2025 01:58:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        61.192.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953 (0x3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=78D69FF9CA9EC1B3DFD013189AF2F7056DFB70B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:4c:6a:b6:8c:83:a5:cb:c2:c6:35:14:77:
                    63:be:71:ca:18:6b:f8:fa:fe:e5:46:c2:e4:85:97:
                    43:00:2d:51:95:b5:07:36:24:2d:8d:36:ef:c7:82:
                    7f:96:74:8d:60:a9:ec:d1:dc:8d:97:ee:c2:45:59:
                    a8:cb:e9:00:e5:e5:8c:ba:ca:af:e0:36:d5:36:3c:
                    f2:3d:fc:97:43:aa:62:92:69:62:03:f5:43:1b:dd:
                    e8:67:4f:c5:bb:d9:33:7e:b7:4a:cf:13:dc:3a:72:
                    d2:1a:e1:fd:f6:91:d5:d7:a8:0c:ed:59:7f:48:76:
                    61:62:b6:2c:aa:d2:dd:6c:73:d9:e6:8b:21:da:ba:
                    34:23:43:f0:ed:ee:f7:94:b7:1c:a3:ac:b7:4c:1f:
                    e1:43:9c:f7:bb:8b:bb:6f:0a:f9:76:3c:b2:f2:5c:
                    ec:40:c6:dd:79:e7:89:aa:20:32:38:1c:1c:9d:e2:
                    d2:4d:1c:a5:41:96:9b:00:a5:7f:83:d8:00:67:b6:
                    e0:c7:b2:0d:7e:69:1d:05:ae:e0:62:9a:86:7b:4d:
                    37:0b:b6:96:e0:8a:9e:99:5c:55:a9:f4:b5:0e:16:
                    a9:ff:85:a9:18:33:5c:36:30:b5:76:59:e0:d6:bf:
                    e0:46:0e:23:72:65:bb:05:16:06:d2:50:eb:f5:a7:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:9F:F9:CA:9E:C1:B3:DF:D0:13:18:9A:F2:F7:05:6D:FB:70:B9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eNaf-cqewbPf0BMYmvL3BW37cLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:2c:69:fe:ce:d1:00:36:db:03:f2:e7:41:79:de:b8:44:11:
         58:18:34:c6:d1:ed:3e:c6:30:54:55:e2:47:01:7f:e7:9e:b7:
         78:b4:ea:fe:fc:c3:fb:4b:27:9d:7f:fd:30:59:1f:0e:53:39:
         92:21:22:34:95:f5:43:b2:71:dc:b3:a7:57:05:5b:d0:58:b1:
         c2:a8:a2:59:0e:36:c6:42:0b:42:4a:c5:ff:17:a2:ae:44:4c:
         55:27:dd:8d:c3:e3:f0:8e:b4:46:34:2a:81:b3:04:39:5f:cf:
         f1:c0:43:59:5b:c8:c3:5d:93:37:fb:08:18:d5:53:70:60:2e:
         40:07:65:44:4b:21:3c:a6:0c:b6:80:99:48:89:81:2f:49:a1:
         a0:86:35:9b:f5:9f:05:18:b3:6e:ec:52:70:39:e4:83:6a:d0:
         55:53:99:c9:00:94:c1:0c:02:72:70:04:58:84:f3:6d:57:97:
         4e:1d:da:ea:1d:72:72:06:df:ff:cf:47:a9:c3:ea:14:f5:7f:
         95:2b:be:7d:7e:b0:0d:69:9d:66:2d:55:69:82:c7:94:d9:44:
         0b:e5:66:43:b6:7c:22:8d:ef:b1:7c:25:f0:86:3d:bc:a6:b2:
         81:93:ae:55:48:d1:4f:a4:1f:1a:b9:7c:43:57:b1:f9:de:91:
         ff:72:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:55 2025 by rpki-client