Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nLJ1m1CXpFQK_NglBih41Sm9_YA.roa
File:                     nLJ1m1CXpFQK_NglBih41Sm9_YA.roa (raw, json)
Hash identifier:          eiHuIUJ9HCZWdCXZX3ygOEWCbTd5SxDcpWW7EtvswRg=
Subject key identifier:   9C:B2:75:9B:50:97:A4:54:0A:FC:D8:25:06:28:78:D5:29:BD:FD:80
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nLJ1m1CXpFQK_NglBih41Sm9_YA.roa
Signing time:             Fri 01 Aug 2025 02:03:09 +0000
ROA not before:           Fri 01 Aug 2025 02:03:09 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        111.90.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:09 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9CB2759B5097A4540AFCD825062878D529BDFD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:86:79:81:14:f2:53:ea:a2:81:08:4f:cf:
                    5b:5a:30:e3:b5:82:39:db:34:03:4d:5f:97:b9:a6:
                    a2:06:83:28:48:15:c6:36:55:fd:3c:e4:38:b6:7f:
                    f0:6b:fb:89:3a:12:4a:9c:d7:d6:70:80:a6:0f:63:
                    2e:0b:d7:2f:89:70:cd:d6:fa:de:45:f0:91:f4:12:
                    f8:6c:aa:e5:52:1a:84:4f:75:17:af:f0:9c:92:5a:
                    89:79:78:ed:4f:23:0b:f2:4a:a8:39:79:d7:89:9d:
                    54:5f:14:f2:e5:2e:e0:0f:77:80:f0:ad:7b:f0:a7:
                    c0:0b:d7:bb:19:bc:82:97:13:27:ca:2b:64:6b:33:
                    16:f0:35:a5:14:94:cf:49:0e:07:5a:5a:40:5f:af:
                    e4:1b:c3:07:c3:fb:8b:61:d4:80:4b:ef:c1:66:47:
                    a1:e0:26:bf:77:44:e1:be:2c:77:f8:d8:26:2b:01:
                    fe:8f:d9:8a:2b:a9:24:79:f2:01:54:95:23:76:8e:
                    78:19:94:ea:06:cb:2b:3c:bc:58:a3:2f:df:85:27:
                    f7:d7:6c:05:04:88:5d:30:9f:33:43:79:f2:9a:3f:
                    65:e3:14:f8:ea:70:a9:aa:99:76:6d:9b:8d:4f:b2:
                    8e:00:d4:41:50:ab:09:21:69:a7:c1:d8:01:9b:43:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:75:9B:50:97:A4:54:0A:FC:D8:25:06:28:78:D5:29:BD:FD:80
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nLJ1m1CXpFQK_NglBih41Sm9_YA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.90.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:fb:76:d9:c3:7d:09:06:0f:5b:54:f9:cc:aa:3c:cb:6f:
         99:8b:dc:36:86:49:08:c4:6c:07:ce:e2:1d:1b:dd:61:96:59:
         7b:41:76:58:4e:dd:e4:30:23:91:47:ae:4b:02:3b:29:f1:66:
         93:63:4c:bd:e6:9a:6c:44:4c:ed:cb:d9:09:72:55:2f:aa:56:
         94:d5:0f:9e:17:94:85:00:85:df:02:4f:6c:1a:76:e6:b6:81:
         87:44:0d:98:1b:f8:be:21:5a:0e:30:45:dc:ca:92:5d:16:13:
         19:30:86:44:be:4d:c2:0b:57:14:b8:53:b8:72:e4:ec:d3:f1:
         07:11:55:0c:5c:f6:9b:7f:54:5a:e3:c6:61:7f:9a:83:fe:a7:
         5a:ed:c1:ff:f3:af:2e:35:a3:dc:6d:8c:37:80:6f:5f:f9:cc:
         36:15:6e:b7:6a:78:49:77:c3:d1:95:5b:5d:5d:40:a1:2d:07:
         5e:b7:fb:8e:20:7d:bd:93:d2:7c:4c:46:3e:21:29:1c:e1:1b:
         fd:3c:a7:aa:fd:ae:21:42:ea:c0:06:61:8b:16:48:66:f8:60:
         b2:11:70:a7:59:f9:06:68:e0:3b:db:10:d6:6e:7d:9f:9f:a0:
         93:3e:15:9b:bf:89:6a:99:d3:4c:9e:f8:66:b3:6c:4b:9a:fd:
         d3:28:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:13:47 2025 by rpki-client