Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rwBUfeCSh_B5OuIlHz5Xz0f1gKM.roa
File:                     rwBUfeCSh_B5OuIlHz5Xz0f1gKM.roa (raw, json)
Hash identifier:          s85GjeQ37Ft+X/wRSvamWKOwhGS7sdR/0GenHK7cNXE=
Subject key identifier:   AF:00:54:7D:E0:92:87:F0:79:3A:E2:25:1F:3E:57:CF:47:F5:80:A3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0364
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rwBUfeCSh_B5OuIlHz5Xz0f1gKM.roa
Signing time:             Fri 01 Aug 2025 01:43:51 +0000
ROA not before:           Fri 01 Aug 2025 01:43:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        61.205.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AF00547DE09287F0793AE2251F3E57CF47F580A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:9c:1d:e3:08:38:9b:6f:1f:b1:0e:38:33:
                    bc:58:58:20:ce:8c:5e:c1:45:93:bc:66:4c:b4:dc:
                    a4:8e:02:95:b9:45:8d:b6:ce:56:ea:9b:4d:e0:a4:
                    9a:05:04:9c:74:ec:d8:e9:07:5d:6e:71:0f:81:7a:
                    39:4b:20:71:06:11:cc:d6:8c:3a:ca:4f:19:88:26:
                    f2:27:25:57:aa:d9:2c:74:67:60:b5:7f:24:54:f8:
                    28:2a:05:49:b4:d2:3a:38:57:31:e3:aa:6f:77:64:
                    82:d7:4e:39:f6:62:3d:22:f4:c9:43:ce:34:a1:95:
                    3f:3d:5f:23:07:71:ba:4e:f9:08:8a:1c:17:07:8d:
                    c9:08:df:aa:ac:8b:60:92:76:81:5c:3c:d6:d8:9f:
                    44:ba:f7:46:ba:87:d6:d3:82:5c:91:6f:f8:3e:7e:
                    c5:ed:39:22:f6:8a:c1:cb:a0:5a:6e:21:71:eb:68:
                    a0:ed:63:b9:1f:95:71:0f:4b:3d:ad:dd:51:bf:cc:
                    3c:52:22:2e:33:d2:46:f8:42:d3:a2:b3:11:6c:2e:
                    69:f0:74:54:f2:cf:5b:e5:84:9f:2e:7c:28:8f:fc:
                    76:9c:fc:91:bb:ae:52:03:8f:65:76:57:b2:a5:ce:
                    f4:a2:cf:be:40:5b:f8:84:0c:21:0f:d8:4f:03:2e:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:54:7D:E0:92:87:F0:79:3A:E2:25:1F:3E:57:CF:47:F5:80:A3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rwBUfeCSh_B5OuIlHz5Xz0f1gKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:eb:d3:85:2c:5e:a7:b5:26:af:34:56:53:e9:f2:66:9d:7c:
         ff:0d:9f:9f:f9:1f:f2:6d:19:52:b4:07:d2:64:0e:a0:fb:9d:
         91:8a:14:d0:ac:8d:90:f7:c3:d0:b8:6f:ea:d2:98:7e:7d:37:
         f9:02:c8:f4:d7:f6:98:c1:58:cf:eb:19:41:9a:ae:cf:a1:23:
         7f:d6:26:06:04:27:92:11:3a:96:62:94:28:ff:a3:bc:9b:9e:
         77:a1:24:2c:e0:38:01:3b:2e:e2:59:7c:f6:d9:95:a9:98:51:
         1e:4b:ca:99:ee:49:d5:88:a4:b5:d1:da:c8:26:1c:9d:9d:99:
         ec:fe:c8:8b:68:f0:0e:62:ad:96:68:9d:29:9f:b5:c0:bc:4d:
         20:49:92:81:80:5a:33:f0:ca:20:65:c5:22:89:a0:dc:aa:ea:
         e1:e5:17:f4:8b:b1:7f:56:da:4f:22:51:c3:0e:14:fe:fe:ce:
         7b:44:cc:b7:00:50:d5:50:78:91:d3:d8:31:03:8a:fe:37:6b:
         e7:80:74:c0:fa:f4:fb:7b:cb:ee:6a:e0:67:3e:6e:46:04:59:
         c5:d2:64:ff:4b:8a:a1:25:d3:27:a6:62:04:d8:48:a4:91:b1:
         86:b7:e0:50:27:32:7e:a0:a8:ae:8a:39:2b:58:ab:fd:62:10:
         44:3d:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:43 2025 by rpki-client