Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ufWTipmhxVxvFS84QCFw6MIH_Vw.roa
File:                     ufWTipmhxVxvFS84QCFw6MIH_Vw.roa (raw, json)
Hash identifier:          i1WTQdooy5Pqu9C8XTX+rO+bBtyc9YsSxVslxwbMcMM=
Subject key identifier:   B9:F5:93:8A:99:A1:C5:5C:6F:15:2F:38:40:21:70:E8:C2:07:FD:5C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0392
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ufWTipmhxVxvFS84QCFw6MIH_Vw.roa
Signing time:             Fri 01 Aug 2025 01:51:00 +0000
ROA not before:           Fri 01 Aug 2025 01:51:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        202.78.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:51:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B9F5938A99A1C55C6F152F38402170E8C207FD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:84:a0:a6:84:d7:ce:a7:46:a2:5f:86:58:
                    62:d1:ba:02:a8:0c:25:7a:00:ac:83:b0:f8:fa:0c:
                    69:4b:73:76:fc:09:ff:48:5d:c7:80:aa:f9:30:91:
                    c1:2d:2d:e4:00:43:2e:e9:a4:02:e1:af:5f:53:22:
                    47:7b:f5:a2:f4:17:ef:c1:09:27:a8:cf:4d:1f:97:
                    17:cb:a2:fa:fd:71:93:6a:e4:b8:7a:63:de:a3:b6:
                    9f:2d:fb:57:61:02:24:48:67:28:86:87:9e:a2:a6:
                    3c:b4:31:da:78:43:17:38:b8:35:46:32:b3:f1:dd:
                    76:63:b0:35:29:10:58:6a:c3:cd:97:29:fc:ab:f6:
                    0d:f5:c7:92:df:73:f4:74:3d:31:6a:70:f7:18:2e:
                    f5:cc:d7:03:ff:77:4d:56:96:2a:02:4b:35:4d:9c:
                    95:e1:af:17:c5:1b:61:88:93:35:61:19:a5:0e:a4:
                    47:a2:09:79:8a:09:a9:06:de:55:13:6b:1a:fe:37:
                    43:fc:fa:5d:f7:ae:9f:dd:5c:a9:6d:6b:7c:81:aa:
                    5e:7d:73:e3:a8:9f:af:8f:a5:a4:7a:ec:d9:b5:93:
                    23:0a:85:2d:15:fa:28:00:d4:60:b0:30:72:44:a5:
                    f3:bd:ce:69:ef:25:6d:0c:18:83:41:12:93:08:46:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:93:8A:99:A1:C5:5C:6F:15:2F:38:40:21:70:E8:C2:07:FD:5C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ufWTipmhxVxvFS84QCFw6MIH_Vw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:82:e6:76:39:f8:ba:16:29:ae:62:ba:ee:4e:23:59:d0:1f:
         93:ce:97:51:b3:09:f1:4e:dd:3a:63:fe:22:e5:db:0e:5d:f1:
         e2:f0:01:d4:3b:58:a1:ee:f5:1d:ed:46:af:f7:22:a9:c2:33:
         fb:3f:af:24:e4:9e:1d:21:ab:ad:53:0c:6b:30:83:75:1c:de:
         d6:8c:55:c9:3d:34:68:e5:54:9b:3e:41:8a:9e:02:bd:51:57:
         65:d0:50:9b:4d:e0:be:fb:b3:3a:57:aa:55:c7:2d:34:45:67:
         59:ba:03:03:62:2c:d7:a5:59:da:2a:07:39:d3:50:9f:04:ea:
         77:96:46:d2:a6:32:53:f5:0b:06:aa:c9:8a:a6:b0:41:1b:b9:
         d6:47:68:31:c0:3d:5f:b4:3d:87:3e:72:3b:ff:97:66:82:76:
         e9:83:d6:d3:3b:bf:20:e5:64:58:3f:62:2b:bf:70:87:71:f3:
         eb:c0:60:33:7e:af:a8:96:bb:16:3e:34:89:1b:bd:52:1b:15:
         b1:61:2d:d9:86:01:0e:a2:58:72:ae:b5:67:05:c8:5f:0f:b6:
         eb:a6:7c:49:ce:57:fd:5a:55:90:38:53:8c:f9:c0:02:d7:7a:
         f1:4a:4e:aa:85:2f:5a:0b:63:c0:c0:0b:9e:0f:c0:16:37:21:
         04:0c:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:34 2025 by rpki-client