Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/w3BuXlCgF6EBW_t5KduXkRqcgxY.roa
File:                     w3BuXlCgF6EBW_t5KduXkRqcgxY.roa (raw, json)
Hash identifier:          C9Oar6CG8PMkZB80tu5G4eBjGN0CXwZmwruYkbUadQ8=
Subject key identifier:   C3:70:6E:5E:50:A0:17:A1:01:5B:FB:79:29:DB:97:91:1A:9C:83:16
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0354
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/w3BuXlCgF6EBW_t5KduXkRqcgxY.roa
Signing time:             Fri 01 Aug 2025 01:43:42 +0000
ROA not before:           Fri 01 Aug 2025 01:43:42 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        175.111.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:42 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C3706E5E50A017A1015BFB7929DB97911A9C8316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:f8:d3:b7:77:71:70:6c:86:a2:9a:26:53:
                    33:cb:06:88:3d:b5:fd:01:7c:8c:34:7b:43:6d:5d:
                    4b:c9:90:8a:8e:09:8f:f4:01:f2:04:c3:b7:55:78:
                    62:81:a2:2b:bb:e3:3c:43:5c:31:6a:84:2b:c1:22:
                    cd:eb:1a:92:30:60:06:ed:89:1a:71:c1:a7:f8:47:
                    b2:3c:a3:39:9b:e7:b1:df:02:f0:9a:2a:04:3a:96:
                    f4:d9:e9:dc:0a:16:5a:4d:60:71:db:b1:ed:8c:08:
                    22:84:e6:81:79:6d:6a:05:00:18:c7:90:d0:ad:47:
                    9a:2a:ee:48:08:22:3c:b0:73:15:fb:cc:86:e2:08:
                    aa:59:8e:9f:62:99:95:6d:43:cc:a2:86:81:3d:62:
                    97:36:6e:f5:ba:a2:37:cc:ee:07:ce:2f:2d:bb:1d:
                    c0:3d:eb:6f:b7:72:99:18:98:53:d9:fe:da:23:86:
                    ff:06:01:86:7e:99:0f:72:57:86:06:4a:5f:55:b0:
                    47:94:f0:2f:76:7c:a7:3c:31:ab:92:b8:e8:94:98:
                    37:1b:14:15:02:9d:a6:86:5c:57:68:53:aa:cd:92:
                    dd:94:a5:fd:9d:fc:51:5f:e1:41:68:60:3b:18:39:
                    fc:6b:20:b5:d7:4d:32:c5:a4:94:f7:97:38:9c:0d:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:6E:5E:50:A0:17:A1:01:5B:FB:79:29:DB:97:91:1A:9C:83:16
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/w3BuXlCgF6EBW_t5KduXkRqcgxY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:84:05:e0:2e:10:85:40:92:50:c4:d8:5d:7c:8c:54:5b:4b:
         41:62:87:e0:98:5b:09:7d:a9:1b:26:61:e3:a5:00:be:ff:50:
         0e:1e:48:12:35:17:0f:97:b3:c7:bb:49:e4:cb:96:01:9d:06:
         14:7a:6c:be:00:ae:d0:03:41:04:f4:00:fb:54:aa:ce:78:1b:
         28:a2:af:08:1b:8d:17:bb:30:43:78:02:da:22:18:68:91:da:
         d8:71:36:57:7b:84:98:39:f8:94:33:00:d8:63:e2:2d:d3:f6:
         01:aa:04:53:f0:0c:51:39:19:ce:d3:2c:14:34:fb:38:a6:3a:
         c0:33:77:43:6c:71:29:30:ab:d7:83:d0:b5:81:13:f8:90:8a:
         d6:73:d2:c3:d4:bd:75:54:aa:33:41:b4:1f:7a:17:08:00:08:
         90:9f:79:a8:eb:63:7d:8d:5a:3a:c3:5e:90:e6:a1:bf:7c:98:
         b7:f2:21:c9:c7:e9:72:31:f6:d0:c6:0e:ba:d7:88:7c:3b:7d:
         44:43:8e:6e:e1:30:7f:db:0d:67:39:bc:09:9e:9c:8c:8f:2a:
         4b:f3:c9:6f:0c:41:80:a7:9c:f9:c5:87:77:ba:09:6c:be:8c:
         3b:7b:9a:4e:cb:ec:cd:24:cb:7e:e4:38:70:17:cf:50:6e:1b:
         0b:9f:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:53 2025 by rpki-client