Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/FfcK6hNpL69MQBhKqycazIWz4HA.roa
File:                     FfcK6hNpL69MQBhKqycazIWz4HA.roa (raw, json)
Hash identifier:          IOLHhfDVOC/ObCNORMhh1YahIisWa49vtU2J2Ls4dH8=
Subject key identifier:   15:F7:0A:EA:13:69:2F:AF:4C:40:18:4A:AB:27:1A:CC:85:B3:E0:70
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       44
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/FfcK6hNpL69MQBhKqycazIWz4HA.roa
Signing time:             Mon 30 Jun 2025 01:47:06 +0000
ROA not before:           Mon 30 Jun 2025 01:47:06 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     138384
IP address blocks:        211.7.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Jun 30 01:47:06 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=15F70AEA13692FAF4C40184AAB271ACC85B3E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:3d:65:f5:da:de:aa:87:1c:dd:17:d9:78:
                    f4:1d:3e:b6:79:b6:90:ba:6a:84:41:4b:a5:d0:78:
                    97:b2:5e:42:d2:e1:14:a2:bc:72:15:9b:58:8f:34:
                    eb:99:91:cf:38:30:8b:83:06:a7:21:c3:c0:67:a2:
                    20:1b:98:5e:28:a5:3d:eb:3a:24:ff:48:6b:12:fd:
                    4c:6c:aa:6b:73:5b:08:ae:50:bf:13:1e:89:b9:9b:
                    20:80:49:9b:45:14:67:f3:18:e9:43:b9:b7:f4:db:
                    9f:e5:c3:08:aa:c5:97:69:e8:e8:7e:0b:53:d3:57:
                    89:4e:da:9f:e6:e6:0e:98:a1:c8:1d:dc:b0:d5:5e:
                    dd:da:52:d0:c3:34:4c:c7:4d:9c:27:d2:75:33:18:
                    a2:34:01:57:09:91:e9:3b:de:6a:a4:a3:e5:9d:4b:
                    2e:2a:8b:e4:09:b7:5f:f4:b7:9e:57:2d:2f:c7:ff:
                    16:2e:55:6a:89:2a:a0:01:6c:39:dd:4e:ee:12:d6:
                    6a:75:e6:69:c2:fa:2d:5c:13:9c:67:c2:0d:86:7f:
                    21:96:12:18:89:e7:8d:2b:c3:67:45:71:0b:af:7e:
                    09:fe:b3:dc:fe:78:91:31:d3:75:11:02:c6:ed:96:
                    c6:da:f3:ec:c3:6b:28:f0:4a:b7:94:68:dd:1e:a6:
                    19:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F7:0A:EA:13:69:2F:AF:4C:40:18:4A:AB:27:1A:CC:85:B3:E0:70
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/FfcK6hNpL69MQBhKqycazIWz4HA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:3e:77:b5:5f:ed:4e:b8:20:7b:90:02:fd:f8:65:77:cf:e4:
         6a:84:ed:d5:01:04:60:89:82:56:f6:f8:8f:a7:6e:c5:fa:1b:
         ae:88:09:d5:79:62:17:30:e4:1a:d3:34:b7:6f:0a:5f:9b:e6:
         c9:99:c6:79:81:88:d0:dd:94:71:7c:0c:af:f7:b9:a7:8a:7a:
         4c:59:7a:7c:83:25:74:ef:c0:b4:76:c8:ab:03:43:a8:40:2a:
         c4:bb:80:47:6d:3c:50:a5:f1:fc:46:90:87:de:66:2a:1e:2b:
         e3:ba:5f:43:1f:82:d1:41:62:02:62:01:74:1a:66:6a:b1:bf:
         e6:05:c3:6e:12:59:9e:54:0f:86:aa:47:66:fb:86:6d:15:f5:
         43:a1:e1:55:3c:8a:13:78:0c:c6:c1:b1:6a:d7:37:4e:d6:ec:
         89:d8:33:20:ca:08:c5:32:70:68:dc:e5:1d:2d:f1:03:f6:08:
         3a:d4:0d:ad:17:aa:ce:d6:08:bd:45:cb:19:9b:0e:d1:98:d0:
         15:6c:5a:cf:1d:f8:42:b5:4d:71:90:0f:48:4c:20:5c:c8:46:
         6f:2e:18:c1:66:5d:f0:a0:38:da:6e:e0:7b:12:4a:e9:98:20:
         de:47:00:bb:4b:10:03:94:06:7d:90:a7:dd:8b:db:9b:18:04:
         df:ec:97:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:23:56 2025 by rpki-client