Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/soFEv4TgYJSDJeKzREeO6B9el4U.roa
File:                     soFEv4TgYJSDJeKzREeO6B9el4U.roa (raw, json)
Hash identifier:          bmyoRlApkaBAU11eZuTsvmro0C/AecvNyofURqP25pY=
Subject key identifier:   B2:81:44:BF:84:E0:60:94:83:25:E2:B3:44:47:8E:E8:1F:5E:97:85
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03BE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/soFEv4TgYJSDJeKzREeO6B9el4U.roa
Signing time:             Fri 01 Aug 2025 01:58:55 +0000
ROA not before:           Fri 01 Aug 2025 01:58:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        119.26.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 14:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B28144BF84E060948325E2B344478EE81F5E9785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:9f:47:49:bb:16:c3:05:fa:65:a5:1b:49:
                    02:fb:03:1e:a5:12:05:20:2a:f4:09:45:ee:60:02:
                    5a:e4:fb:3a:b2:7f:d4:e4:0b:5d:50:9f:f4:05:33:
                    9d:b9:bf:93:4f:c9:25:2d:d0:b5:f9:33:45:79:94:
                    29:06:3d:1d:29:61:85:e5:ee:f3:19:3d:49:6e:e6:
                    2d:5d:81:56:67:4a:9a:d3:a4:08:27:78:ff:f3:d4:
                    7a:ba:40:ce:47:03:20:72:16:30:03:7f:9f:e8:4d:
                    51:ec:d4:fb:5e:b0:25:3b:35:24:72:b8:7b:38:53:
                    90:69:bf:9d:84:e0:8c:2e:fd:02:d3:d3:59:57:93:
                    b3:f1:84:23:42:f0:c7:6c:97:2c:54:fb:a3:10:f1:
                    f6:32:be:2b:e2:a7:6d:d1:e5:83:03:38:44:47:89:
                    af:e3:ab:91:0b:99:33:c8:21:aa:5e:e5:7e:10:e8:
                    95:50:04:06:c4:2f:20:7c:12:14:ef:ce:26:d9:25:
                    57:ea:e6:a1:ea:5c:e3:b0:64:a7:a9:93:77:c5:9a:
                    cb:9e:e6:6c:ae:29:53:20:a2:d6:a3:dc:70:d2:11:
                    2b:fa:42:76:f5:90:80:61:4a:03:24:c8:64:64:f2:
                    0e:ee:6d:b6:56:f3:95:f7:b6:85:e7:ad:5a:c9:75:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:44:BF:84:E0:60:94:83:25:E2:B3:44:47:8E:E8:1F:5E:97:85
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/soFEv4TgYJSDJeKzREeO6B9el4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:c5:12:27:75:5c:2f:81:cb:cb:97:10:7d:dc:02:77:79:85:
         ee:c1:ed:d4:38:d6:a6:67:7e:65:e6:46:4d:ec:af:59:1e:9d:
         88:fb:1d:59:43:6d:80:f8:cc:92:bd:be:85:39:46:62:b3:cc:
         b6:2b:1a:e0:72:17:52:d6:4c:53:4b:51:66:82:17:6b:be:e6:
         d0:d6:57:85:4e:1e:1a:aa:d4:2d:16:3c:ca:56:7a:d6:43:a2:
         50:00:f1:f4:90:43:e1:1b:2e:08:d6:62:de:06:df:4b:56:64:
         8c:d3:af:a0:b3:2d:70:a2:b7:97:21:6e:70:bd:4f:90:80:23:
         1b:85:c2:7a:31:73:da:ff:8f:9c:66:5a:fa:e4:c0:6c:55:05:
         a6:7f:63:10:72:33:26:a2:3d:1a:88:14:c6:07:72:6b:2d:14:
         4a:26:02:99:d7:6f:d5:f6:7a:22:04:56:23:9d:33:d2:23:ee:
         22:a7:f3:94:4a:89:cf:48:1e:42:f9:c7:fb:05:a1:c8:90:9b:
         e5:8e:10:d0:4e:f8:32:31:1a:1c:10:bb:f4:6a:23:48:24:f8:
         23:69:8f:de:e2:16:8d:41:1a:56:72:a8:6b:60:18:86:cc:b8:
         f3:14:e9:81:75:67:2e:34:fd:28:bd:22:00:ef:9a:7f:c1:c7:
         96:7e:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:52 2025 by rpki-client