Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/F6ilgIJBpYNP2NIgALlLEG-jkRA.roa
File:                     F6ilgIJBpYNP2NIgALlLEG-jkRA.roa (raw, json)
Hash identifier:          uzvD2OBlyXFShOyQj2ZMeY4abdUiMNWn3The25E/3OA=
Subject key identifier:   17:A8:A5:80:82:41:A5:83:4F:D8:D2:20:00:B9:4B:10:6F:A3:91:10
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       15
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/F6ilgIJBpYNP2NIgALlLEG-jkRA.roa
Signing time:             Thu 24 Jul 2025 02:35:08 +0000
ROA not before:           Thu 24 Jul 2025 02:35:08 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        164.46.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 Aug 2025 23:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: Jul 24 02:35:08 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=17A8A5808241A5834FD8D22000B94B106FA39110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:97:ec:15:fa:e6:05:16:bd:fc:42:8a:a5:
                    78:66:cc:c1:62:16:fd:ab:80:e2:5d:9b:50:32:94:
                    95:da:6a:42:9d:48:91:de:7a:5e:d7:c9:f7:b3:fa:
                    ca:f2:4d:c2:d8:ce:fb:84:91:cb:40:0b:8b:0a:b6:
                    cc:f7:6e:53:bd:fd:a2:2e:ba:70:4e:b1:b9:00:51:
                    f2:9e:42:db:bd:7a:70:3f:2e:53:8d:d8:d3:05:f7:
                    68:2f:9d:b2:66:bc:80:ec:3e:a0:1c:92:2d:78:86:
                    f7:c7:64:dd:f3:36:ab:f8:f3:90:92:74:59:d0:51:
                    b9:ff:99:97:82:a5:74:eb:32:c3:59:ae:c2:e9:92:
                    de:83:b6:17:58:40:a3:1a:72:31:67:99:7a:30:1a:
                    70:64:1f:37:63:9f:6d:e9:b3:92:c7:4a:9a:00:db:
                    e1:16:22:5d:8a:27:22:6e:7f:cb:bb:2a:d5:da:f1:
                    c5:0a:de:11:b5:ea:ba:72:d8:83:cd:b6:d0:cd:21:
                    94:18:fc:23:e0:5e:c2:fe:12:cb:76:f9:24:3d:1f:
                    57:10:fe:8e:41:93:31:0d:ca:6b:d0:30:61:3c:15:
                    a1:11:ad:1d:07:08:99:38:07:64:5d:db:c9:22:d0:
                    2f:3e:4f:e7:f5:90:f2:c0:df:32:aa:32:42:b5:cd:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:A5:80:82:41:A5:83:4F:D8:D2:20:00:B9:4B:10:6F:A3:91:10
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/F6ilgIJBpYNP2NIgALlLEG-jkRA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:f9:7d:0e:3c:0b:25:61:d4:dd:14:19:23:a4:60:7a:79:c8:
         59:88:1f:ba:1e:3b:5e:f0:39:2a:5f:98:47:cc:0a:70:b0:d0:
         68:7c:21:50:eb:77:fc:0e:0c:85:2b:72:ca:73:1d:d1:d3:e9:
         8a:e9:78:ad:40:84:79:e4:74:83:50:21:d5:e9:45:09:93:2e:
         5c:32:dc:3e:db:c9:f0:15:81:7d:79:6c:d0:14:e4:fb:5c:d8:
         23:8d:fb:39:50:1c:36:b8:b5:c4:91:47:9d:ee:25:92:68:a4:
         24:c2:55:33:fe:fb:01:24:6c:4f:94:fe:48:a5:41:94:47:85:
         1a:1f:63:08:36:47:e7:4e:40:23:3c:95:96:0c:7c:23:cb:3a:
         43:f5:f0:23:15:0c:4d:3f:c9:15:9c:62:c1:96:3a:43:71:72:
         74:59:45:6f:e6:c6:4e:4d:ba:ca:db:df:4d:b5:9a:e0:f5:c4:
         ed:3a:65:9e:1c:f2:8a:48:9c:c4:57:3b:b9:b5:04:95:29:f6:
         97:fc:b8:02:43:03:20:76:94:2c:d0:0c:08:df:fd:07:d2:95:
         22:f5:3e:d2:46:70:ad:19:75:65:84:97:6d:92:6d:4b:4a:14:
         92:be:55:b2:14:02:4f:c2:c2:c8:b2:5e:d8:87:6e:fb:29:b0:
         45:a4:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:13 2025 by rpki-client