Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/-v5_wsCTf60xDk6smxT7BEpZ3xw.roa
File:                     -v5_wsCTf60xDk6smxT7BEpZ3xw.roa (raw, json)
Hash identifier:          Xz5BFVBIhihN/MsujlI91TjMHfJhEBxr6yVZEFNQ5Ps=
Subject key identifier:   FA:FE:7F:C2:C0:93:7F:AD:31:0E:4E:AC:9B:14:FB:04:4A:59:DF:1C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       035E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-v5_wsCTf60xDk6smxT7BEpZ3xw.roa
Signing time:             Fri 01 Aug 2025 01:43:46 +0000
ROA not before:           Fri 01 Aug 2025 01:43:46 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        114.69.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:46 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FAFE7FC2C0937FAD310E4EAC9B14FB044A59DF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:d5:47:b7:e1:88:8c:35:04:3d:d7:31:5b:
                    a9:74:60:6b:06:87:2a:99:66:cc:84:d4:80:f3:43:
                    60:0e:a3:5a:01:d7:79:fd:4e:7a:fd:cc:af:02:8d:
                    1b:0e:d3:29:60:74:97:8e:1f:7f:59:ab:55:ee:1b:
                    d2:a2:ca:51:f8:01:9f:43:db:45:69:f0:46:33:24:
                    d8:97:0f:64:1b:7f:8b:1d:1b:8f:72:bc:38:21:d4:
                    7c:72:70:61:18:c9:63:8a:64:4c:57:fd:66:68:72:
                    e5:68:d9:11:5f:c8:9a:84:71:a0:ad:9c:47:03:fd:
                    08:16:d1:1d:1b:27:44:8c:bc:92:d4:86:93:ee:37:
                    06:77:d3:c4:a5:60:af:35:ca:74:f9:36:2f:f5:ec:
                    80:0b:46:e6:a9:e8:92:55:d9:55:28:97:8f:0e:b8:
                    29:64:0f:85:0e:22:c0:d1:f9:14:4e:27:4d:33:06:
                    de:48:f9:56:14:75:7d:6f:89:ef:d4:7f:f7:a7:ec:
                    dc:94:b9:ff:24:10:4f:42:b8:bc:51:23:00:dd:71:
                    ac:77:af:c4:66:53:51:d4:2d:2f:63:ad:40:b6:a0:
                    6c:87:b5:23:e7:08:48:52:58:00:bf:78:12:82:74:
                    c2:a1:20:74:b2:b1:76:a7:13:c9:87:d4:f6:be:8a:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:7F:C2:C0:93:7F:AD:31:0E:4E:AC:9B:14:FB:04:4A:59:DF:1C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-v5_wsCTf60xDk6smxT7BEpZ3xw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:65:a8:2b:98:0b:52:c9:e6:59:b9:08:dc:75:de:5c:c6:
         09:23:35:dd:60:a4:1e:ff:9e:ec:f7:44:77:e9:a6:8d:6c:8b:
         a3:90:db:22:31:3e:96:9b:db:94:c7:c5:dc:00:44:e5:45:0f:
         fa:da:c4:f1:39:0e:a8:7e:7f:5c:9d:c5:41:4d:0d:c4:e9:e8:
         ca:b9:7f:31:5f:82:9b:c7:7a:1c:63:28:79:0c:a4:67:79:c8:
         31:8d:58:a0:8e:d5:75:8d:e3:4e:7a:f2:82:b0:0e:f4:60:30:
         6c:90:84:75:08:53:82:6e:65:53:c0:12:2a:0d:e6:6c:e8:89:
         93:17:2b:81:4a:a8:e4:10:7d:6d:e3:4f:75:dd:fe:e4:ed:cf:
         26:33:7a:82:63:87:ef:9c:72:0a:e3:c1:db:77:c2:87:82:01:
         2c:73:a7:c8:c8:b5:33:25:6c:02:2a:02:1d:c0:c9:52:1a:a6:
         b6:bd:45:18:89:59:00:f2:5c:22:7a:27:1b:dd:eb:73:11:be:
         8c:c5:91:90:61:30:40:ee:c5:78:4a:b2:d2:de:60:9f:4f:27:
         53:af:7a:56:ee:3a:4e:5c:d2:08:5e:5f:43:99:14:2f:88:3a:
         64:b3:06:ec:58:39:95:99:1e:ec:64:6e:41:40:c1:fb:66:02:
         bb:40:22:b2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQzNDZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEZBRkU3RkMyQzA5MzdG
QUQzMTBFNEVBQzlCMTRGQjA0NEE1OURGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSVdVHt+GIjDUEPdcxW6l0YGsGhyqZZsyE1IDzQ2AOo1oB13n9
Tnr9zK8CjRsO0ylgdJeOH39Zq1XuG9KiylH4AZ9D20Vp8EYzJNiXD2Qbf4sdG49y
vDgh1HxycGEYyWOKZExX/WZocuVo2RFfyJqEcaCtnEcD/QgW0R0bJ0SMvJLUhpPu
NwZ308SlYK81ynT5Ni/17IALRuap6JJV2VUol48OuClkD4UOIsDR+RROJ00zBt5I
+VYUdX1vie/Uf/en7NyUuf8kEE9CuLxRIwDdcax3r8RmU1HULS9jrUC2oGyHtSPn
CEhSWAC/eBKCdMKhIHSysXanE8mH1Pa+imWhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+v5/wsCTf60xDk6smxT7BEpZ3xwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLy12NV93c0NUZjYweERrNnNteFQ3QkVwWjN4dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARyRaAwDQYJKoZIhvcNAQELBQADggEBAF5JZagrmAtSyeZZuQjcdd5cxgkj
Nd1gpB7/nuz3RHfppo1si6OQ2yIxPpab25THxdwAROVFD/raxPE5Dqh+f1ydxUFN
DcTp6Mq5fzFfgpvHehxjKHkMpGd5yDGNWKCO1XWN40568oKwDvRgMGyQhHUIU4Ju
ZVPAEioN5mzoiZMXK4FKqOQQfW3jT3Xd/uTtzyYzeoJjh++ccgrjwdt3woeCASxz
p8jItTMlbAIqAh3AyVIapra9RRiJWQDyXCJ6Jxvd63MRvozFkZBhMEDuxXhKstLe
YJ9PJ1OvelbuOk5c0gheX0OZFC+IOmSzBuxYOZWZHuxkbkFAwftmArtAIrI=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:33 2025 by rpki-client