Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0jcK-VtwLmplxSSNpQHrWPSavlE.roa
File:                     0jcK-VtwLmplxSSNpQHrWPSavlE.roa (raw, json)
Hash identifier:          jDEz0vb1bkva61KXaEMUGMRQedTc+MD7qv1RCH/L41g=
Subject key identifier:   D2:37:0A:F9:5B:70:2E:6A:65:C5:24:8D:A5:01:EB:58:F4:9A:BE:51
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03C0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0jcK-VtwLmplxSSNpQHrWPSavlE.roa
Signing time:             Fri 01 Aug 2025 01:58:56 +0000
ROA not before:           Fri 01 Aug 2025 01:58:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        122.102.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=D2370AF95B702E6A65C5248DA501EB58F49ABE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:63:f1:d1:5a:5c:55:2d:0d:2b:78:ef:ec:
                    4e:92:6d:9d:b9:6f:89:8c:8e:4f:e7:8e:29:58:a5:
                    23:08:a2:cc:66:1d:b0:df:94:b7:23:17:b8:30:d5:
                    25:46:54:6d:2e:2c:fe:60:83:5c:cf:80:be:83:fc:
                    01:c8:f0:ea:3d:fd:f3:74:c2:42:96:a5:da:3a:4b:
                    f2:ab:33:db:54:c5:94:ae:12:a2:bc:63:82:51:41:
                    32:d2:31:ce:10:1f:ea:bf:cd:ac:ca:75:2a:b3:b9:
                    c1:3c:44:03:5f:39:8b:5a:a5:51:01:e2:69:5a:90:
                    e2:71:4b:83:cf:5f:00:6d:a7:19:a4:64:dc:bb:09:
                    2f:b2:35:f0:97:5d:8e:bd:82:c1:0b:dc:23:68:41:
                    3e:c6:ee:d0:fa:5c:df:82:a8:d1:ca:33:6f:61:48:
                    5d:99:eb:d5:30:18:e3:e4:b1:d2:5b:31:aa:dc:2a:
                    bc:c8:05:24:0c:21:33:08:dc:04:c1:1e:49:82:68:
                    b9:e4:78:87:99:ae:09:2b:5b:df:84:ef:4e:9d:39:
                    10:6e:98:db:2c:03:2f:1d:33:7b:1b:bf:82:09:9c:
                    3e:82:91:db:f0:fa:6c:83:3f:1c:e9:da:7c:66:ba:
                    b6:1a:8f:ce:50:36:65:ae:51:e0:87:ba:cf:f4:f5:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:0A:F9:5B:70:2E:6A:65:C5:24:8D:A5:01:EB:58:F4:9A:BE:51
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0jcK-VtwLmplxSSNpQHrWPSavlE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:3e:7f:2b:0d:2d:db:19:de:f5:3b:c0:a9:95:7f:06:d8:
         05:0c:3d:56:2b:08:28:ff:e6:67:3c:ae:38:e0:59:22:e1:58:
         1d:2b:47:b2:02:aa:7e:bf:9a:02:ff:3f:e7:3c:40:d6:0e:77:
         5f:53:98:26:86:be:7d:01:12:cf:de:06:a0:59:62:5f:cc:6d:
         e1:3c:7b:40:96:5b:e3:72:f5:0c:8e:ff:b7:9e:a8:f0:c2:a7:
         de:56:51:41:cb:c9:3e:c8:8e:8f:90:2b:57:da:f9:55:27:0b:
         64:45:ca:66:d6:6a:9f:9b:d7:36:2a:60:db:c9:20:cf:e7:b6:
         ce:b6:d1:c4:de:70:48:93:31:d1:07:95:dc:6d:de:d8:eb:42:
         39:ab:b6:5e:94:d9:a2:9b:9a:41:db:2d:79:7b:5c:0a:54:8d:
         50:33:fd:2d:86:c7:b1:80:84:f3:63:02:a6:e7:a6:c8:2a:4c:
         7b:45:00:c5:65:cc:5b:c7:12:91:20:20:4d:e4:ed:46:73:e7:
         43:d0:c8:91:85:c8:82:5e:5f:7c:e9:28:28:49:55:1f:66:3c:
         0b:54:29:3b:22:b1:00:0b:b2:3d:60:05:03:1c:43:0c:cf:c2:
         7c:c3:33:8d:85:d7:30:63:09:da:e4:a2:a7:1c:55:1b:d0:3a:
         14:c4:31:75
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTU4NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQyMzcwQUY5NUI3MDJF
NkE2NUM1MjQ4REE1MDFFQjU4RjQ5QUJFNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZHmPx0VpcVS0NK3jv7E6SbZ25b4mMjk/njilYpSMIosxmHbDf
lLcjF7gw1SVGVG0uLP5gg1zPgL6D/AHI8Oo9/fN0wkKWpdo6S/KrM9tUxZSuEqK8
Y4JRQTLSMc4QH+q/zazKdSqzucE8RANfOYtapVEB4mlakOJxS4PPXwBtpxmkZNy7
CS+yNfCXXY69gsEL3CNoQT7G7tD6XN+CqNHKM29hSF2Z69UwGOPksdJbMarcKrzI
BSQMITMI3ATBHkmCaLnkeIeZrgkrW9+E706dORBumNssAy8dM3sbv4IJnD6Ckdvw
+myDPxzp2nxmurYaj85QNmWuUeCHus/09ZbZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0jcK+VtwLmplxSSNpQHrWPSavlEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzBqY0stVnR3TG1wbHhTU05wUUhyV1BTYXZsRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAd6ZoAwDQYJKoZIhvcNAQELBQADggEBABN+Pn8rDS3bGd71O8CplX8G2AUM
PVYrCCj/5mc8rjjgWSLhWB0rR7ICqn6/mgL/P+c8QNYOd19TmCaGvn0BEs/eBqBZ
Yl/MbeE8e0CWW+Ny9QyO/7eeqPDCp95WUUHLyT7Ijo+QK1fa+VUnC2RFymbWap+b
1zYqYNvJIM/nts620cTecEiTMdEHldxt3tjrQjmrtl6U2aKbmkHbLXl7XApUjVAz
/S2Gx7GAhPNjAqbnpsgqTHtFAMVlzFvHEpEgIE3k7UZz50PQyJGFyIJeX3zpKChJ
VR9mPAtUKTsisQALsj1gBQMcQwzPwnzDM42F1zBjCdrkoqccVRvQOhTEMXU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:20:04 2025 by rpki-client