Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1Uns7L-ZkoLm5hgLJsaAj3ASokU.roa
File:                     1Uns7L-ZkoLm5hgLJsaAj3ASokU.roa (raw, json)
Hash identifier:          HL2Cu9kCq+5MJ0qQ2nj5LAdyDCz/xxceIMWviyu0S8o=
Subject key identifier:   D5:49:EC:EC:BF:99:92:82:E6:E6:18:0B:26:C6:80:8F:70:12:A2:45
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03C6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1Uns7L-ZkoLm5hgLJsaAj3ASokU.roa
Signing time:             Fri 01 Aug 2025 01:58:59 +0000
ROA not before:           Fri 01 Aug 2025 01:58:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        180.220.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=D549ECECBF999282E6E6180B26C6808F7012A245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:81:9f:39:1f:7c:0e:bf:7b:80:34:13:e4:
                    87:47:f2:86:24:5c:a9:f6:b8:bc:c9:04:66:55:7f:
                    7b:2f:ef:af:cd:23:8d:a9:99:e9:4f:9b:69:ae:32:
                    2b:a9:c5:fb:44:37:71:1e:37:2e:bd:82:e8:1d:76:
                    f4:18:6d:2d:88:e4:48:de:40:0e:8a:b1:76:aa:2a:
                    85:70:b4:45:7f:fb:2c:86:99:99:fa:57:77:dd:cf:
                    00:bd:f8:c7:23:56:46:2f:36:37:da:d2:d5:d2:e1:
                    48:67:f7:1b:59:56:cf:e0:12:64:fa:1c:91:c2:a4:
                    e0:9d:42:2a:5f:9f:0e:eb:50:e7:d1:e7:3f:a8:07:
                    c6:51:b1:eb:bc:85:55:68:87:a5:de:99:4b:6d:2e:
                    9c:de:82:9e:e1:3c:74:50:d6:10:ae:a9:31:0d:5c:
                    15:21:3f:37:91:8c:c9:5b:f8:ec:7a:93:3c:76:0d:
                    e2:77:35:01:0d:31:08:56:8b:16:88:b5:d3:8a:87:
                    c4:b1:24:5b:ba:fe:06:99:47:a1:75:51:bb:4b:b8:
                    d3:21:2d:3e:06:13:2c:48:a0:7b:df:26:36:0b:ae:
                    d2:2e:6d:0c:b8:98:b3:6c:42:98:bd:d9:25:4e:a7:
                    2e:c6:49:1c:58:5b:4f:b7:f9:42:0b:e1:b8:47:2f:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:EC:EC:BF:99:92:82:E6:E6:18:0B:26:C6:80:8F:70:12:A2:45
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1Uns7L-ZkoLm5hgLJsaAj3ASokU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:dc:ca:31:94:44:70:ca:d1:e8:e4:67:89:e4:d5:0f:2e:
         b3:ab:3c:fc:18:6f:3a:0c:3d:9d:87:81:6b:38:19:38:ec:b7:
         60:ba:2d:57:0c:40:e2:cf:2a:0e:3a:8a:b8:8d:d1:68:c8:46:
         97:00:4a:e9:ca:23:23:83:90:60:0f:fa:a5:b5:17:eb:09:29:
         db:19:e3:34:c1:fb:df:49:02:57:84:01:9e:99:a5:31:89:17:
         a0:2b:2e:bf:16:12:9e:bb:88:ee:4a:d4:6b:ac:b1:3f:38:62:
         cc:b5:97:02:89:9a:81:6a:30:8b:a5:9a:f9:9b:65:cd:36:4c:
         4d:9c:0e:62:90:65:7a:fa:c4:ea:14:cc:10:60:df:94:18:7c:
         80:2c:15:91:bb:f1:d5:ec:3c:2a:48:28:4d:81:62:9b:4c:a5:
         f7:a1:35:d4:31:24:de:ee:5d:88:d7:8e:bf:a1:57:30:bb:bf:
         7f:01:04:f2:4f:24:a5:cb:ef:0c:47:05:e9:19:6d:be:6e:52:
         26:4f:21:75:d7:a5:96:17:b8:17:ec:54:2a:47:9c:a3:0a:88:
         9e:92:d0:10:c7:0c:6a:f0:d6:9b:bf:73:f2:5b:20:22:7b:ee:
         26:c0:12:59:5f:1a:bf:24:23:17:0e:0e:97:36:cd:2c:fe:f1:
         a9:41:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:18:10 2025 by rpki-client