Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Eal4Zoc8yLQygRaD5LCVT8CV6g.roa
File:                     6Eal4Zoc8yLQygRaD5LCVT8CV6g.roa (raw, json)
Hash identifier:          8Hw7tJhqGCj/c6K0xZDCId85/ebkyxLvT0UCb6J7kVw=
Subject key identifier:   E8:46:A5:E1:9A:1C:F3:22:D0:CA:04:5A:0F:92:C2:55:3F:02:57:A8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03CB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Eal4Zoc8yLQygRaD5LCVT8CV6g.roa
Signing time:             Fri 01 Aug 2025 01:59:01 +0000
ROA not before:           Fri 01 Aug 2025 01:59:01 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        218.220.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:59:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E846A5E19A1CF322D0CA045A0F92C2553F0257A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:8e:12:6e:d6:45:98:12:64:09:64:14:72:
                    56:2c:5a:44:22:7a:69:b5:15:5e:0b:4e:ce:05:19:
                    6a:78:17:25:1e:68:1d:57:55:46:74:67:d1:b4:e7:
                    d9:73:b1:52:02:d9:73:85:9e:ed:de:70:53:e4:34:
                    1c:2d:e4:61:44:e0:1a:8c:95:ff:d8:e7:b6:1f:59:
                    c7:e4:e9:0c:e8:b8:23:ac:6c:6c:e4:29:4f:db:af:
                    79:e1:26:b0:cb:2f:50:84:57:c9:f3:4f:c3:aa:11:
                    e2:8b:83:27:8b:8a:47:28:e8:ea:4c:51:d8:54:10:
                    35:12:6e:98:03:1e:10:4e:93:0c:bd:35:b9:d6:00:
                    28:79:1f:a7:69:8c:7a:6f:65:7a:52:0e:9e:47:5c:
                    71:26:c5:84:4a:98:d3:b0:c9:0e:41:21:6c:a7:52:
                    63:11:46:f3:a6:80:fe:4c:f5:41:24:40:0c:1c:92:
                    0f:db:00:50:2a:53:1b:eb:c0:83:f3:e8:a8:a0:9f:
                    10:78:fb:4f:8a:69:e4:be:e3:2f:99:75:4a:59:6c:
                    25:88:ad:7f:89:b1:21:16:b8:9c:eb:c4:54:81:58:
                    22:22:87:3e:71:ed:ad:cb:87:72:4c:69:04:28:57:
                    29:fd:d2:81:b5:a7:10:9e:d0:69:40:0c:88:2b:77:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:A5:E1:9A:1C:F3:22:D0:CA:04:5A:0F:92:C2:55:3F:02:57:A8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6Eal4Zoc8yLQygRaD5LCVT8CV6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.220.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:bc:52:29:d5:26:96:40:b5:a0:13:3e:29:b8:47:13:e8:
         5c:70:11:cb:94:49:4c:5e:e4:cb:51:fd:6c:b7:32:fa:76:7d:
         c8:c4:c1:e4:33:0e:cd:e9:f1:96:f9:35:af:64:f9:6d:70:eb:
         aa:e6:2f:68:91:bc:63:ac:e2:91:ea:fd:b4:77:10:b2:ad:50:
         15:83:6b:fd:aa:32:20:c1:eb:39:56:bf:d7:cf:c1:c8:e4:2d:
         ce:25:99:30:4d:f9:b4:03:61:bf:91:ce:f2:1f:ff:eb:08:86:
         d5:9d:a0:11:10:09:89:35:ce:a7:8f:d6:01:19:8c:dd:3e:5c:
         cd:e5:fd:f8:90:68:ef:8a:e6:52:20:7a:dd:ad:6a:24:c3:da:
         db:14:f3:5a:26:53:3b:e9:a4:97:ab:61:2a:71:85:4a:45:a1:
         5a:fa:9a:83:c5:b4:ce:69:d5:fb:d4:92:e5:ae:b5:c8:a3:80:
         fc:5f:24:b4:d4:aa:22:a4:db:1a:1a:23:8b:26:15:1c:d6:68:
         85:d9:b3:84:3c:74:00:c3:1c:3d:f2:b7:01:79:79:5e:f1:e9:
         a9:43:39:72:1d:c9:41:1b:4e:cc:94:70:b0:bf:e7:1b:7c:6c:
         c2:00:e1:88:84:cf:12:2c:ba:d2:ee:96:94:b6:32:3e:c9:ad:
         82:88:58:71
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTU5MDFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEU4NDZBNUUxOUExQ0Yz
MjJEMENBMDQ1QTBGOTJDMjU1M0YwMjU3QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg6o4SbtZFmBJkCWQUclYsWkQiemm1FV4LTs4FGWp4FyUeaB1X
VUZ0Z9G059lzsVIC2XOFnu3ecFPkNBwt5GFE4BqMlf/Y57YfWcfk6QzouCOsbGzk
KU/br3nhJrDLL1CEV8nzT8OqEeKLgyeLikco6OpMUdhUEDUSbpgDHhBOkwy9NbnW
ACh5H6dpjHpvZXpSDp5HXHEmxYRKmNOwyQ5BIWynUmMRRvOmgP5M9UEkQAwckg/b
AFAqUxvrwIPz6KignxB4+0+KaeS+4y+ZdUpZbCWIrX+JsSEWuJzrxFSBWCIihz5x
7a3Lh3JMaQQoVyn90oG1pxCe0GlADIgrd1ozAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6Eal4Zoc8yLQygRaD5LCVT8CV6gwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzZFYWw0Wm9jOHlMUXlnUmFENUxDVlQ4Q1Y2Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDa3DANBgkqhkiG9w0BAQsFAAOCAQEAkKq8UinVJpZAtaATPim4RxPoXHAR
y5RJTF7ky1H9bLcy+nZ9yMTB5DMOzenxlvk1r2T5bXDrquYvaJG8Y6ziker9tHcQ
sq1QFYNr/aoyIMHrOVa/18/ByOQtziWZME35tANhv5HO8h//6wiG1Z2gERAJiTXO
p4/WARmM3T5czeX9+JBo74rmUiB63a1qJMPa2xTzWiZTO+mkl6thKnGFSkWhWvqa
g8W0zmnV+9SS5a61yKOA/F8ktNSqIqTbGhojiyYVHNZohdmzhDx0AMMcPfK3AXl5
XvHpqUM5ch3JQRtOzJRwsL/nG3xswgDhiITPEiy60u6WlLYyPsmtgohYcQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:22 2025 by rpki-client