Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6gFc2GynCW_LqTDmvEU862xxImk.roa
File:                     6gFc2GynCW_LqTDmvEU862xxImk.roa (raw, json)
Hash identifier:          PeKvKWL7ftbgRZAXKBk0dWUv5Gxyijj9MJnLaZ6zCpA=
Subject key identifier:   EA:01:5C:D8:6C:A7:09:6F:CB:A9:30:E6:BC:45:3C:EB:6C:71:22:69
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03DA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6gFc2GynCW_LqTDmvEU862xxImk.roa
Signing time:             Fri 01 Aug 2025 02:03:12 +0000
ROA not before:           Fri 01 Aug 2025 02:03:12 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        118.83.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:12 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EA015CD86CA7096FCBA930E6BC453CEB6C712269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:61:d7:d0:dd:ea:c4:59:27:0d:26:cd:fd:
                    50:5b:65:d1:74:d4:c8:fa:2e:53:9d:ad:6f:1e:b9:
                    18:a1:be:d5:21:af:c2:42:90:52:bc:1f:8e:00:7f:
                    c5:b4:31:7f:f7:f5:f7:06:f5:64:2e:a5:be:eb:36:
                    9e:90:23:83:87:4f:b5:16:9a:3d:e6:3c:5f:26:55:
                    1c:57:dd:6e:07:51:92:df:f5:b9:eb:66:71:fe:0d:
                    66:99:17:0d:37:53:be:35:3e:0a:db:9e:93:1f:50:
                    9b:9a:3d:10:f2:0d:ef:84:31:ca:87:1a:b5:e3:ed:
                    ed:7d:38:64:6e:f5:f6:3a:5c:0f:1e:f7:a8:a5:00:
                    ab:25:d3:e9:e8:53:44:7c:e9:0c:8e:2e:a1:79:53:
                    e7:61:da:b6:58:b2:62:30:db:28:59:e4:d9:ea:b9:
                    2d:49:8f:4b:be:0e:2e:fa:64:a2:9b:59:5c:4c:13:
                    d9:48:66:81:ab:3f:eb:f5:a9:af:81:2b:42:a0:68:
                    89:ae:03:24:4e:5b:80:79:a1:bd:82:cd:df:16:3c:
                    63:fc:13:ee:da:66:2f:d4:08:e3:b4:31:44:ce:cb:
                    8a:83:29:c4:14:8e:63:95:67:7d:8a:fa:0f:46:dc:
                    be:85:a0:9f:ca:9b:69:b3:37:46:36:a6:e6:3c:45:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:5C:D8:6C:A7:09:6F:CB:A9:30:E6:BC:45:3C:EB:6C:71:22:69
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6gFc2GynCW_LqTDmvEU862xxImk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         db:70:08:ee:d8:92:ca:1e:fc:52:02:60:68:24:9c:ab:22:c9:
         4b:ee:0e:1b:96:96:99:8a:05:fc:6a:86:c9:8e:41:81:14:a1:
         77:ca:79:af:3e:9e:ed:f2:2d:f4:c4:ca:23:4c:34:f5:27:98:
         cc:6c:3f:2d:99:b1:e5:cc:7e:f5:c9:c5:ba:1b:a0:92:a1:6a:
         e4:82:38:d7:97:c3:90:55:8e:31:b4:e5:c2:73:8f:53:47:ea:
         aa:65:98:3c:9e:9a:aa:5e:04:a7:0f:70:01:2f:c8:df:cc:ba:
         0b:d2:32:7e:78:fd:47:08:58:9b:23:b0:73:d6:e3:20:ef:eb:
         95:e5:21:72:e4:e9:eb:d2:7c:a0:2f:f0:1d:98:6c:34:96:60:
         b4:15:25:48:04:4a:d8:9a:3e:fb:f7:5d:e6:65:7c:29:90:57:
         a8:b4:3b:c9:7c:e7:ff:37:4a:47:c7:28:a7:83:3b:a8:5c:53:
         84:f6:5c:72:f2:68:65:fc:f7:c1:4c:27:c5:13:95:41:f4:07:
         29:a0:92:f7:ea:ad:0e:e7:68:e9:15:cf:69:c5:5a:d8:a4:a7:
         d0:e5:67:30:a9:1e:50:43:a6:54:97:e0:ac:46:32:22:c5:e1:
         85:d2:e9:5d:29:25:bf:63:21:c3:d4:89:b1:8c:fc:09:54:ff:
         30:78:4b:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MjAzMTJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEVBMDE1Q0Q4NkNBNzA5
NkZDQkE5MzBFNkJDNDUzQ0VCNkM3MTIyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeIGHX0N3qxFknDSbN/VBbZdF01Mj6LlOdrW8euRihvtUhr8JC
kFK8H44Af8W0MX/39fcG9WQupb7rNp6QI4OHT7UWmj3mPF8mVRxX3W4HUZLf9bnr
ZnH+DWaZFw03U741PgrbnpMfUJuaPRDyDe+EMcqHGrXj7e19OGRu9fY6XA8e96il
AKsl0+noU0R86QyOLqF5U+dh2rZYsmIw2yhZ5NnquS1Jj0u+Di76ZKKbWVxME9lI
ZoGrP+v1qa+BK0KgaImuAyROW4B5ob2Czd8WPGP8E+7aZi/UCOO0MUTOy4qDKcQU
jmOVZ32K+g9G3L6FoJ/Km2mzN0Y2puY8RennAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6gFc2GynCW/LqTDmvEU862xxImkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzZnRmMyR3luQ1dfTHFURG12RVU4NjJ4eEltay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB2UzANBgkqhkiG9w0BAQsFAAOCAQEA23AI7tiSyh78UgJgaCScqyLJS+4O
G5aWmYoF/GqGyY5BgRShd8p5rz6e7fIt9MTKI0w09SeYzGw/LZmx5cx+9cnFuhug
kqFq5II415fDkFWOMbTlwnOPU0fqqmWYPJ6aql4Epw9wAS/I38y6C9Iyfnj9RwhY
myOwc9bjIO/rleUhcuTp69J8oC/wHZhsNJZgtBUlSARK2Jo++/dd5mV8KZBXqLQ7
yXzn/zdKR8cop4M7qFxThPZccvJoZfz3wUwnxROVQfQHKaCS9+qtDudo6RXPacVa
2KSn0OVnMKkeUEOmVJfgrEYyIsXhhdLpXSklv2Mhw9SJsYz8CVT/MHhLWA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:48 2025 by rpki-client