Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6n0aY89taX0z4nA2T7ljkrgPsdI.roa
File:                     6n0aY89taX0z4nA2T7ljkrgPsdI.roa (raw, json)
Hash identifier:          oge3D8ogq5agIVuM0+j3lu+v9QDJcB7XA9N0wHiw0ik=
Subject key identifier:   EA:7D:1A:63:CF:6D:69:7D:33:E2:70:36:4F:B9:63:92:B8:0F:B1:D2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       039C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6n0aY89taX0z4nA2T7ljkrgPsdI.roa
Signing time:             Fri 01 Aug 2025 01:54:52 +0000
ROA not before:           Fri 01 Aug 2025 01:54:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        210.172.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EA7D1A63CF6D697D33E270364FB96392B80FB1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:2a:7d:d9:b0:89:46:8a:09:89:cd:23:38:
                    38:0e:aa:be:ef:49:d6:26:96:ae:0b:1d:cf:fd:15:
                    ff:ff:43:6f:a7:03:3b:fe:08:22:0b:f8:9e:a1:14:
                    4a:d2:5a:65:63:b8:e2:05:43:d9:de:fa:d2:81:45:
                    54:db:d2:3e:54:53:a7:03:cf:37:1a:93:23:24:ad:
                    8a:05:c0:f1:ee:12:f2:a0:5d:03:a8:84:48:b4:28:
                    f9:17:27:4c:b1:cb:dd:7b:9d:a7:14:05:0f:34:ff:
                    a7:94:31:3c:e7:7e:4a:c4:16:c1:23:c3:75:e6:45:
                    dc:aa:08:02:46:a0:4d:c4:5e:fe:91:c1:86:04:22:
                    83:ed:b8:d1:6f:a0:d7:10:c7:6a:3c:81:71:53:e4:
                    20:ac:3d:35:d5:e0:28:df:3a:b2:4d:9c:6f:1f:52:
                    8a:82:87:0d:1b:d8:7b:cc:b3:f5:17:ec:ea:c6:ec:
                    7b:94:f1:d9:54:2b:cc:fd:95:b1:f8:85:f8:58:63:
                    d1:a3:94:a8:64:cb:36:a0:7a:7c:99:bc:7e:43:34:
                    73:97:3f:70:ce:b8:44:56:8d:9f:9b:c5:1b:f0:a5:
                    6a:63:91:44:35:3a:c7:b2:cb:7a:ce:f4:51:d9:bf:
                    72:da:7a:7f:c9:c1:ac:20:c4:74:24:32:04:be:20:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7D:1A:63:CF:6D:69:7D:33:E2:70:36:4F:B9:63:92:B8:0F:B1:D2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6n0aY89taX0z4nA2T7ljkrgPsdI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:94:5c:f2:82:8f:7a:84:5d:f0:1c:70:a4:59:6c:13:a4:
         75:ed:fa:87:c2:1d:5a:b2:ce:87:42:56:34:8e:46:07:9e:e7:
         cd:a5:1f:92:63:89:6a:0b:7e:f4:58:c6:c3:ba:23:3b:18:18:
         59:ad:5c:62:5c:21:f5:30:ab:c5:2d:cb:77:f8:a9:52:1c:95:
         72:5a:5a:b1:7b:2a:79:e8:bc:71:94:a9:49:f1:45:86:58:1d:
         9e:a2:b1:4d:3b:62:ed:64:a4:a8:1f:0a:46:9b:64:7a:ef:bb:
         23:89:b2:3f:56:10:d9:8b:04:cb:e3:b4:a3:ce:f5:0c:27:b1:
         7e:c4:b3:01:1e:1c:45:36:00:91:a9:52:4d:6e:05:87:1a:05:
         4f:7f:5b:fc:9b:38:42:49:1d:b9:6d:c0:c8:99:68:6b:04:3c:
         a3:ae:0c:9b:88:4e:16:c5:64:4d:c3:f8:59:cd:f7:32:12:bc:
         f5:d1:0e:81:11:29:30:79:a3:49:b7:ee:d5:54:cc:28:25:cf:
         b0:65:34:c5:aa:64:80:85:59:ab:8f:99:a4:32:03:20:fb:8a:
         58:bc:ac:88:0d:ea:1b:d7:52:13:0a:01:ea:c6:ad:ef:92:b2:
         b3:41:21:d6:28:59:b6:0c:c6:ea:1d:0c:62:b6:8f:7d:16:22:
         6f:b9:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:23:52 2025 by rpki-client