Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6wugG-cH7hhF_K52GQqlfnBa440.roa
File:                     6wugG-cH7hhF_K52GQqlfnBa440.roa (raw, json)
Hash identifier:          U2zr9YT26r+oa85BL0jnzyn8OxktA8Eq8N90pMepCJE=
Subject key identifier:   EB:0B:A0:1B:E7:07:EE:18:45:FC:AE:76:19:0A:A5:7E:70:5A:E3:8D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       036E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6wugG-cH7hhF_K52GQqlfnBa440.roa
Signing time:             Fri 01 Aug 2025 01:47:12 +0000
ROA not before:           Fri 01 Aug 2025 01:47:12 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        110.173.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:12 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EB0BA01BE707EE1845FCAE76190AA57E705AE38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:48:45:ff:bc:8d:44:01:bb:77:47:03:cb:
                    7d:fe:ed:40:66:17:eb:bd:7f:89:55:9a:26:c6:ce:
                    00:fb:a0:fa:4b:41:51:e3:a5:c9:bc:3e:73:d8:20:
                    27:67:80:c3:d4:4e:66:75:52:2b:bd:a8:9b:bf:e1:
                    7a:aa:47:08:24:39:09:e5:53:5c:78:8d:b3:e8:1e:
                    c7:0b:f4:95:21:0b:f3:39:7d:1a:6a:7e:de:a6:41:
                    98:9c:13:43:6f:eb:95:f1:2f:58:47:59:f5:b8:b1:
                    76:47:45:ba:65:70:1c:07:c7:5b:4e:10:27:cd:e4:
                    dd:cc:6f:b6:98:8c:f0:b4:0f:74:dc:57:0d:be:da:
                    28:29:bd:d2:bf:35:8d:fd:6c:4e:35:13:ee:67:87:
                    c3:90:b7:ac:50:bc:4b:3b:33:75:a8:4d:62:fa:b6:
                    33:16:fd:b5:54:93:ba:02:84:95:0c:6a:d2:91:69:
                    57:0c:f5:40:9a:ed:76:eb:ef:bb:38:d9:77:0d:88:
                    d0:f7:9a:60:15:8d:ec:bb:5f:58:86:b5:a7:a5:00:
                    cc:4b:aa:10:95:d4:19:f7:c2:5b:48:b8:52:36:16:
                    68:f9:b2:1e:8e:0b:29:5f:29:1f:ae:90:84:09:91:
                    7b:05:6f:c9:58:62:24:af:76:a6:cc:95:a8:ef:27:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0B:A0:1B:E7:07:EE:18:45:FC:AE:76:19:0A:A5:7E:70:5A:E3:8D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6wugG-cH7hhF_K52GQqlfnBa440.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:5e:59:7e:5f:8d:62:0f:21:cd:c0:47:a3:73:c4:32:b4:
         0c:15:70:a9:33:0e:56:d0:f8:ce:2e:91:d9:81:3a:a0:92:66:
         b6:3c:0f:11:08:c4:bf:46:d6:99:97:d2:cb:77:61:b7:52:b2:
         58:70:b3:1a:b1:c2:bf:9c:11:8c:ee:e5:08:49:35:1d:39:f7:
         0a:5e:aa:af:29:61:de:3b:b3:d7:e6:fb:ca:36:19:95:72:6a:
         b7:32:5c:22:ce:5f:b1:45:e9:bc:18:b3:77:fd:f6:42:ea:25:
         89:1b:b8:35:ec:3a:b1:a9:c7:50:7d:0f:b1:db:45:18:e5:c5:
         8d:7e:3e:1a:8e:ff:28:6a:ac:ff:50:a8:27:29:28:0d:de:9e:
         23:16:11:eb:bf:a3:85:ba:0f:44:15:9e:5e:c6:51:89:92:c8:
         a0:c6:a4:40:17:ef:1b:0c:e2:73:55:7b:0c:26:88:84:a1:7b:
         97:bc:47:8a:47:c2:ae:b7:44:4c:42:94:9a:cf:9f:93:1d:e9:
         33:f4:0e:5e:35:21:a1:90:6a:7f:62:42:a8:4f:02:b2:d8:9a:
         43:60:aa:d0:47:43:d9:6c:a4:81:ae:23:c8:6e:ed:54:b5:44:
         13:6e:cf:36:43:99:33:58:cf:c4:75:68:8d:e7:d0:bd:e1:38:
         61:7c:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:19 2025 by rpki-client