Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/72jykYiHWmyyMwgxWcHhzAKik9o.roa
File:                     72jykYiHWmyyMwgxWcHhzAKik9o.roa (raw, json)
Hash identifier:          pHFA1rlw4u2ALOj+kPU8aKe/FrSgkZ15JYaGtJwLyxw=
Subject key identifier:   EF:68:F2:91:88:87:5A:6C:B2:33:08:31:59:C1:E1:CC:02:A2:93:DA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0345
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/72jykYiHWmyyMwgxWcHhzAKik9o.roa
Signing time:             Fri 01 Aug 2025 01:40:05 +0000
ROA not before:           Fri 01 Aug 2025 01:40:05 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        27.126.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:05 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EF68F29188875A6CB233083159C1E1CC02A293DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:0c:56:1a:b5:c2:f0:a3:4a:2d:44:8e:6b:
                    99:0e:27:94:27:64:61:37:20:a2:6d:9f:73:19:71:
                    72:4d:62:6a:8b:8a:5b:05:55:39:03:8f:91:11:29:
                    7a:56:f4:16:56:d3:80:b2:6f:03:4e:d9:5a:b7:21:
                    e6:ed:3d:19:fd:fc:ec:f6:cc:0b:93:1e:de:fe:7e:
                    f2:dc:c3:eb:29:59:46:de:0f:fa:75:9b:3a:eb:6d:
                    9b:c5:55:18:91:c0:b8:fe:fd:20:39:94:f7:10:d7:
                    47:b8:89:24:f2:80:d8:a0:de:72:a2:9c:e2:7a:ed:
                    10:aa:83:1c:57:e2:ba:49:41:c1:11:02:dd:d1:e8:
                    34:32:23:8d:a7:3a:9d:a2:44:23:b7:84:fa:5a:53:
                    c0:11:f0:87:63:a5:84:f8:7d:c6:8a:a1:35:d7:89:
                    77:5e:e5:c3:8b:94:80:02:21:c8:cf:29:f2:83:4f:
                    ba:5a:ec:d7:f6:bb:e8:06:ac:85:19:35:76:90:e2:
                    4a:20:cd:21:fd:7a:e6:3c:53:13:d5:a0:12:52:4b:
                    4b:c5:33:c9:26:e0:25:10:9e:8b:a5:7c:db:8f:31:
                    9b:8a:e3:fc:a3:72:0e:56:ae:39:b9:4c:31:98:d8:
                    09:48:84:ad:bf:ca:c9:85:d1:0d:8a:5d:e7:4c:88:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:F2:91:88:87:5A:6C:B2:33:08:31:59:C1:E1:CC:02:A2:93:DA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/72jykYiHWmyyMwgxWcHhzAKik9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e0:aa:0f:cd:84:18:31:78:bd:0f:f5:fe:70:d0:47:27:4f:02:
         52:f7:50:91:ad:00:b7:7b:b8:6d:66:23:2c:56:f1:86:13:74:
         8a:7b:c5:75:b3:f5:45:73:0e:d7:0e:15:16:42:06:76:e1:eb:
         f3:a9:3c:b1:2f:aa:8b:71:6b:8b:a9:e7:f1:15:8d:56:69:a3:
         97:f8:1b:49:7f:b4:f7:f4:d5:b3:68:60:8d:26:0c:3e:20:66:
         6f:2a:9e:31:26:1e:de:de:17:36:8f:68:11:24:a8:b7:7c:1f:
         df:59:0a:d6:0e:37:cf:e1:63:3a:b4:6d:27:08:84:10:fe:e4:
         00:96:b3:75:2a:ed:5d:d0:13:3f:3c:80:1b:74:c7:d6:f1:26:
         04:97:c0:04:f1:02:34:86:b2:c9:ee:c8:29:2e:18:d1:1e:bd:
         61:cc:69:b6:17:c6:9f:a3:24:3c:30:48:ad:38:22:2e:a6:40:
         de:14:d3:50:5c:8f:47:c5:44:29:9e:ed:29:73:89:ba:33:2b:
         0a:e6:77:44:f1:51:16:23:32:ae:ef:fb:09:b3:f4:cc:b0:37:
         44:d0:8d:32:c7:91:1e:4e:96:71:97:87:ff:17:4d:c7:2d:52:
         f3:6a:33:fa:27:6f:1b:5a:1c:a4:d9:24:14:1b:8c:25:3d:48:
         a1:5d:33:77
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQwMDVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEVGNjhGMjkxODg4NzVB
NkNCMjMzMDgzMTU5QzFFMUNDMDJBMjkzREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr+gxWGrXC8KNKLUSOa5kOJ5QnZGE3IKJtn3MZcXJNYmqLilsF
VTkDj5ERKXpW9BZW04CybwNO2Vq3IebtPRn9/Oz2zAuTHt7+fvLcw+spWUbeD/p1
mzrrbZvFVRiRwLj+/SA5lPcQ10e4iSTygNig3nKinOJ67RCqgxxX4rpJQcERAt3R
6DQyI42nOp2iRCO3hPpaU8AR8IdjpYT4fcaKoTXXiXde5cOLlIACIcjPKfKDT7pa
7Nf2u+gGrIUZNXaQ4kogzSH9euY8UxPVoBJSS0vFM8km4CUQnoulfNuPMZuK4/yj
cg5Wrjm5TDGY2AlIhK2/ysmF0Q2KXedMiADPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU72jykYiHWmyyMwgxWcHhzAKik9owHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzcyanlrWWlIV215eU13Z3hXY0hoekFLaWs5by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYbfkAwDQYJKoZIhvcNAQELBQADggEBAOCqD82EGDF4vQ/1/nDQRydPAlL3
UJGtALd7uG1mIyxW8YYTdIp7xXWz9UVzDtcOFRZCBnbh6/OpPLEvqotxa4up5/EV
jVZpo5f4G0l/tPf01bNoYI0mDD4gZm8qnjEmHt7eFzaPaBEkqLd8H99ZCtYON8/h
Yzq0bScIhBD+5ACWs3Uq7V3QEz88gBt0x9bxJgSXwATxAjSGssnuyCkuGNEevWHM
abYXxp+jJDwwSK04Ii6mQN4U01Bcj0fFRCme7SlzibozKwrmd0TxURYjMq7v+wmz
9MywN0TQjTLHkR5OlnGXh/8XTcctUvNqM/onbxtaHKTZJBQbjCU9SKFdM3c=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:47 2025 by rpki-client