Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Efj3drHTHpSwss43qfedjzNUy4.roa
File:                     7Efj3drHTHpSwss43qfedjzNUy4.roa (raw, json)
Hash identifier:          uhXTvdCZ96CCjroOufD/CDckocCpTQFomCxJ+M22vt0=
Subject key identifier:   EC:47:E3:DD:DA:C7:4C:7A:52:C2:CB:38:DE:A7:DE:76:3C:CD:53:2E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Efj3drHTHpSwss43qfedjzNUy4.roa
Signing time:             Fri 01 Aug 2025 02:03:10 +0000
ROA not before:           Fri 01 Aug 2025 02:03:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        112.137.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EC47E3DDDAC74C7A52C2CB38DEA7DE763CCD532E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:af:85:1f:3b:ae:9c:aa:92:45:97:43:dc:
                    1d:d0:d3:34:23:bd:5b:e5:96:b1:a8:b8:7d:5b:09:
                    d5:2c:7e:79:53:de:1b:61:e0:f6:07:81:c2:d6:4a:
                    e5:37:a8:20:d7:c8:dd:86:38:1a:9f:8f:07:94:72:
                    ce:40:fb:f8:ff:23:a2:36:22:85:92:14:51:35:50:
                    24:22:64:04:35:85:d4:85:c0:97:33:ee:df:98:cb:
                    95:d0:0a:b5:3a:90:01:5c:f8:bc:24:a8:9b:9d:14:
                    44:10:ab:39:0d:3c:26:01:ff:30:14:41:3c:c6:94:
                    bb:af:39:5d:98:2e:a8:a5:80:ab:b5:e8:c6:e4:65:
                    42:5c:b7:18:c8:bf:37:95:18:a9:cb:1f:f1:56:eb:
                    e7:79:a1:17:15:f1:7f:1e:69:f9:fc:31:ff:8e:93:
                    c2:d6:bb:2e:0c:19:8d:9d:cf:7c:cf:4b:e1:74:6b:
                    dd:af:8e:68:ae:c2:27:99:c6:21:ba:ce:95:bc:58:
                    45:31:eb:17:94:1d:02:4a:e2:16:6c:df:ab:da:f1:
                    d8:28:2c:bf:f0:e9:25:74:30:6c:8a:c6:26:ec:46:
                    e2:ff:8b:c4:c4:58:4a:91:0a:c4:b1:55:f2:e1:9b:
                    d8:19:5d:8b:7b:d3:31:2c:d5:33:21:cc:50:9a:c6:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:E3:DD:DA:C7:4C:7A:52:C2:CB:38:DE:A7:DE:76:3C:CD:53:2E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Efj3drHTHpSwss43qfedjzNUy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:4d:8b:88:86:b6:ef:40:b4:c0:51:3c:c3:bf:39:a0:21:14:
         19:55:d7:5a:82:d7:40:47:07:78:fd:47:ec:6c:9a:fe:48:eb:
         01:57:89:84:c9:b7:6c:30:19:c2:ba:26:d7:67:ca:af:f3:e5:
         63:87:a8:e5:c1:cb:39:ca:6b:1b:af:11:54:35:1f:39:ea:47:
         4d:8c:61:b6:4b:2e:aa:6e:1f:9b:f8:e0:f9:34:b1:57:14:93:
         49:5f:2e:85:04:27:72:95:a0:88:e5:4c:01:62:12:f2:c2:d1:
         c3:fb:fe:50:94:be:a4:9c:fd:f7:d2:62:c7:00:dc:9e:dc:e4:
         eb:4d:ae:22:92:04:3a:c1:0b:0a:a6:85:24:0e:15:c1:ef:c6:
         cb:e3:7e:7b:e9:81:d4:55:bd:fc:b8:8e:1b:db:42:66:30:ab:
         92:52:87:71:be:49:04:5c:9c:1b:f7:33:08:36:a4:89:ea:66:
         c2:03:45:02:f0:72:e1:01:48:98:e1:03:b6:a4:fd:eb:44:79:
         e0:db:00:1c:5e:82:24:30:b1:31:07:21:c8:6a:90:d5:9f:d3:
         7f:ba:9f:1f:8a:31:35:19:59:2f:08:8e:33:4c:40:3a:e2:d8:
         5a:55:97:92:d5:7c:ee:e0:3c:7f:93:69:c6:e6:35:1c:01:92:
         35:29:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:29 2025 by rpki-client