Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8yTBIHwdpjbGvVlX8NDdTTjWrTY.roa
File:                     8yTBIHwdpjbGvVlX8NDdTTjWrTY.roa (raw, json)
Hash identifier:          KGDPi0R5jUcbBJZK8V6Negi3BnnIBjHCz6AaSzOWNew=
Subject key identifier:   F3:24:C1:20:7C:1D:A6:36:C6:BD:59:57:F0:D0:DD:4D:38:D6:AD:36
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       034C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8yTBIHwdpjbGvVlX8NDdTTjWrTY.roa
Signing time:             Fri 01 Aug 2025 01:40:11 +0000
ROA not before:           Fri 01 Aug 2025 01:40:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18136
IP address blocks:        219.105.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F324C1207C1DA636C6BD5957F0D0DD4D38D6AD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:f8:bc:cd:3f:d4:18:35:27:1e:7d:da:db:
                    6b:d1:30:96:9b:b4:10:c4:ef:43:30:37:37:c6:0c:
                    20:3e:14:11:96:52:ef:32:ac:30:1b:8a:b3:2d:b5:
                    95:f1:7e:ac:31:5d:5d:9c:d3:03:30:46:d0:51:ed:
                    9e:14:d6:75:31:4f:fc:02:68:5a:37:10:a3:8d:5e:
                    6d:ff:f3:ad:69:61:a9:3e:23:5b:2d:9a:4c:aa:e3:
                    67:14:1e:1d:44:3a:18:d4:07:22:7e:fe:64:e4:fd:
                    71:e6:d6:94:e3:13:4e:85:54:13:0e:d9:54:f2:98:
                    03:03:80:59:d7:b4:53:98:6f:db:81:34:1a:d7:37:
                    d7:db:ff:56:11:22:0b:d4:f5:00:5f:1e:90:c1:fa:
                    eb:1c:31:a3:a9:a5:ea:d6:3f:35:9a:68:40:a3:d0:
                    14:1a:3c:b9:38:d8:cb:30:ab:7b:38:d0:e2:89:46:
                    53:ce:19:9f:1f:ae:b3:d7:49:39:5e:47:a8:8f:e1:
                    b4:90:2d:8f:86:fb:93:06:6f:ca:98:8e:1a:d9:d6:
                    ed:75:d1:72:fd:1c:5b:cc:4c:57:8d:fd:7d:aa:df:
                    d4:0b:28:2d:90:f0:41:a7:d3:a0:dd:19:94:c1:38:
                    5e:a5:ac:48:27:c7:db:fd:c0:3d:e6:7f:6b:80:fc:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:C1:20:7C:1D:A6:36:C6:BD:59:57:F0:D0:DD:4D:38:D6:AD:36
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8yTBIHwdpjbGvVlX8NDdTTjWrTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:21:82:16:91:2d:39:68:c8:bb:94:d2:9a:0a:e3:69:ad:
         64:02:57:2c:dc:40:9d:81:42:e3:92:7a:09:01:b3:0f:ca:af:
         79:ff:3b:aa:38:8d:65:72:d4:f3:3b:6a:99:d7:4f:69:2b:ee:
         b3:4e:7b:45:1a:0b:08:7c:2c:d6:c3:37:36:74:27:29:97:1b:
         cd:57:bc:18:19:2d:5d:35:77:8d:c7:06:37:83:27:70:20:ba:
         0b:ff:b0:38:08:e7:5c:3e:dd:1d:92:a6:79:8b:5d:e3:c3:96:
         63:dc:6e:bf:da:31:a1:81:84:4d:13:56:56:82:79:3a:62:f7:
         57:71:91:2b:af:c1:e9:83:f7:43:c3:6b:f7:aa:35:73:f1:ac:
         de:a8:4c:eb:48:03:b5:21:3d:87:a2:92:b8:0b:fc:f9:18:3a:
         88:5e:e1:f0:66:6a:e7:bd:df:93:60:9d:a9:32:4f:8f:fc:5f:
         c3:86:f6:99:38:b1:2b:70:6f:5a:f6:c4:17:a4:8a:24:5c:95:
         21:2b:0e:03:d7:a8:ce:68:31:34:3e:b7:0b:47:42:eb:0c:66:
         9d:31:97:0a:90:2c:7d:42:40:80:b7:d6:2e:76:28:51:59:5e:
         2c:8d:80:c7:8d:af:81:be:84:99:26:11:f9:51:6c:d6:c3:45:
         54:e4:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:35 2025 by rpki-client