Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9eYLVV4kJjncxK9YLZvQrFQmIXs.roa
File:                     9eYLVV4kJjncxK9YLZvQrFQmIXs.roa (raw, json)
Hash identifier:          Br0XgsiuLdlT6gLb1xi5va9p9u677v0NbEMa2F8Bncc=
Subject key identifier:   F5:E6:0B:55:5E:24:26:39:DC:C4:AF:58:2D:9B:D0:AC:54:26:21:7B
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       038B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9eYLVV4kJjncxK9YLZvQrFQmIXs.roa
Signing time:             Fri 01 Aug 2025 01:50:56 +0000
ROA not before:           Fri 01 Aug 2025 01:50:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        182.50.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F5E60B555E242639DCC4AF582D9BD0AC5426217B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:a0:b2:ff:ce:dc:42:f9:24:85:34:4f:a9:
                    73:da:c6:96:23:04:cf:c4:0e:b8:8c:bb:9b:9f:8c:
                    a8:a7:b1:6f:f0:ce:7b:40:26:12:36:03:6c:be:47:
                    9b:6f:cc:67:db:f5:92:35:69:6b:2c:25:f7:df:70:
                    38:b7:2a:34:9b:ae:fa:46:d9:d6:26:35:fd:96:58:
                    5e:d2:b0:86:ef:15:11:5b:43:55:17:d8:d4:db:49:
                    59:82:67:58:9d:95:a8:c3:65:2f:32:9c:79:93:d2:
                    f8:51:47:86:62:8f:59:65:4c:96:62:ed:cd:c2:84:
                    66:03:48:79:2b:4b:c0:82:34:71:61:0f:42:e4:d2:
                    0c:28:4f:9a:07:1f:0f:a0:99:98:59:09:47:98:1f:
                    e2:d3:b7:1d:03:36:56:5c:3a:85:dc:fe:89:dd:83:
                    c5:93:6b:b2:57:40:74:90:f6:f5:ab:17:f1:b6:22:
                    2e:31:9b:9f:e1:03:b8:5e:08:34:e0:bd:1d:af:41:
                    53:f3:a6:cc:71:83:fe:22:90:0f:4d:c4:44:77:a0:
                    2c:a2:4d:61:f3:76:11:e5:40:85:a8:7f:8f:1e:f7:
                    ec:68:10:7c:43:cc:1b:1d:53:6d:25:43:f5:7b:5a:
                    5e:97:d8:02:84:be:8d:a0:d9:79:84:26:9a:42:f0:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E6:0B:55:5E:24:26:39:DC:C4:AF:58:2D:9B:D0:AC:54:26:21:7B
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9eYLVV4kJjncxK9YLZvQrFQmIXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:6d:a7:d7:21:96:51:97:45:c9:41:e9:e2:95:69:38:2f:
         50:4a:4f:75:66:62:63:35:6b:52:03:09:12:d6:6b:95:fa:2f:
         17:df:99:05:42:44:92:13:19:32:4e:3a:63:43:d2:ba:f4:a6:
         64:0b:ef:5f:bf:c3:43:5b:14:0a:f9:1b:9d:eb:13:e4:83:65:
         53:f4:60:c2:c1:d4:7d:2c:84:2f:e1:fe:93:ed:27:2d:4c:db:
         07:6d:c3:aa:db:25:ca:80:0b:3c:8c:57:e1:7e:42:5d:42:ba:
         f7:e3:73:8f:9d:50:57:53:39:4d:f5:b7:98:cb:b6:f8:b7:d0:
         d3:42:b2:4b:c0:3d:cd:d1:39:91:8a:12:c1:88:ee:8a:3b:5c:
         94:34:56:69:4b:3b:59:5b:a0:b9:75:86:04:63:35:d7:1e:07:
         a2:4d:f7:ff:a8:75:40:4d:33:18:27:3b:96:a5:4f:b5:e9:aa:
         a7:27:4d:99:5b:30:c8:75:e3:8e:1a:16:b2:35:25:f5:15:2d:
         3f:18:b7:42:6b:ac:a4:c3:e5:31:66:2c:46:fb:fb:d2:b9:1a:
         dd:fc:4a:19:71:40:1e:92:98:15:4d:c1:2d:8e:40:0f:14:b2:
         54:d3:b7:59:73:56:0f:12:ca:cd:fc:0d:49:c0:e2:25:b1:6f:
         d8:61:41:85
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTUwNTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEY1RTYwQjU1NUUyNDI2
MzlEQ0M0QUY1ODJEOUJEMEFDNTQyNjIxN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClCKCy/87cQvkkhTRPqXPaxpYjBM/EDriMu5ufjKinsW/wzntA
JhI2A2y+R5tvzGfb9ZI1aWssJfffcDi3KjSbrvpG2dYmNf2WWF7SsIbvFRFbQ1UX
2NTbSVmCZ1idlajDZS8ynHmT0vhRR4Zij1llTJZi7c3ChGYDSHkrS8CCNHFhD0Lk
0gwoT5oHHw+gmZhZCUeYH+LTtx0DNlZcOoXc/ondg8WTa7JXQHSQ9vWrF/G2Ii4x
m5/hA7heCDTgvR2vQVPzpsxxg/4ikA9NxER3oCyiTWHzdhHlQIWof48e9+xoEHxD
zBsdU20lQ/V7Wl6X2AKEvo2g2XmEJppC8OQxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9eYLVV4kJjncxK9YLZvQrFQmIXswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzllWUxWVjRrSmpuY3hLOVlMWnZRckZRbUlYcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW2MsAwDQYJKoZIhvcNAQELBQADggEBAJa5bafXIZZRl0XJQenilWk4L1BK
T3VmYmM1a1IDCRLWa5X6LxffmQVCRJITGTJOOmND0rr0pmQL71+/w0NbFAr5G53r
E+SDZVP0YMLB1H0shC/h/pPtJy1M2wdtw6rbJcqACzyMV+F+Ql1Cuvfjc4+dUFdT
OU31t5jLtvi30NNCskvAPc3ROZGKEsGI7oo7XJQ0VmlLO1lboLl1hgRjNdceB6JN
9/+odUBNMxgnO5alT7XpqqcnTZlbMMh1444aFrI1JfUVLT8Yt0JrrKTD5TFmLEb7
+9K5Gt38ShlxQB6SmBVNwS2OQA8UslTTt1lzVg8Sys38DUnA4iWxb9hhQYU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:52 2025 by rpki-client