Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/AbNquuMfikzOsvBm3s_1SLweABY.roa
File:                     AbNquuMfikzOsvBm3s_1SLweABY.roa (raw, json)
Hash identifier:          6eWEe+LlCbmbg6wtca9MnBfmaAwriWjCoCLVPD8tC5A=
Subject key identifier:   01:B3:6A:BA:E3:1F:8A:4C:CE:B2:F0:66:DE:CF:F5:48:BC:1E:00:16
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AbNquuMfikzOsvBm3s_1SLweABY.roa
Signing time:             Fri 01 Aug 2025 02:03:11 +0000
ROA not before:           Fri 01 Aug 2025 02:03:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        118.83.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=01B36ABAE31F8A4CCEB2F066DECFF548BC1E0016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:9e:b6:69:d0:be:c4:c5:b0:66:71:1f:14:
                    e4:30:a4:14:c3:5e:04:d8:0d:9b:5c:57:31:1a:28:
                    42:09:eb:4b:cb:02:68:0e:0b:71:3f:cc:4a:80:1f:
                    ca:02:b1:97:d9:1d:1c:78:58:ea:60:33:2d:4d:6f:
                    58:de:99:92:5f:0a:e8:df:2a:4d:19:ad:7f:28:35:
                    7f:80:15:70:09:9a:a6:86:8b:ac:32:5b:00:da:9b:
                    cf:3b:f0:f0:94:fc:ca:ce:2e:d4:1a:81:7a:ba:f9:
                    c4:1e:87:16:59:dc:50:43:8b:75:da:1e:e1:7a:45:
                    41:d4:6c:7e:d6:bb:9d:56:ef:8d:ca:52:8c:66:3a:
                    68:3d:68:1f:8b:ea:2b:38:4c:a3:65:80:d3:46:15:
                    dc:77:77:c9:46:85:7a:35:3f:42:50:7c:52:ff:cf:
                    18:58:0c:ca:9a:08:75:e6:69:6e:bd:55:07:3e:ee:
                    ee:ef:e1:75:44:c5:fe:e8:be:e4:28:fa:87:d8:e3:
                    19:7a:8d:64:63:72:c2:a2:a1:e6:ae:89:d9:35:d0:
                    b4:a5:3f:da:21:b6:ca:67:e4:b4:d5:1a:0f:a4:73:
                    ae:52:a5:17:20:98:d5:06:19:62:4d:8e:93:52:5d:
                    67:cc:da:76:e2:1c:bf:7f:cc:0f:5e:95:05:dc:a5:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:6A:BA:E3:1F:8A:4C:CE:B2:F0:66:DE:CF:F5:48:BC:1E:00:16
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AbNquuMfikzOsvBm3s_1SLweABY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:f1:20:d6:bd:7f:c7:d7:3b:62:b3:50:16:b9:20:9d:3d:1d:
         d9:90:77:76:d9:da:fe:78:11:2d:ad:f3:8a:1d:c8:d4:84:ff:
         d3:9c:52:06:89:f1:46:de:41:47:27:aa:54:2c:f9:52:97:5a:
         2c:6b:d9:79:33:c3:f3:41:b8:08:72:03:26:99:0a:9d:ca:29:
         f6:5a:da:42:fa:65:33:21:70:3a:04:26:46:bc:70:99:fc:ae:
         ac:97:cd:0d:5e:f9:fe:8e:d3:dc:59:2d:a0:5a:f4:2c:8a:0f:
         76:b9:c5:cb:50:52:bd:bc:67:39:09:b4:91:23:67:16:05:64:
         18:a2:14:c9:d4:a0:ce:ad:eb:15:0c:5c:35:85:1a:46:7a:76:
         eb:fa:a0:93:69:a2:08:c9:94:db:30:e7:73:34:16:ba:98:a5:
         93:81:db:5b:8c:37:10:e8:f3:91:c1:e3:16:63:7e:a8:e5:f2:
         05:bc:d9:1d:6a:2a:2b:b9:2c:34:0b:96:82:7c:48:bf:c0:0d:
         15:60:a5:63:b3:c2:ad:eb:a7:94:bb:2b:3c:6e:5c:bd:df:c0:
         da:71:65:a2:e0:23:31:67:fa:a2:36:7a:d8:2b:ed:2a:8a:db:
         20:58:7a:17:5b:c6:16:1e:4e:34:db:f7:6e:9f:2c:c0:74:61:
         f3:1f:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:01 2025 by rpki-client