Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/AtjuOLxLWzvo1WaROcFkQ6DDXWg.roa
File:                     AtjuOLxLWzvo1WaROcFkQ6DDXWg.roa (raw, json)
Hash identifier:          B7S6YdNEwo/XDyu68N/8XOEUr0W3+i/uOAt4wnu6RcE=
Subject key identifier:   02:D8:EE:38:BC:4B:5B:3B:E8:D5:66:91:39:C1:64:43:A0:C3:5D:68
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0384
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AtjuOLxLWzvo1WaROcFkQ6DDXWg.roa
Signing time:             Fri 01 Aug 2025 01:50:52 +0000
ROA not before:           Fri 01 Aug 2025 01:50:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        175.41.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=02D8EE38BC4B5B3BE8D5669139C16443A0C35D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:f1:cb:b5:c2:2a:36:64:4b:86:c6:47:46:
                    af:29:7e:34:31:89:30:73:c9:ba:5e:3a:3b:e4:ee:
                    38:cc:00:79:e0:89:57:d8:ef:75:61:d1:fe:f9:aa:
                    1d:33:67:e8:24:60:49:41:cc:5f:f7:d7:43:0c:77:
                    12:b6:66:27:d3:8f:58:44:d4:cb:b7:e6:bc:11:2a:
                    a2:db:f5:f3:ef:93:27:fb:68:07:fb:dd:4c:2a:48:
                    82:9f:18:78:89:14:a6:bd:96:27:d6:d8:1f:47:a8:
                    39:db:46:dd:3a:9a:18:cd:96:1b:70:a6:70:d9:12:
                    06:30:0a:f2:49:f1:e8:b3:23:70:7a:28:06:27:5c:
                    3f:13:a4:2b:49:56:3a:3b:c7:1c:e7:f1:cd:34:32:
                    f9:c0:c3:8e:28:01:31:d8:5e:8b:0b:6a:c0:66:04:
                    63:fb:1d:b9:31:8a:ed:85:65:7d:19:54:2f:09:70:
                    51:0c:11:69:0c:c8:2d:e6:be:e8:a6:4f:1c:13:38:
                    d9:48:86:22:2d:6d:b3:56:a4:d7:ee:25:8f:54:27:
                    88:2b:35:e0:de:83:42:34:7f:b1:0d:32:df:14:65:
                    53:f9:ac:69:30:c1:28:a2:af:43:5f:7b:01:99:3f:
                    6c:8a:66:87:9f:13:84:c9:3e:ec:d2:98:88:43:c0:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:EE:38:BC:4B:5B:3B:E8:D5:66:91:39:C1:64:43:A0:C3:5D:68
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/AtjuOLxLWzvo1WaROcFkQ6DDXWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d4:e9:d6:02:84:e1:2e:77:a1:17:f5:8c:4c:4c:f0:3d:de:fd:
         1a:be:3e:97:db:67:80:97:94:21:bd:3d:3c:6b:c5:27:16:e2:
         e9:2e:0f:9c:26:00:b6:50:bf:44:b4:2b:7d:b5:68:4c:f5:eb:
         b3:34:88:b9:b6:e7:05:b2:78:3d:73:67:07:76:b2:b9:fe:cf:
         2f:78:da:46:31:ca:ef:2e:c6:5a:a4:41:86:26:8c:04:c7:04:
         51:3d:3f:6d:a8:6a:fa:a7:bc:47:78:e2:94:b7:10:92:ab:ae:
         0f:66:fe:e1:a6:bc:a9:ad:01:5f:b4:d9:7e:57:5f:e7:1e:43:
         96:35:30:c9:ec:23:fc:c7:97:b3:73:ed:7a:12:8b:22:50:f0:
         8d:da:41:e4:3c:f8:f9:fc:7e:8e:ac:f0:4f:16:66:19:ba:63:
         b4:bd:1a:ac:56:f1:41:e1:11:b2:68:7c:02:25:3d:ec:7d:04:
         32:17:1d:d3:87:ef:a2:c4:3f:55:b9:90:1d:27:c2:cc:7c:6f:
         fc:d9:13:1b:aa:be:38:9c:2d:65:7e:9d:d2:06:91:af:bd:7b:
         5e:83:e2:3a:16:54:3e:f5:32:5a:0c:fc:bc:93:25:62:12:8b:
         1b:97:e6:7d:c2:11:83:ca:34:15:49:62:c5:88:91:22:c0:86:
         d1:b4:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:50 2025 by rpki-client