Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/BCyU8axFchXvduGm9uGORsIhW50.roa
File:                     BCyU8axFchXvduGm9uGORsIhW50.roa (raw, json)
Hash identifier:          I/+kAoH1NyIhGVi+sJq+wzJJOd9YQK9bEizbOITSPKc=
Subject key identifier:   04:2C:94:F1:AC:45:72:15:EF:76:E1:A6:F6:E1:8E:46:C2:21:5B:9D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       032F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BCyU8axFchXvduGm9uGORsIhW50.roa
Signing time:             Fri 01 Aug 2025 01:34:55 +0000
ROA not before:           Fri 01 Aug 2025 01:34:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9378
IP address blocks:        124.195.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=042C94F1AC457215EF76E1A6F6E18E46C2215B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:96:1e:f6:99:50:9e:9a:76:7a:af:73:d0:
                    04:04:a0:ab:53:0d:d0:2f:c2:7f:66:0a:e6:4f:c0:
                    ff:2c:d9:96:44:5e:a5:ca:1d:ef:59:67:d6:c9:c8:
                    34:d2:c9:27:62:43:94:f7:6f:30:d1:d7:b4:9f:f1:
                    3a:94:41:a1:29:1c:73:9e:b7:15:7c:d4:43:35:75:
                    ad:60:4a:40:0f:36:6d:ff:b1:2c:e8:7c:c5:a9:32:
                    95:70:b4:12:ab:bf:cd:9e:59:08:59:b4:57:a8:48:
                    38:e0:c1:d5:b2:8e:f9:50:18:a0:77:e7:2d:27:bb:
                    5a:fe:f9:fb:ed:da:19:b5:34:95:de:7d:83:b9:01:
                    21:fa:12:db:39:8f:42:51:3b:70:af:9f:81:f0:80:
                    35:b4:c2:06:6a:10:39:5e:11:22:00:b5:2a:36:ea:
                    22:70:50:5e:c7:9b:d4:4b:6c:aa:94:b1:f2:91:20:
                    b3:1c:22:87:4b:17:89:24:e8:c2:a8:9f:ea:30:60:
                    a7:c4:0b:2d:2d:54:56:10:b8:a2:bb:6e:13:8b:58:
                    10:60:4f:61:b1:75:04:49:b0:03:bc:d1:6b:b4:5f:
                    7e:f1:97:02:86:6c:e9:2c:69:51:12:91:74:42:31:
                    c8:49:e7:ed:3f:67:3c:bf:96:ad:b1:ce:00:17:9a:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:94:F1:AC:45:72:15:EF:76:E1:A6:F6:E1:8E:46:C2:21:5B:9D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BCyU8axFchXvduGm9uGORsIhW50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:7f:37:49:74:28:a3:31:48:52:f0:31:1d:99:43:88:c3:
         3e:b9:63:a5:25:69:75:d0:8a:6d:50:08:c1:2f:42:30:c6:a3:
         0a:ef:cc:96:d8:64:fb:a0:20:c1:dd:4c:38:09:7a:54:73:71:
         a4:d6:a2:9b:b4:cf:9f:bf:59:7a:fd:4f:7c:b9:9e:c9:fa:fc:
         f9:7e:11:84:26:d8:4d:6e:39:a7:ae:b3:2e:28:27:98:df:3f:
         c5:56:a6:c2:f6:37:ab:89:9a:de:62:46:cc:0a:5f:66:2e:0c:
         41:da:fb:65:af:e9:64:0b:bb:1f:e9:9f:89:ea:50:e7:28:ea:
         a1:1f:75:98:50:bd:53:79:eb:e3:bb:31:21:b8:ea:8b:d0:c4:
         f7:0b:f3:2d:59:7e:58:f7:b9:3a:e4:ee:f6:01:66:54:49:a1:
         90:54:5b:2d:bf:aa:81:d3:02:81:11:3e:c2:7d:5e:20:18:44:
         63:28:4b:4f:62:29:33:a6:5d:3c:92:57:e3:92:82:5d:19:d9:
         50:b7:8b:74:5f:ee:a8:69:32:95:fd:ef:9b:a6:94:3a:a0:a0:
         79:5b:66:75:b7:69:7f:7e:a0:5e:77:10:c7:13:96:c3:d7:c6:
         51:98:36:e2:61:ff:8c:a6:ce:2b:cc:5a:b6:01:47:aa:42:b4:
         2c:6b:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:20 2025 by rpki-client