Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa
File:                     DmOrUU3wZVupo1Wcn1MQtugdqn4.roa (raw, json)
Hash identifier:          6IG+LadCHDm0+lffeS6esPq0PI+5MSTQPexSUb8hcOI=
Subject key identifier:   0E:63:AB:51:4D:F0:65:5B:A9:A3:55:9C:9F:53:10:B6:E8:1D:AA:7E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0336
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa
Signing time:             Fri 01 Aug 2025 01:35:00 +0000
ROA not before:           Fri 01 Aug 2025 01:35:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        202.179.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:35:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=0E63AB514DF0655BA9A3559C9F5310B6E81DAA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:89:45:3e:f9:e6:ca:94:0f:91:fe:6d:f5:
                    b5:c3:c0:d3:70:3b:7a:1e:16:17:d8:80:a2:20:5d:
                    75:12:c6:6a:36:78:89:df:ab:cb:00:b7:8d:94:3b:
                    9b:50:34:39:c7:4d:8d:aa:c8:ee:11:56:5f:ce:6b:
                    a4:5c:89:b0:d2:c2:e6:d8:87:e1:9c:ee:39:bd:d0:
                    51:85:01:1c:02:dd:5a:4b:46:dd:52:14:31:a6:77:
                    b8:77:4a:68:c9:65:d6:93:01:30:12:1e:79:0e:05:
                    dc:f9:0a:b0:25:e1:0f:fa:cb:82:8d:ca:75:37:02:
                    fe:5c:a0:4d:ce:99:37:4a:2a:f1:65:7d:15:82:6a:
                    9a:51:5a:da:d8:fb:7d:69:32:b6:e5:bb:32:67:c6:
                    09:bb:1f:8a:f9:fe:58:5e:62:4d:c7:d2:8d:c5:36:
                    6b:cf:d0:37:91:ef:5d:cd:22:03:59:e1:97:a3:ee:
                    4e:19:ef:ba:2c:82:96:bb:48:ab:ac:1e:b2:d5:16:
                    6f:28:8a:65:1a:4c:63:e8:d2:0d:66:ce:8c:06:6e:
                    b6:97:83:3a:c9:e8:4c:72:0a:ee:fb:fb:0c:77:99:
                    40:9a:f3:a9:d1:2b:ec:08:38:67:a3:33:3a:08:6a:
                    9a:59:6f:38:0e:8e:d0:8c:76:85:de:81:f6:75:08:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:AB:51:4D:F0:65:5B:A9:A3:55:9C:9F:53:10:B6:E8:1D:AA:7E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:99:18:e2:0d:93:39:6a:61:e6:da:48:3f:f0:0e:bd:f6:
         00:52:99:ff:68:85:79:b7:e6:22:04:e7:8f:78:4a:c4:ae:a1:
         cb:04:b5:66:2e:d7:05:fb:ec:0c:4a:0b:70:c9:70:9e:2d:53:
         2b:96:f8:59:d1:45:a4:d8:41:af:21:90:33:0a:80:57:71:d1:
         67:5d:51:9d:65:0d:98:95:55:3e:7d:47:20:d7:05:a2:25:6b:
         18:8c:4f:e5:1b:b4:1c:f4:c1:56:b3:4d:26:51:9c:e2:61:45:
         4f:11:5f:61:0e:17:fd:43:b4:f2:0a:a2:80:a3:9c:3a:fe:ad:
         02:aa:9b:f9:70:4c:2f:60:f9:42:21:a4:1e:e4:06:66:ef:d4:
         cb:d8:05:74:1c:11:da:31:a6:a1:22:2f:2a:a0:b6:39:08:02:
         97:62:dc:3c:a7:24:10:ca:2a:2b:7e:b5:0f:46:0a:4c:f2:3f:
         a0:8e:8c:32:97:ad:78:d1:7b:a3:d2:90:ae:e8:3f:ab:a5:61:
         e3:16:d4:3d:19:13:c3:de:82:02:1c:64:a9:fb:08:da:1f:86:
         9b:9c:47:d0:c5:71:cc:82:f9:76:38:6f:b3:37:d8:e4:5d:95:
         79:54:88:ab:02:04:62:f2:d8:80:2f:0f:a5:f2:93:df:ee:38:
         4e:ea:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:04 2025 by rpki-client