Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EJMk6wu8y3RMz3Na4ZWZUHBXdV0.roa
File:                     EJMk6wu8y3RMz3Na4ZWZUHBXdV0.roa (raw, json)
Hash identifier:          cB802pvfWt1R480OKb0UFk/549N+fP0ocUbnT2oOkjs=
Subject key identifier:   10:93:24:EB:0B:BC:CB:74:4C:CF:73:5A:E1:95:99:50:70:57:75:5D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03DF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EJMk6wu8y3RMz3Na4ZWZUHBXdV0.roa
Signing time:             Fri 01 Aug 2025 02:03:14 +0000
ROA not before:           Fri 01 Aug 2025 02:03:14 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        221.132.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:14 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=109324EB0BBCCB744CCF735AE19599507057755D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:55:51:f7:7b:ba:02:81:5f:c7:8b:30:fb:
                    fa:50:a7:a3:70:34:0a:ae:0e:0d:11:d4:b5:28:0e:
                    0a:03:ff:41:1d:e0:81:20:f1:37:34:5c:cf:34:2b:
                    8b:a6:35:d1:73:f6:6c:4a:d8:83:e5:4f:3a:03:9a:
                    0a:7e:ee:e3:70:84:65:1c:cc:64:bf:b5:2a:05:03:
                    e0:04:79:6f:e5:9b:f7:83:c8:b0:53:82:df:ea:6a:
                    bf:12:66:a7:28:2e:73:05:3e:c7:a7:95:65:9c:f0:
                    23:32:08:21:a2:ea:0b:2a:17:2b:b5:b0:b0:28:a0:
                    8e:d2:88:4a:3c:79:3d:43:d4:c4:47:64:ad:5b:fa:
                    0a:4e:40:af:08:be:55:cb:d4:a5:29:9c:a3:f4:e0:
                    2f:e7:c7:46:df:3a:4c:42:e1:2f:75:94:2b:15:52:
                    8c:45:f8:4b:2a:fc:5e:8f:32:8a:01:1c:80:70:a6:
                    c7:ba:cf:72:5f:94:f0:a9:db:58:35:20:3e:d3:b3:
                    e4:81:15:8f:ef:49:59:88:3c:8e:17:d6:51:50:fd:
                    5e:67:f9:ea:d2:81:b4:15:cd:ae:c8:70:2d:dd:64:
                    f9:74:f0:c4:e4:a7:ef:af:a6:2b:f4:a6:c3:51:bc:
                    9d:36:cb:29:e2:58:d9:8a:5a:f1:d3:21:24:e2:66:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:24:EB:0B:BC:CB:74:4C:CF:73:5A:E1:95:99:50:70:57:75:5D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EJMk6wu8y3RMz3Na4ZWZUHBXdV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:5e:a0:06:f3:b1:40:f9:57:e5:de:c9:53:c2:f9:46:9f:55:
         7b:f5:62:92:c1:6d:6e:ac:e1:55:de:8b:d4:c4:9a:ea:d7:37:
         05:91:5a:bc:dc:55:ed:4d:d1:82:b9:38:97:74:73:55:0c:c6:
         a5:fb:c3:1a:e9:e9:68:1e:c1:41:29:36:0d:65:94:37:60:5a:
         e2:01:01:ab:32:7c:08:22:bb:05:be:3c:3f:28:20:79:1d:c0:
         60:2a:55:1e:b7:a9:3b:b7:82:71:09:9c:9a:ba:3b:5e:21:de:
         16:46:ca:28:fc:c4:b6:eb:bc:8b:e8:81:be:c2:1e:d8:56:c6:
         a4:04:e1:f1:4c:eb:70:7f:d1:ed:99:cd:56:c7:89:90:62:e9:
         94:86:50:97:14:31:45:a4:ca:26:3c:df:8e:62:2e:d4:77:65:
         9d:82:42:db:30:a2:67:b0:e5:dd:26:b5:9f:42:d4:29:ea:4e:
         6a:36:82:13:4c:6e:b5:31:63:ba:ec:2b:b8:1e:63:7a:69:e2:
         1c:76:31:fa:01:b5:21:f2:3d:52:44:b2:63:1b:4b:4d:67:e1:
         29:2d:0c:ff:25:b7:6c:a1:bd:ad:97:df:5b:fa:4c:18:e0:ff:
         03:30:5b:1d:c9:ff:dc:08:40:f6:ce:bf:db:7f:b9:70:78:93:
         6a:ab:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:39 2025 by rpki-client