Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EvjEv_aMTwmtzVWr1T4zpmKWNvY.roa
File:                     EvjEv_aMTwmtzVWr1T4zpmKWNvY.roa (raw, json)
Hash identifier:          fg+pEmQtHOYABbEAkDH/tzQ50J6oYIakn20iUSwq2x0=
Subject key identifier:   12:F8:C4:BF:F6:8C:4F:09:AD:CD:55:AB:D5:3E:33:A6:62:96:36:F6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03A6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EvjEv_aMTwmtzVWr1T4zpmKWNvY.roa
Signing time:             Fri 01 Aug 2025 01:54:57 +0000
ROA not before:           Fri 01 Aug 2025 01:54:57 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        219.117.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:57 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=12F8C4BFF68C4F09ADCD55ABD53E33A6629636F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:d4:73:4d:29:a3:09:7d:bc:36:75:65:3a:
                    68:d0:b0:fb:57:7b:ca:84:22:4a:0f:0a:a5:37:8d:
                    a4:89:fe:97:68:bf:d3:34:be:52:9a:4b:8d:30:99:
                    43:69:b6:a4:f5:aa:94:f9:24:4b:ad:f4:54:05:15:
                    94:e8:d5:65:0a:85:f2:7b:ff:c9:81:2b:85:21:6b:
                    6b:02:9d:cd:57:8a:a5:b5:14:db:7c:61:9a:89:f3:
                    81:23:27:fc:c4:37:53:22:05:ff:0f:9a:4d:f1:1a:
                    36:c4:9b:2b:92:21:3c:e9:2c:f6:72:9e:3e:08:cc:
                    29:aa:2f:36:2b:ac:60:ff:7a:23:14:07:4c:2c:03:
                    e7:59:d4:b8:44:47:53:42:28:ad:cf:6f:88:27:34:
                    03:cc:93:9c:43:c6:13:2b:90:b5:49:58:0e:17:70:
                    5b:58:24:72:f4:3e:3d:57:71:28:49:b0:c8:5b:98:
                    5a:30:4e:9e:31:4e:14:43:65:15:89:a4:5b:ae:e3:
                    3e:01:0e:76:ca:15:9e:6b:29:45:ef:5c:85:34:ae:
                    19:a3:fb:04:5a:9c:6a:ff:5c:8d:c1:e0:b5:a2:3a:
                    42:4e:b5:83:1f:80:85:ab:28:d8:aa:a6:29:05:a0:
                    de:96:2f:da:31:d3:e5:c0:89:7b:f9:ac:13:f5:be:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F8:C4:BF:F6:8C:4F:09:AD:CD:55:AB:D5:3E:33:A6:62:96:36:F6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EvjEv_aMTwmtzVWr1T4zpmKWNvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:c9:52:4d:54:7e:7b:bf:00:50:43:8a:5d:ff:de:da:fa:
         8d:2d:d7:87:b3:06:71:eb:c2:45:fd:a5:3e:14:3e:90:a6:a6:
         a6:9b:78:34:46:70:aa:76:0b:2d:8e:14:7b:ac:2f:ac:11:48:
         25:d8:b4:b4:45:5f:3c:be:4f:c0:26:89:55:60:c8:5a:16:25:
         d0:46:be:56:29:1d:63:8d:40:2c:21:fc:97:25:06:72:5a:fa:
         ec:16:49:5d:02:6e:32:35:5b:99:ac:87:21:fc:b9:c8:cc:52:
         49:fd:1b:86:e8:8e:ec:74:25:3b:a9:97:af:68:d9:5d:fa:3c:
         53:63:48:5f:97:b0:78:5f:d1:5e:04:62:9f:38:92:1d:5c:09:
         53:83:8b:97:49:08:dc:72:90:3c:31:01:1f:e9:67:30:77:97:
         4c:2c:a3:a3:38:ed:dc:ce:f4:92:50:11:9b:c4:44:ae:ba:b8:
         05:52:09:ad:76:09:5a:cb:be:81:81:7d:a7:bb:e9:a9:9a:f2:
         15:be:5a:a7:04:90:5f:17:ae:2d:64:38:bc:bc:04:e2:b3:5b:
         8d:7b:b1:91:44:fa:e4:7d:e0:97:15:2f:07:6c:84:68:fe:d6:
         2f:18:a0:dd:de:5d:c9:de:1d:46:8e:1f:89:b9:da:cd:ba:65:
         83:71:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:16 2025 by rpki-client