Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
File:                     HGj1hzrouxa8v1T8nRyqr3FXFtM.roa (raw, json)
Hash identifier:          nprRW6F45ZidPOgQzF55ndVlw6s9lcszqSeCGJldyS4=
Subject key identifier:   1C:68:F5:87:3A:E8:BB:16:BC:BF:54:FC:9D:1C:AA:AF:71:57:16:D3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       039F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
Signing time:             Fri 01 Aug 2025 01:54:53 +0000
ROA not before:           Fri 01 Aug 2025 01:54:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        218.219.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1C68F5873AE8BB16BCBF54FC9D1CAAAF715716D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:9b:f9:29:a6:69:9a:02:3a:49:02:11:46:
                    49:1e:77:1d:3a:11:5a:e1:86:37:4d:4a:e7:e8:3f:
                    a9:c2:2f:29:f4:a6:00:5d:76:be:59:6c:e7:ab:c6:
                    3d:1c:59:22:f9:c5:49:4b:8b:db:d5:b6:7d:09:9b:
                    b4:6d:aa:01:44:59:9b:34:fc:1f:f6:a8:8f:7a:43:
                    63:e1:50:e8:45:f7:07:f8:0d:40:3a:d8:c5:48:69:
                    37:0d:d9:8b:0d:cb:0a:f1:3c:cb:a3:d5:d1:df:34:
                    db:1b:47:91:9d:76:3a:95:4c:02:64:d9:ad:d1:c5:
                    83:a8:c6:65:d0:08:46:df:f2:a4:51:cb:74:47:77:
                    68:ca:ad:7d:cc:d3:48:3b:7e:4b:dc:00:40:0f:2b:
                    4b:18:3b:f6:c3:9f:b2:a7:ca:70:fc:29:2a:fa:96:
                    b7:48:2d:7f:84:c3:cd:ea:88:b6:d1:21:1a:0d:06:
                    0e:bb:de:a0:c0:61:48:bb:b8:d8:02:0e:06:45:8e:
                    c7:1d:4b:b7:0f:59:55:79:cb:3a:ca:e9:3b:dc:3f:
                    c5:35:a6:e3:0a:d3:b9:10:aa:1a:39:4f:41:f4:39:
                    9f:89:a7:f1:b1:9e:02:0c:12:ac:5e:32:1d:e1:c8:
                    1e:60:34:37:63:f8:63:01:f5:3b:61:8c:df:5f:d9:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:F5:87:3A:E8:BB:16:BC:BF:54:FC:9D:1C:AA:AF:71:57:16:D3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HGj1hzrouxa8v1T8nRyqr3FXFtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:4e:28:39:85:fd:5e:50:e8:f8:4f:cd:a5:25:c5:b5:e6:57:
         28:1f:1c:0b:bf:f1:93:aa:f3:ed:5a:92:19:7d:5f:b4:a5:d1:
         de:f6:26:ec:2b:6c:4d:b1:c0:97:57:10:b8:ce:c5:7d:14:17:
         7f:69:88:10:5c:a7:e4:87:b8:9f:14:f8:7b:23:66:1c:c3:7f:
         cc:49:73:d9:1e:31:f5:06:ba:13:e4:1f:ee:3b:f7:84:1e:85:
         8a:17:02:05:2d:6e:f3:ad:96:2b:e9:32:c6:98:43:7c:1c:91:
         d7:c0:5a:46:ce:a2:97:73:29:9a:ae:5b:90:b4:6e:44:de:3c:
         64:41:ff:e4:e0:99:d9:cc:00:85:4b:cb:fe:d5:35:fd:3c:db:
         50:c1:d9:e2:e1:c8:af:36:87:de:73:b6:d5:9d:26:4a:e1:1d:
         8a:36:95:47:80:db:16:a3:b3:e0:31:cb:85:5e:22:8c:f1:1f:
         61:fb:99:73:67:32:69:e5:f0:2e:d6:5b:44:3c:57:6d:12:ed:
         cc:34:63:e1:44:0d:ab:38:fc:80:08:04:66:a7:0f:d7:0a:b5:
         27:49:e3:70:e3:8d:36:d1:7b:7f:9e:04:fc:37:b5:bf:be:c5:
         e6:5e:65:93:92:60:c3:db:13:14:08:f9:a6:4c:51:97:9a:5c:
         1e:1a:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:21 2025 by rpki-client