Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
File:                     I6b37zElZFLNEdFXHNXID5KMBMU.roa (raw, json)
Hash identifier:          a0Z/+WSGVD1EuHWt63tfsSO2gJbn2gnBVOO0bxZ07kk=
Subject key identifier:   23:A6:F7:EF:31:25:64:52:CD:11:D1:57:1C:D5:C8:0F:92:8C:04:C5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02FA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
Signing time:             Tue 10 Jun 2025 10:48:06 +0000
ROA not before:           Tue 10 Jun 2025 10:48:06 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     4721
IP address blocks:        203.114.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jun 10 10:48:06 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=23A6F7EF31256452CD11D1571CD5C80F928C04C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:ba:c9:ac:5a:f7:e6:62:c1:1c:8a:7f:5c:
                    19:e2:7a:54:2c:49:25:e8:1d:fb:47:8a:39:45:1f:
                    97:35:63:f8:b5:42:84:e3:e4:11:65:e6:33:88:1f:
                    c8:33:10:cb:1c:43:7b:7b:72:52:c0:5f:51:c8:aa:
                    f2:77:03:09:1f:16:68:3f:ab:78:68:49:95:64:db:
                    2b:71:97:29:65:d6:b7:20:c6:96:4b:92:7e:72:3d:
                    87:83:c0:cb:49:6d:58:71:55:63:ef:c4:12:55:81:
                    1c:14:07:ff:7b:c2:f8:fa:af:83:a4:43:66:23:e4:
                    d6:ed:6b:ec:00:e4:3f:9d:16:6e:0b:86:ab:2e:22:
                    cb:3e:81:91:6d:1b:e6:20:e1:fe:32:37:7c:1a:1d:
                    f1:84:ff:2d:bb:24:e7:ed:ad:b4:23:dd:b2:4e:fe:
                    00:a1:76:7e:d3:dd:59:38:3d:15:9c:2b:1f:6d:a4:
                    94:74:42:c0:bd:0a:ae:45:46:67:80:54:b3:3c:e7:
                    a2:81:6d:6d:a3:52:88:88:a8:1a:68:2b:eb:ac:99:
                    e1:61:27:94:8c:92:89:57:a0:38:fd:5f:f8:29:37:
                    63:55:84:d6:df:10:2d:32:f8:b7:cf:db:f1:ee:7f:
                    f6:02:f2:1a:fd:26:ba:16:63:5e:90:7d:50:6f:99:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A6:F7:EF:31:25:64:52:CD:11:D1:57:1C:D5:C8:0F:92:8C:04:C5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/I6b37zElZFLNEdFXHNXID5KMBMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ea:b8:67:32:6a:4e:10:23:20:bb:69:1f:88:48:d9:1c:fb:1f:
         16:15:85:06:a3:10:eb:61:ad:5f:00:a5:14:9e:1c:e7:20:e7:
         58:51:20:33:7b:e3:9c:18:0c:e4:12:5f:db:70:ab:4d:c6:1b:
         d8:23:bf:c2:25:44:27:75:90:6f:4c:be:75:df:46:76:35:ca:
         52:79:1b:09:ab:3b:ed:82:86:24:a7:7c:f2:0c:ab:1f:28:2e:
         9e:c3:05:d6:f8:83:8d:4b:c7:29:ab:af:d6:47:5c:02:fe:6e:
         82:4c:e7:83:e6:3f:3a:1f:9f:f7:33:ed:cf:48:67:68:17:4e:
         e9:7e:20:47:f8:a6:1d:81:69:70:d3:e3:ea:66:ac:f0:ad:4f:
         97:b9:8b:e8:64:83:c9:7a:cd:5c:14:6f:e8:3a:dc:fc:a5:61:
         66:6b:96:16:1b:10:10:5d:fa:c8:49:cf:d8:60:8e:20:e4:14:
         43:3f:65:f9:be:8e:8d:ab:24:86:2a:24:35:7b:e5:3b:2a:94:
         36:28:b4:92:7e:81:24:be:4c:99:0e:a1:6a:2b:8f:1d:db:cd:
         2a:e7:77:4e:6a:bc:b8:12:f9:3c:13:00:51:c4:15:5d:bf:bc:
         4c:89:67:b0:43:03:53:e6:d4:03:c1:8f:27:ce:18:e0:55:70:
         52:84:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:09:56 2025 by rpki-client