Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JJgYwUWJisqN7uo7NiNSB0zbOyM.roa
File:                     JJgYwUWJisqN7uo7NiNSB0zbOyM.roa (raw, json)
Hash identifier:          PIrX6km8d603KbZepO+yKojWwkkCvzY4xZnU/B/GXUE=
Subject key identifier:   24:98:18:C1:45:89:8A:CA:8D:EE:EA:3B:36:23:52:07:4C:DB:3B:23
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JJgYwUWJisqN7uo7NiNSB0zbOyM.roa
Signing time:             Fri 01 Aug 2025 02:03:10 +0000
ROA not before:           Fri 01 Aug 2025 02:03:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        112.137.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=249818C145898ACA8DEEEA3B362352074CDB3B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:67:29:98:a2:ee:59:d5:7d:a3:6f:8c:0b:
                    6b:6e:27:3f:94:7b:8b:7c:9b:ab:0f:ce:8c:a6:fb:
                    06:d6:dd:b1:6e:0a:a0:c9:64:24:f9:45:9c:ce:27:
                    20:da:58:a1:23:17:3b:51:78:a2:7d:63:88:66:80:
                    b2:d9:0c:98:d3:5c:a2:68:9f:e1:01:fb:e7:69:11:
                    84:7b:47:5a:97:c7:c3:a5:2f:92:3c:02:7b:46:82:
                    13:1d:7f:90:4f:26:76:ea:6e:ed:18:f9:ba:e6:5a:
                    af:02:9f:70:91:9b:e2:42:dd:5f:73:ef:38:60:6d:
                    3e:49:68:8b:d2:5f:77:b3:26:14:36:b4:6b:96:57:
                    94:ad:f2:92:74:ec:5e:33:12:98:81:7d:d7:97:29:
                    fa:01:47:a4:c1:74:d3:a1:0b:2d:ad:17:98:2b:3b:
                    a2:25:43:49:8c:5f:dc:0c:55:57:74:5e:f6:ac:40:
                    fe:31:e4:a1:d3:72:db:41:b8:34:af:c6:6a:1d:5c:
                    ce:f2:b7:3e:c6:ca:5c:a3:d7:02:ce:4f:0c:cd:ea:
                    80:09:aa:a5:1a:65:ed:03:fc:30:25:ac:e8:f8:28:
                    55:d1:ac:27:f1:69:ae:e7:7f:e4:ba:17:5e:82:e9:
                    4f:69:52:d2:4a:94:08:b9:5f:16:f7:aa:c2:7a:6a:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:18:C1:45:89:8A:CA:8D:EE:EA:3B:36:23:52:07:4C:DB:3B:23
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JJgYwUWJisqN7uo7NiNSB0zbOyM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:66:5b:dc:4b:85:62:e2:81:0e:ee:f4:b1:eb:94:63:af:
         d2:15:8c:ec:bb:4f:76:b7:73:08:40:ef:33:0a:03:fd:4a:bf:
         13:10:51:02:4a:a4:4c:bf:bc:c0:2d:7c:02:44:c6:9a:82:4b:
         90:ab:52:d2:3c:5d:b4:eb:f4:ab:ce:3b:f4:72:dd:45:5a:21:
         50:ff:42:dd:ef:83:dc:a9:4c:9e:0c:a3:f8:4d:5c:09:09:0e:
         ee:5a:86:90:e5:01:ba:bd:43:61:34:90:70:c6:bd:e8:28:1a:
         2d:a8:58:c4:3f:e9:5d:bf:59:cf:df:d0:2f:b3:ac:b7:77:2c:
         00:40:c9:d1:2c:2f:ee:80:51:31:b3:0e:27:a6:9c:0d:c3:b1:
         2d:f7:91:10:65:9f:6a:2b:a5:32:40:bc:40:50:3d:84:02:d0:
         eb:cd:c9:12:12:c6:92:82:a5:cf:0c:6f:33:40:7c:b2:81:36:
         a0:47:bd:3f:2b:ca:22:6a:54:c1:e5:05:ae:73:f3:55:c4:a5:
         b1:2e:8a:99:e0:77:9c:83:48:7e:86:6f:0c:93:81:5b:75:1d:
         b4:0a:aa:57:55:8d:fd:13:d6:6b:9f:a1:88:2e:e0:c9:aa:6e:
         d7:fb:c9:e4:2d:eb:a8:f2:71:f3:b1:e7:04:92:5d:96:49:ae:
         77:1b:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:47 2025 by rpki-client