Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/K2L8k_F8AF8JuDGJL2vbO32_RZg.roa
File:                     K2L8k_F8AF8JuDGJL2vbO32_RZg.roa (raw, json)
Hash identifier:          gW0PaG2gyM2T9YgKibl4qKNH3B4RbYfzqpqIKJb7U/M=
Subject key identifier:   2B:62:FC:93:F1:7C:00:5F:09:B8:31:89:2F:6B:DB:3B:7D:BF:45:98
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03C5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K2L8k_F8AF8JuDGJL2vbO32_RZg.roa
Signing time:             Fri 01 Aug 2025 01:58:58 +0000
ROA not before:           Fri 01 Aug 2025 01:58:58 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        180.220.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:58 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2B62FC93F17C005F09B831892F6BDB3B7DBF4598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:b9:d7:0b:39:ba:eb:56:e6:fc:fe:1b:31:
                    a7:5d:ce:4d:75:5f:b6:d7:27:61:df:7e:70:c1:3a:
                    05:c8:c7:53:16:68:f4:61:4a:09:5a:e9:39:5d:bf:
                    c4:c2:de:c1:6a:42:cc:2c:0d:d7:1b:0a:ca:e2:47:
                    68:62:31:57:81:72:2e:50:8e:67:7a:d6:2b:14:d9:
                    45:ac:97:ed:78:04:78:d0:b5:24:e1:7e:67:2f:b4:
                    77:3a:5e:87:13:e9:ac:bc:3f:66:e7:81:14:45:f1:
                    31:7f:66:19:cf:0f:1f:43:c5:3f:d4:69:75:e0:ed:
                    4d:ef:bf:7f:b6:cb:61:17:e4:7e:0c:09:e2:24:cd:
                    d1:7b:ae:82:70:5d:4c:95:19:15:1b:9f:8f:2c:c5:
                    a0:71:70:60:af:f5:e2:61:3f:c3:d1:1f:4b:84:fb:
                    5b:71:23:0f:87:9b:8c:3a:1c:82:66:a2:4a:26:a7:
                    62:fe:cb:cf:e5:0d:98:b3:19:e7:71:8f:84:06:fe:
                    ce:38:5d:9b:bd:db:5f:5e:d6:a1:14:93:d7:06:e8:
                    22:05:bc:27:78:c6:25:ed:52:1a:7d:04:e7:57:0c:
                    7c:62:e9:9d:02:b8:b8:62:02:7a:2a:54:20:41:45:
                    d0:53:68:63:1a:2e:ad:ea:b9:30:8a:1d:1e:4d:3b:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:FC:93:F1:7C:00:5F:09:B8:31:89:2F:6B:DB:3B:7D:BF:45:98
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K2L8k_F8AF8JuDGJL2vbO32_RZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c5:78:42:e0:9c:15:48:92:c3:52:25:b1:29:53:3b:17:7f:09:
         14:87:61:b2:8a:77:60:4c:70:f1:c1:0f:9f:7f:35:22:a0:86:
         7e:5f:5b:0f:24:b7:61:dc:c8:df:f3:7c:a2:64:a5:25:fb:c2:
         b0:e1:de:b7:90:2b:9f:60:fa:36:9d:31:14:f5:11:27:f5:42:
         b0:ae:c1:96:d4:b4:b1:06:85:fb:a1:80:91:fc:72:78:52:90:
         25:80:f5:13:2f:00:04:6d:1d:27:dc:25:7d:f2:d5:0a:59:59:
         e6:b8:eb:79:38:00:d3:11:e7:26:8a:32:cb:47:90:ad:64:48:
         cc:7c:23:de:c5:20:de:2a:f3:89:3d:49:d0:1d:a5:62:e7:7b:
         ec:d8:dd:a0:69:64:02:a4:1f:c1:cb:22:be:34:e7:92:8e:db:
         43:dd:24:3a:bc:e6:5d:a9:7b:80:28:f0:ec:ed:4e:02:69:00:
         08:20:55:2c:aa:e8:de:27:c2:0b:a1:b1:dc:06:e0:88:97:d6:
         82:0f:18:16:d6:5b:d6:49:2a:c0:a8:c3:19:f0:f0:c2:b1:20:
         2d:7d:e1:3a:57:54:b7:5b:f4:00:55:71:74:f1:cf:a1:a2:27:
         56:8b:2f:f5:b3:d5:8d:aa:30:01:93:63:12:c4:44:81:92:8c:
         0d:be:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:17:58 2025 by rpki-client