Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KVsCjbc9xvBP0EUEVWSP5CNOAR0.roa
File:                     KVsCjbc9xvBP0EUEVWSP5CNOAR0.roa (raw, json)
Hash identifier:          Zd6tGnbuLgoDGCucp9HL/TGmKbdXEfaQZxxShQJMqKU=
Subject key identifier:   29:5B:02:8D:B7:3D:C6:F0:4F:D0:45:04:55:64:8F:E4:23:4E:01:1D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0370
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KVsCjbc9xvBP0EUEVWSP5CNOAR0.roa
Signing time:             Fri 01 Aug 2025 01:47:13 +0000
ROA not before:           Fri 01 Aug 2025 01:47:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        110.232.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=295B028DB73DC6F04FD0450455648FE4234E011D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:7e:46:14:ac:0c:64:ed:44:6a:e8:cc:46:
                    b1:24:65:d0:19:02:bb:7f:82:97:68:1e:f5:0a:9c:
                    8a:22:99:2e:bd:ff:60:fc:47:3e:2d:2c:3c:fa:61:
                    76:3b:f9:d1:69:5b:43:85:a3:ac:cb:26:d2:47:67:
                    f5:cc:f9:6c:9f:c5:a2:10:10:1e:a5:29:95:90:df:
                    5c:4e:08:cd:49:5a:89:ef:b9:89:c6:79:62:9b:cb:
                    3e:5d:44:83:c0:fe:e0:4e:dc:bd:df:1b:2f:ba:c3:
                    a2:ac:0f:b5:84:3a:9e:ee:d6:66:28:e1:1e:1b:eb:
                    ad:68:c9:9c:3d:9d:73:5b:91:25:4a:97:68:d7:ec:
                    47:2b:a1:27:e3:3d:8c:91:50:06:4d:6a:2c:78:5a:
                    ef:90:c7:0d:15:98:78:e9:37:eb:36:9c:b3:b9:db:
                    bb:4d:81:74:f7:8b:ce:a1:1a:21:54:60:4f:87:94:
                    d6:32:d1:c7:34:60:51:77:50:f0:f4:20:66:fd:5f:
                    fd:94:05:a2:9b:ff:56:46:01:b7:29:1c:d0:40:51:
                    7f:87:0d:64:82:0e:28:96:5a:a8:17:ce:4e:df:05:
                    86:9c:49:53:93:2c:12:d1:de:a5:f5:12:96:32:b5:
                    0c:2b:e0:43:28:c3:88:3f:4c:60:74:9d:ee:bc:63:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5B:02:8D:B7:3D:C6:F0:4F:D0:45:04:55:64:8F:E4:23:4E:01:1D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KVsCjbc9xvBP0EUEVWSP5CNOAR0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:b7:07:45:6b:ca:7b:e6:b9:a0:69:0d:b5:11:3d:2f:e3:
         8f:f3:ac:0c:92:d0:85:92:4a:e0:66:cc:10:6f:9d:eb:e0:36:
         84:db:ef:a3:da:d7:08:5a:82:0d:ad:4e:fa:0a:a0:b4:a8:7f:
         36:83:56:30:dd:53:bf:32:58:f5:9c:05:ff:56:91:7c:76:c7:
         cf:40:db:1a:aa:a9:34:86:07:8a:a8:52:05:7d:62:94:e9:e4:
         71:10:e9:ad:fc:f7:12:f8:90:06:bc:3d:fc:ba:11:ad:48:61:
         e9:bd:b3:1a:61:dc:7a:7d:53:5e:d2:68:7c:17:ff:2b:35:d7:
         92:a6:25:89:50:d0:8a:77:ba:af:cb:66:0f:a4:3e:d0:24:a0:
         d7:a6:da:1b:57:c8:63:e8:2e:cb:64:01:f7:af:cf:2f:d5:d9:
         75:08:34:7d:29:19:b7:55:7b:c7:9c:9f:a3:a7:8f:8e:19:96:
         86:f9:5b:b2:a0:a6:15:57:96:4a:ad:49:d4:2d:f6:02:d6:d4:
         77:06:ed:f4:8d:09:bd:c6:51:7f:c5:68:dc:39:e7:96:c4:fe:
         89:a8:da:fa:f6:3a:52:f1:32:94:0c:41:b6:72:31:1f:d6:46:
         51:bc:3c:c7:88:72:e5:99:38:b2:4b:dd:0e:de:68:95:6a:34:
         31:c1:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:24 2025 by rpki-client