Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Lk4_gV6Au6nyzkjFnEiTwrITpCI.roa
File:                     Lk4_gV6Au6nyzkjFnEiTwrITpCI.roa (raw, json)
Hash identifier:          rGS6qREnvOxk/VPHAGwzNfxqvNckcH2hiU6D/VGRl0w=
Subject key identifier:   2E:4E:3F:81:5E:80:BB:A9:F2:CE:48:C5:9C:48:93:C2:B2:13:A4:22
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       037A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Lk4_gV6Au6nyzkjFnEiTwrITpCI.roa
Signing time:             Fri 01 Aug 2025 01:47:18 +0000
ROA not before:           Fri 01 Aug 2025 01:47:18 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        114.134.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:18 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2E4E3F815E80BBA9F2CE48C59C4893C2B213A422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:69:43:4f:39:32:7c:94:78:b1:ba:54:64:1e:
                    b7:e7:02:88:bb:ca:52:9c:ac:7c:78:30:35:8f:18:
                    50:7c:a0:7e:11:29:55:88:ba:08:98:1a:69:f7:a2:
                    8d:38:c2:d8:66:71:16:d2:1d:a1:aa:00:58:22:70:
                    aa:40:f9:4f:c9:fd:81:51:cb:e9:a1:d0:06:4d:75:
                    dc:f9:77:01:a1:9f:a2:f9:0b:3a:cc:c0:86:e2:d7:
                    9a:95:30:a6:e5:d9:e2:94:48:50:fc:06:6a:d1:89:
                    13:f4:80:05:f4:47:3f:21:39:82:9e:f9:af:5c:69:
                    c5:14:e0:b3:3e:b8:d6:81:ae:28:7b:96:53:93:f6:
                    ca:a5:b3:40:e0:bf:a4:52:f8:6d:70:83:a1:f9:b8:
                    69:96:d3:b3:cf:fd:35:3a:75:e6:44:56:d8:f2:cf:
                    bf:8d:bc:a6:33:a4:3d:96:15:a7:97:01:07:2f:e7:
                    3c:70:04:30:76:92:5a:a5:04:73:47:f8:44:65:c7:
                    23:93:97:bf:c0:72:f4:e7:21:04:0e:67:c8:9b:14:
                    ef:4f:c1:d2:8a:a7:e8:70:64:a5:ee:de:97:88:18:
                    cb:a0:22:48:12:6c:0a:be:45:aa:f5:21:a7:7e:57:
                    9f:96:b4:8e:b6:76:28:69:71:9b:39:4c:a3:85:23:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:3F:81:5E:80:BB:A9:F2:CE:48:C5:9C:48:93:C2:B2:13:A4:22
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Lk4_gV6Au6nyzkjFnEiTwrITpCI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:c4:2d:b5:ee:8c:3a:de:4d:4d:55:b7:7b:1e:5c:f4:38:
         fd:e1:9c:57:98:64:48:27:6e:d6:ec:c6:cc:08:da:a6:82:46:
         64:bc:b2:f9:39:8b:73:82:02:5b:98:90:5c:5e:e6:82:0f:56:
         a6:af:1e:1c:6a:31:64:40:00:d6:75:78:5b:c3:64:0d:90:36:
         2e:e6:6e:66:bb:ac:83:3e:99:d7:7c:53:f6:77:f2:d9:a0:3d:
         a2:fc:22:df:bb:88:03:a0:bd:75:aa:8f:b7:5e:41:e9:ad:41:
         6b:db:38:ca:93:90:f7:6f:a6:6e:f6:46:e7:89:67:5b:98:83:
         1e:e5:a4:5a:4b:a4:cb:34:67:0b:94:8b:a5:dd:90:1b:e2:ea:
         cc:2b:06:93:7f:cb:82:49:a9:3e:5e:94:e9:5b:05:2b:3b:96:
         22:46:f0:ec:4b:a7:cd:6d:36:b5:2e:f9:4a:bc:e6:19:3e:c9:
         ea:ef:c0:77:77:c5:4a:7e:e2:a4:c1:90:4a:d8:dc:d8:e6:92:
         26:33:4c:83:c8:cf:94:d6:2d:4e:28:77:f3:82:b2:83:e5:66:
         53:4e:fa:8b:10:00:42:84:19:34:e3:9b:97:b9:63:47:58:42:
         08:95:47:53:2d:ba:26:1b:b5:84:5a:d2:98:8d:ff:7f:f6:b7:
         52:5f:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:40 2025 by rpki-client