Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mp1pVQuqdzklFa4HfNpKEcrA5ig.roa
File:                     Mp1pVQuqdzklFa4HfNpKEcrA5ig.roa (raw, json)
Hash identifier:          INOQoqncLpNwCFJdk25a9Y+jXzz/A7p731YRiRVlPfA=
Subject key identifier:   32:9D:69:55:0B:AA:77:39:25:15:AE:07:7C:DA:4A:11:CA:C0:E6:28
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0378
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mp1pVQuqdzklFa4HfNpKEcrA5ig.roa
Signing time:             Fri 01 Aug 2025 01:47:17 +0000
ROA not before:           Fri 01 Aug 2025 01:47:17 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        114.134.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:17 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=329D69550BAA77392515AE077CDA4A11CAC0E628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:42:48:c2:94:04:13:5b:ea:48:64:43:dd:
                    e9:a6:81:9e:d5:8f:49:ce:7a:3a:17:2a:ec:5a:20:
                    3d:f5:39:5f:db:ae:5f:b1:6f:31:49:c2:42:69:eb:
                    e2:58:9b:89:ad:25:c1:72:d8:94:95:ef:69:66:fd:
                    33:68:ec:61:18:eb:fe:ac:31:bf:4f:9c:d2:64:bc:
                    22:8e:42:1f:17:63:a6:6f:2e:d1:84:90:83:ad:77:
                    36:6d:ab:0f:b6:f8:c6:80:56:a3:bf:3a:cf:e2:71:
                    5f:a1:1c:5f:fa:11:05:8f:a1:d2:0d:27:97:fc:f2:
                    f4:69:d9:97:77:af:9c:d8:e1:47:71:f0:d5:d1:fd:
                    ae:9c:47:69:f2:f1:d0:cc:54:48:a1:85:50:f7:0d:
                    5b:5a:ef:f6:96:6c:d8:7b:3a:d3:3a:73:4a:fb:40:
                    55:77:56:45:59:09:9d:b1:3c:75:57:61:5a:1c:31:
                    bc:2d:7b:8e:75:af:74:b0:c2:8b:c7:cc:7b:50:8d:
                    a4:39:e7:f9:6d:3f:c3:e9:79:53:08:5f:c4:10:3a:
                    39:72:0b:91:4e:70:56:cb:16:ab:25:52:2d:0b:94:
                    bb:60:59:d5:18:0d:ae:a6:b1:04:bb:26:6f:38:9d:
                    af:19:f4:fd:ac:a1:93:1e:0b:ab:b2:dc:70:de:65:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:69:55:0B:AA:77:39:25:15:AE:07:7C:DA:4A:11:CA:C0:E6:28
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Mp1pVQuqdzklFa4HfNpKEcrA5ig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:9c:94:48:9d:c0:ba:21:7e:ee:4f:f8:6d:79:02:94:92:2e:
         a6:92:87:b4:8e:ee:27:c1:c1:89:64:20:97:6d:62:a1:13:79:
         9e:0b:2b:f3:3f:01:0e:c7:44:6c:bd:e3:f8:49:6b:72:c3:7d:
         51:ee:ae:22:63:f6:7b:72:52:c0:5a:3b:eb:cd:85:3d:a5:52:
         8d:f1:bb:13:4d:fa:d0:c1:de:2f:51:31:4b:af:17:07:b1:b9:
         50:b5:e2:d6:4d:7e:4a:2b:33:ab:bb:24:d4:9a:77:7e:4a:df:
         54:e2:5c:93:0e:be:29:f3:1f:5d:6c:99:db:3e:77:13:be:48:
         e3:2c:61:92:54:f7:5e:e2:c8:37:6f:f5:8b:b0:42:52:7d:56:
         ef:0d:1e:cb:50:59:60:20:5a:ff:b0:6c:8a:9a:60:0a:a1:fa:
         d7:67:60:b4:20:ee:0f:16:9e:ff:c2:37:6b:1c:d2:a9:58:a0:
         72:ce:e8:ee:70:3a:51:d9:09:e8:aa:46:dc:e4:9a:08:4e:06:
         77:85:aa:18:fa:e0:76:b4:9e:d3:79:2e:d7:d0:eb:99:50:71:
         99:e8:ab:86:d0:22:91:79:89:19:38:49:91:a6:42:f9:c7:0d:
         20:d3:64:08:02:69:b7:8d:82:33:f9:eb:92:1d:78:3b:95:ff:
         28:b7:37:20
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQ3MTdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDMyOUQ2OTU1MEJBQTc3
MzkyNTE1QUUwNzdDREE0QTExQ0FDMEU2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfyUJIwpQEE1vqSGRD3emmgZ7Vj0nOejoXKuxaID31OV/brl+x
bzFJwkJp6+JYm4mtJcFy2JSV72lm/TNo7GEY6/6sMb9PnNJkvCKOQh8XY6ZvLtGE
kIOtdzZtqw+2+MaAVqO/Os/icV+hHF/6EQWPodINJ5f88vRp2Zd3r5zY4Udx8NXR
/a6cR2ny8dDMVEihhVD3DVta7/aWbNh7OtM6c0r7QFV3VkVZCZ2xPHVXYVocMbwt
e451r3SwwovHzHtQjaQ55/ltP8PpeVMIX8QQOjlyC5FOcFbLFqslUi0LlLtgWdUY
Da6msQS7Jm84na8Z9P2soZMeC6uy3HDeZXx5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMp1pVQuqdzklFa4HfNpKEcrA5igwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL01wMXBWUXVxZHprbEZhNEhmTnBLRWNyQTVpZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARyhnAwDQYJKoZIhvcNAQELBQADggEBAK+clEidwLohfu5P+G15ApSSLqaS
h7SO7ifBwYlkIJdtYqETeZ4LK/M/AQ7HRGy94/hJa3LDfVHuriJj9ntyUsBaO+vN
hT2lUo3xuxNN+tDB3i9RMUuvFwexuVC14tZNfkorM6u7JNSad35K31TiXJMOvinz
H11smds+dxO+SOMsYZJU917iyDdv9YuwQlJ9Vu8NHstQWWAgWv+wbIqaYAqh+tdn
YLQg7g8Wnv/CN2sc0qlYoHLO6O5wOlHZCeiqRtzkmghOBneFqhj64Ha0ntN5LtfQ
65lQcZnoq4bQIpF5iRk4SZGmQvnHDSDTZAgCabeNgjP565IdeDuV/yi3NyA=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:21 2025 by rpki-client