Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa
File:                     NGoTa5Vc9nzPXUgee0IYATKczjc.roa (raw, json)
Hash identifier:          DQ/GaV7ynwo1Fr2ZmhknjnJVPEEVX+gJf59DSeOeKKM=
Subject key identifier:   34:6A:13:6B:95:5C:F6:7C:CF:5D:48:1E:7B:42:18:01:32:9C:CE:37
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03A4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa
Signing time:             Fri 01 Aug 2025 01:54:56 +0000
ROA not before:           Fri 01 Aug 2025 01:54:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        219.113.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=346A136B955CF67CCF5D481E7B421801329CCE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:7b:e9:a8:d5:21:63:c6:41:a7:a2:46:56:
                    78:b4:4b:1b:4d:cc:19:29:20:3a:19:61:04:d0:68:
                    e7:3a:66:a3:a5:ba:91:ef:22:19:97:d2:84:d5:d6:
                    66:3c:ea:3e:23:7b:36:2f:25:ba:58:3c:4b:76:5b:
                    b1:45:f2:ad:8f:1b:89:ff:78:a2:46:f1:24:01:43:
                    fb:96:19:8b:d4:1d:88:b4:c4:70:de:0d:b6:e8:88:
                    0b:ae:52:36:68:c7:0a:ef:11:9b:3f:0e:e8:0f:4c:
                    69:a4:a7:67:94:ba:d1:7b:13:93:cd:fe:2b:f9:5c:
                    61:18:6c:90:e0:96:b0:0e:1f:5f:1b:de:b6:68:7a:
                    3e:be:5d:70:5c:2d:b7:f7:c5:01:1c:3f:6a:58:86:
                    c3:f2:7a:f1:ad:42:2c:1c:d4:88:4a:4d:e7:df:77:
                    d4:13:8b:0b:e8:b2:c7:05:4b:33:b8:8c:79:11:fb:
                    84:bb:fc:72:db:b1:6e:b1:89:0c:38:54:9e:a2:2f:
                    ba:83:6a:5d:f5:aa:ac:c3:46:dd:33:70:6d:d1:0c:
                    c5:f9:b1:74:b0:b8:cc:ba:f1:29:65:db:8a:b2:7f:
                    15:15:d5:53:a3:c1:81:9a:40:d1:b0:c5:fa:73:ec:
                    91:8c:5a:1c:5f:cc:3b:a1:07:81:6f:21:70:dd:03:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:13:6B:95:5C:F6:7C:CF:5D:48:1E:7B:42:18:01:32:9C:CE:37
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:ce:2d:b8:0c:4f:c1:89:26:0c:a7:af:34:a3:cb:5d:c2:4e:
         96:77:b8:58:a6:83:40:77:3e:51:68:b3:ee:e0:91:e7:b1:89:
         4f:5f:37:71:cc:1e:e7:ae:a2:a3:cf:86:c9:1a:c9:4e:e2:72:
         b5:f9:83:b0:fd:8e:ec:f9:7b:b2:07:00:14:27:e8:ff:04:fb:
         f4:ce:fd:87:4a:04:a7:d6:f3:c4:d5:c2:4a:a7:3a:4d:29:fb:
         8f:79:55:91:35:61:d2:c1:03:61:fc:43:73:ba:cc:5d:93:a1:
         2d:cd:4a:b3:48:47:dd:27:2a:4a:e8:92:d1:2c:fe:67:07:1d:
         17:22:53:fe:cf:28:71:25:96:48:8c:83:c9:14:07:e8:b6:98:
         46:b2:cd:29:17:fe:80:54:64:9f:37:a7:2b:1f:7b:49:f4:e1:
         f0:4b:e9:3b:5e:02:88:ef:68:0a:71:dd:bb:90:24:37:d3:4e:
         34:91:ab:02:0b:d0:19:36:52:b8:3d:cb:9f:13:61:04:84:c9:
         b1:40:04:2d:8e:14:3f:06:91:3c:42:4f:a7:13:f6:ed:98:4c:
         09:de:be:df:5c:ea:a8:69:47:3e:dc:c3:0c:6e:93:d7:41:9a:
         96:81:fa:e1:a3:bc:77:89:83:4d:e7:00:48:f3:f8:96:bb:0c:
         70:44:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:47 2025 by rpki-client