Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NmzvCFKZYgNtOWH9uCLKNSEkPG0.roa
File:                     NmzvCFKZYgNtOWH9uCLKNSEkPG0.roa (raw, json)
Hash identifier:          1eFN66FQ+Ko2x9ZcqFr6cuGD0ONlw1brPn643g5eqIE=
Subject key identifier:   36:6C:EF:08:52:99:62:03:6D:39:61:FD:B8:22:CA:35:21:24:3C:6D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03D7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NmzvCFKZYgNtOWH9uCLKNSEkPG0.roa
Signing time:             Fri 01 Aug 2025 02:03:10 +0000
ROA not before:           Fri 01 Aug 2025 02:03:10 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        116.70.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:10 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=366CEF08529962036D3961FDB822CA3521243C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:37:02:a0:a4:a6:c4:f9:11:3a:b3:57:3a:
                    d7:3b:2b:db:75:22:a3:b2:41:6d:a4:b9:94:5b:b4:
                    a2:31:8c:d6:0d:9a:a8:5e:e8:f0:d2:75:25:73:42:
                    3c:03:0a:f3:f3:d9:8b:0f:c3:82:ed:44:3f:b0:de:
                    b1:4c:04:c8:8b:b3:8e:6d:9d:6f:7d:67:7e:53:c9:
                    60:2e:7f:0b:d2:ff:c2:6f:d6:5f:a7:53:e3:a6:7d:
                    9c:4b:50:c4:67:97:d0:62:d0:ee:6a:a2:04:80:b7:
                    b7:8a:20:76:87:2d:b1:ae:4f:82:06:60:47:62:22:
                    27:9b:ca:c0:bb:11:5a:b1:89:62:bd:aa:02:06:7c:
                    b8:d1:8e:e5:30:09:54:53:84:59:cc:f4:97:81:3b:
                    53:ee:87:7a:e1:f0:9b:91:40:08:cb:5e:2e:12:08:
                    8d:dc:24:a5:2c:5b:2d:03:99:a1:b8:97:04:67:f0:
                    a9:dd:f6:5f:5f:b4:0b:ec:6f:14:a4:ec:fe:6b:b7:
                    11:08:f4:02:b3:4d:11:86:9a:a8:88:48:e4:7b:c1:
                    a2:9c:02:97:c4:56:27:04:e6:8a:f6:4f:6a:84:03:
                    e2:c2:1d:eb:e3:18:c9:da:38:1d:b9:cd:02:35:1b:
                    0d:fe:07:0a:99:3d:45:8f:d9:f3:89:56:15:9e:74:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6C:EF:08:52:99:62:03:6D:39:61:FD:B8:22:CA:35:21:24:3C:6D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NmzvCFKZYgNtOWH9uCLKNSEkPG0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d7:39:84:c2:d6:c6:49:b2:df:94:c4:15:01:ca:d9:4d:76:0f:
         fc:d9:6f:55:ca:66:6b:b5:e8:05:68:00:e5:b7:a6:f3:43:5f:
         47:17:df:d3:a1:33:07:4f:90:37:ca:1b:27:72:80:09:df:33:
         1c:77:98:18:ab:98:12:d1:f6:22:7c:19:35:9c:bc:b3:0f:a1:
         6d:c7:d4:93:07:5c:c1:d1:e2:58:2d:4e:87:a9:e7:7e:96:76:
         63:04:d9:c3:a5:60:ed:a2:be:12:83:38:78:dd:96:ff:df:02:
         a2:54:e5:fc:3e:a1:58:4f:ee:a3:b3:e7:31:28:e3:5d:32:8d:
         1b:7f:7d:94:e0:d8:6f:de:9f:96:71:ce:fe:90:40:05:06:25:
         e0:0d:11:f6:bc:91:14:4f:b9:c7:f5:13:00:73:78:22:f3:55:
         5c:f4:6b:15:40:de:fd:b4:09:20:3d:19:68:ff:24:dc:45:41:
         e4:0f:cd:6c:18:8e:a8:d8:4d:a2:41:c5:88:63:ed:c0:12:01:
         6d:2e:11:41:6e:5f:e7:0b:68:e8:52:b7:88:29:de:c0:11:7b:
         17:95:ee:0d:0f:d3:ba:82:bd:43:fe:17:a2:5b:77:5c:89:ae:
         65:ab:f8:ac:17:c2:b7:b9:af:87:5a:c5:c4:56:e3:90:34:83:
         db:e5:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:03 2025 by rpki-client