Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
File:                     Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa (raw, json)
Hash identifier:          8Ufra1iA3RaQMlX3++D0Nzd4UOCLOlxNrFLDF7bmvjw=
Subject key identifier:   43:CF:17:84:67:09:EB:75:C3:95:5A:16:F4:56:DE:5D:88:7A:47:31
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0380
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
Signing time:             Fri 01 Aug 2025 01:47:22 +0000
ROA not before:           Fri 01 Aug 2025 01:47:22 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        115.42.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:22 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=43CF17846709EB75C3955A16F456DE5D887A4731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:d2:91:72:64:47:eb:15:31:fd:c4:34:f2:
                    39:b6:2e:68:31:06:43:70:ae:aa:29:87:91:32:83:
                    15:34:88:51:8c:b1:b5:f4:82:20:2b:dd:6a:24:46:
                    ed:b0:91:6a:ae:3c:69:40:17:2b:98:2f:21:7c:4f:
                    97:83:7a:e4:ba:33:8b:ad:c9:40:c4:93:88:d6:58:
                    b7:05:11:66:fa:d8:39:c4:b3:97:07:72:0f:15:55:
                    29:b0:dc:98:ae:45:78:62:59:7d:08:10:e5:59:c0:
                    00:da:a4:ac:94:ed:a4:8a:d9:73:2d:f7:f8:b0:4b:
                    74:03:88:ff:8b:dc:c4:03:e6:e5:4d:6b:e0:41:41:
                    bc:8b:b7:62:eb:a6:b3:8e:7a:82:56:42:ed:41:fb:
                    19:13:b0:49:e0:2f:0e:b6:2d:58:15:6c:43:76:4e:
                    fd:18:79:ea:e0:9c:a4:df:ef:61:1e:f0:d0:f6:e8:
                    7c:68:cc:de:00:57:14:5e:34:40:59:bf:18:d7:8b:
                    56:9f:79:ab:b4:76:54:e4:91:5f:b3:41:22:15:ee:
                    69:fe:fa:b6:1c:64:3f:5e:03:6e:38:ae:c5:1a:b5:
                    f3:2f:4b:dc:23:d4:6b:47:f2:48:a9:5b:28:1d:5a:
                    b1:34:a6:69:0d:ca:51:44:1f:07:d0:69:4c:c8:54:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CF:17:84:67:09:EB:75:C3:95:5A:16:F4:56:DE:5D:88:7A:47:31
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Q88XhGcJ63XDlVoW9FbeXYh6RzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:bd:1d:41:2a:57:75:36:3b:09:b5:af:51:bc:50:4c:6f:
         28:17:d5:46:fe:b9:db:4e:ae:2e:df:3a:54:68:f7:0b:86:55:
         b4:b8:34:bd:98:41:68:f9:72:57:6b:9e:98:b4:e7:09:ee:dd:
         9c:71:88:4b:8e:2c:4d:c2:8b:87:68:25:98:33:df:46:36:58:
         ae:ac:ad:4c:5e:5b:42:60:dd:67:e0:97:5d:df:02:bf:bf:d7:
         3d:a9:0c:70:fb:48:30:a0:ff:b8:c5:b6:82:85:74:26:db:09:
         20:da:6c:0d:93:89:68:8e:c1:8d:f0:d6:8a:48:4c:b0:46:56:
         ad:41:d9:68:cf:9e:c5:ce:c9:93:9a:1c:a8:fb:3c:bb:8b:4c:
         89:28:ec:62:55:ab:06:37:0c:2a:7d:3f:1e:32:83:57:aa:21:
         dc:f5:93:20:da:0b:7d:5c:d0:e7:3d:3b:c7:a6:4a:f3:c5:65:
         01:87:bb:3c:32:a7:14:6b:82:44:ae:12:47:c8:0e:6b:89:75:
         dd:b2:cf:3e:87:fc:02:bf:bf:f1:1d:29:15:32:48:61:fd:51:
         6a:1b:99:ff:d8:80:62:81:15:eb:4e:97:72:33:10:31:e2:5a:
         5c:cb:88:b2:25:89:36:60:13:90:4b:1b:f4:0f:4b:ad:95:19:
         f7:fb:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:45 2025 by rpki-client