Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QXqMrHALrq4Ad07hOsog3k6iNVY.roa
File:                     QXqMrHALrq4Ad07hOsog3k6iNVY.roa (raw, json)
Hash identifier:          Wz1mTzO3CNmjHxySNBQ4xrcQf3bU5p7rXMBy7FDa1VI=
Subject key identifier:   41:7A:8C:AC:70:0B:AE:AE:00:77:4E:E1:3A:CA:20:DE:4E:A2:35:56
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0344
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QXqMrHALrq4Ad07hOsog3k6iNVY.roa
Signing time:             Fri 01 Aug 2025 01:40:05 +0000
ROA not before:           Fri 01 Aug 2025 01:40:05 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18136
IP address blocks:        27.126.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:05 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=417A8CAC700BAEAE00774EE13ACA20DE4EA23556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:ac:ba:75:eb:7d:45:21:60:ae:11:1d:de:
                    e1:97:de:27:3d:00:6b:79:1f:1a:a1:7f:03:51:bc:
                    f9:95:65:57:e2:9f:01:b2:1c:52:0a:0d:58:16:b4:
                    dc:4f:74:04:9a:63:a2:61:02:8f:2e:06:b0:a8:86:
                    90:95:94:7a:9f:92:44:46:bf:50:0e:d3:63:f6:04:
                    79:d6:8c:f7:f2:64:c6:98:fc:2a:24:dd:d9:6b:12:
                    dd:fe:a9:f9:05:c0:e2:90:2b:a0:2d:05:94:31:3f:
                    07:f8:65:0f:30:df:79:5a:23:a0:f9:7c:2a:a3:39:
                    52:41:bc:4e:b9:61:0b:af:cf:0d:6a:35:cf:1c:94:
                    85:16:63:f4:58:ac:30:d3:07:76:16:90:ba:ab:6d:
                    b0:fb:2a:e2:f8:af:24:26:34:3d:ce:e0:96:2f:ef:
                    e9:05:55:a8:17:e0:a3:2e:92:49:80:87:01:c4:23:
                    0a:b2:eb:ef:4d:10:8f:5f:5a:36:74:5e:ca:b8:01:
                    ce:e2:ca:66:fa:b0:5f:71:ce:ee:6f:27:18:7c:1f:
                    61:95:59:61:53:a5:92:05:ee:a5:37:3e:e2:8f:b0:
                    62:a0:e9:17:20:8c:e6:38:a1:43:d1:7b:66:df:48:
                    7b:cb:ea:b8:fa:10:cd:38:0e:36:1a:ed:d9:ee:da:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:8C:AC:70:0B:AE:AE:00:77:4E:E1:3A:CA:20:DE:4E:A2:35:56
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QXqMrHALrq4Ad07hOsog3k6iNVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:b4:83:28:59:60:a5:3b:2b:96:df:b7:7f:75:b2:ee:cc:
         51:ed:2b:06:e2:01:19:fe:83:26:d7:da:b2:f3:d3:3b:0f:97:
         03:9d:54:c2:3a:98:d3:ba:ed:22:df:ac:bb:41:86:3a:87:8a:
         e6:74:59:87:67:11:c1:45:0a:de:bf:61:90:2a:00:4a:fe:df:
         85:93:05:a1:1e:57:30:c9:54:e2:47:7f:2f:47:13:2d:2d:f9:
         39:5c:ab:1c:7f:78:24:0d:05:57:b7:cd:81:9a:b4:f5:65:46:
         eb:6e:3f:b2:d1:f1:ef:4e:02:de:84:35:a1:2f:23:e3:15:8a:
         4b:5b:3a:1c:7c:db:5f:b3:e4:20:69:7c:57:b9:dd:c7:cb:9c:
         e6:7b:04:6d:a2:f4:c6:d5:fb:83:93:6d:31:99:ca:1e:33:b3:
         66:8b:00:c9:f6:0b:05:ee:b5:fc:9a:2d:06:8c:02:e3:13:88:
         12:f2:22:b8:2d:ae:fb:07:bd:8c:31:f1:88:66:41:74:48:6d:
         bf:3c:0c:1d:77:a1:13:5a:3d:81:a0:9c:b6:f2:ab:24:68:a6:
         11:09:ec:c0:ab:c0:ce:61:88:23:e4:8a:7d:86:f0:e9:b4:4c:
         f9:f9:21:68:5c:b2:f5:51:78:a0:82:bc:61:18:75:6d:58:54:
         14:a4:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:38 2025 by rpki-client