Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RZzG0ahCPBtz33_A8N4cwLnpj44.roa
File:                     RZzG0ahCPBtz33_A8N4cwLnpj44.roa (raw, json)
Hash identifier:          VIhqQURvDhFZ1HkDxmSElMBgWWvGlA/yyFF0fQRuuv0=
Subject key identifier:   45:9C:C6:D1:A8:42:3C:1B:73:DF:7F:C0:F0:DE:1C:C0:B9:E9:8F:8E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0343
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RZzG0ahCPBtz33_A8N4cwLnpj44.roa
Signing time:             Fri 01 Aug 2025 01:40:04 +0000
ROA not before:           Fri 01 Aug 2025 01:40:04 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18136
IP address blocks:        27.126.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:04 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=459CC6D1A8423C1B73DF7FC0F0DE1CC0B9E98F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:e0:74:b8:da:1e:c3:2d:3a:f9:99:0f:00:
                    61:b8:e0:c5:ff:2d:bb:b8:bc:26:4e:64:b2:07:2f:
                    37:7f:44:8e:57:77:90:c1:68:b0:8d:ef:de:ef:ec:
                    97:59:8e:11:50:75:14:ca:09:09:9d:6f:8d:b0:2f:
                    cd:6d:7d:a2:da:84:7f:53:09:8a:57:e7:50:d6:50:
                    4b:4c:25:f4:7b:8b:69:8e:5b:a2:00:de:b7:28:20:
                    71:e5:95:45:ee:8a:2f:5d:63:3a:47:12:b9:96:1e:
                    9e:6b:8a:29:09:e7:81:a6:fc:d3:fd:bf:c4:3c:04:
                    3d:12:33:e8:50:32:b7:90:7d:2e:ef:1a:78:66:e5:
                    42:3f:b1:d9:0e:14:40:7b:79:c6:25:51:5f:76:61:
                    00:af:b5:2d:a6:73:2d:cc:fb:5f:14:6e:10:a4:77:
                    42:85:75:e8:63:16:1e:ab:02:35:89:6a:7f:9f:98:
                    47:bb:3b:5a:04:84:b7:9a:df:c0:c7:54:85:70:25:
                    09:ac:6b:76:77:47:06:29:08:2c:d9:55:05:e1:2a:
                    c7:6c:6b:24:74:0f:e1:68:be:ce:04:b2:90:79:5a:
                    00:d4:d3:1e:84:90:5e:4c:87:89:a2:34:a2:3d:04:
                    b7:e4:56:1c:ab:cd:30:fd:56:54:42:9b:96:57:0f:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:C6:D1:A8:42:3C:1B:73:DF:7F:C0:F0:DE:1C:C0:B9:E9:8F:8E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RZzG0ahCPBtz33_A8N4cwLnpj44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:f2:02:df:6d:73:29:55:22:c7:c5:92:eb:9a:66:c3:51:
         82:8c:6d:f2:6b:6f:63:ca:bf:e1:bd:c7:4a:17:0a:07:de:e4:
         11:bc:c4:ac:82:5a:60:3d:af:a7:46:23:9c:5b:06:f5:cd:79:
         ec:7e:33:80:4a:b2:6d:1b:e7:31:bd:24:6f:d2:24:fd:08:e8:
         56:4c:86:04:df:ad:f6:1a:91:07:c8:e1:8c:0e:6b:3f:ae:65:
         ae:46:d3:a5:9b:36:9c:a6:d6:94:9e:f5:e2:d2:79:42:99:d1:
         83:1a:53:95:12:f1:7d:07:39:5d:e4:22:8b:7a:9d:ea:77:ac:
         a5:dd:02:28:6f:8d:d2:34:52:d1:d2:24:39:e1:3f:bf:87:ce:
         6d:8b:5e:3a:20:1a:eb:70:44:21:f3:fb:d7:1a:bf:de:7c:fa:
         ed:01:e8:cd:e5:03:7c:4c:46:30:19:81:59:a5:cc:07:89:6b:
         77:87:a3:58:3e:b9:c4:66:2e:4e:f3:fd:d4:67:b6:c9:87:be:
         0f:41:7f:02:67:ad:22:dd:c1:75:98:cc:15:fd:87:94:4f:18:
         aa:7e:b5:40:47:fd:b6:19:74:1d:dc:5d:f7:3f:53:b8:36:4a:
         66:6b:ff:0d:e6:08:29:aa:68:69:32:fd:f9:7f:24:93:11:cc:
         e4:27:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:27 2025 by rpki-client