Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/S0P0dWkGXrxOG5q7IhM3V7vqhjE.roa
File:                     S0P0dWkGXrxOG5q7IhM3V7vqhjE.roa (raw, json)
Hash identifier:          zJnkHgLXlr7egTCDbnTHvwdp4gUtbjRA/iHdPhl2Lds=
Subject key identifier:   4B:43:F4:75:69:06:5E:BC:4E:1B:9A:BB:22:13:37:57:BB:EA:86:31
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0398
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/S0P0dWkGXrxOG5q7IhM3V7vqhjE.roa
Signing time:             Fri 01 Aug 2025 01:54:50 +0000
ROA not before:           Fri 01 Aug 2025 01:54:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        203.124.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=4B43F47569065EBC4E1B9ABB22133757BBEA8631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:6f:b7:1d:b0:99:6c:f2:64:cd:cf:a1:05:
                    db:72:7f:e6:03:73:73:7b:64:38:bf:9a:b9:97:06:
                    dc:f3:d8:42:b2:63:2f:d8:09:60:a9:63:d1:6f:39:
                    8d:40:a3:42:04:4d:24:5e:ad:30:7d:f4:75:24:f3:
                    ac:23:58:30:b3:ff:f9:96:7a:44:ea:d5:09:96:fb:
                    a5:e6:56:09:6d:cd:8a:a1:da:89:f2:32:aa:f4:9c:
                    01:9c:dc:e3:3d:56:a2:21:4c:20:0f:9f:79:d4:35:
                    be:3e:d5:5d:54:6f:e2:0c:7b:7e:07:6e:d2:0a:53:
                    f7:98:cd:b0:54:d2:19:27:39:07:0d:48:14:0f:cb:
                    21:1e:a5:10:72:a6:4b:5f:5b:2a:1f:41:90:71:e3:
                    bd:17:5b:5e:ae:55:29:d5:e1:0f:c9:b6:67:15:40:
                    aa:80:10:cf:23:c5:9e:2d:46:c3:b9:75:96:68:78:
                    2e:28:b6:c2:08:b9:41:ac:9d:d6:bc:81:bf:d9:cd:
                    c2:f5:15:1c:af:f6:2f:1d:38:ce:08:69:1b:f1:d1:
                    2c:90:30:fa:51:58:c0:ec:02:68:03:6e:7c:c4:39:
                    44:5b:84:7f:10:d3:3f:0c:92:5e:ca:a8:4c:33:9a:
                    30:ac:ec:b1:11:ad:3e:f8:02:32:fc:96:da:ad:d8:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:43:F4:75:69:06:5E:BC:4E:1B:9A:BB:22:13:37:57:BB:EA:86:31
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/S0P0dWkGXrxOG5q7IhM3V7vqhjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:c6:42:75:77:36:e4:65:84:52:e7:ce:bd:01:b6:ef:d9:
         bb:1d:01:58:37:a2:20:7c:0d:8e:74:20:2a:de:02:fa:06:f8:
         5e:f6:f1:ab:a8:2e:47:5b:d4:9b:d1:8d:f5:ab:9a:d4:0e:d7:
         25:79:4f:63:8e:83:4a:0e:83:f7:d1:77:93:7b:56:3b:4f:b4:
         8c:83:6d:df:f3:e0:52:23:e0:55:46:4c:1d:37:3c:a9:71:65:
         e7:bd:15:6a:97:65:85:9c:8e:fe:d8:6e:5d:34:3e:32:ed:13:
         8c:37:0b:93:01:49:d0:58:99:77:fc:29:51:9d:ff:1f:9f:45:
         41:92:ee:f3:69:b5:40:25:0a:b0:8d:49:03:bf:67:31:29:82:
         18:69:ff:b0:28:aa:de:59:83:fe:c8:2a:b4:59:a6:6d:51:30:
         09:fc:e7:80:cc:82:bb:2d:1b:df:6e:3d:b8:e0:e9:82:7c:fe:
         8f:b4:df:0d:26:38:37:79:64:ef:eb:85:7b:ff:1a:d7:4f:4a:
         2c:ff:da:7c:bc:87:1e:1d:1b:63:35:8e:ad:93:30:1e:e0:f2:
         55:a2:a8:2e:09:ef:55:a4:8d:46:61:51:d4:9c:3b:9f:ad:0e:
         56:a1:9d:45:9e:e7:b6:e9:1c:8a:07:9a:fa:cd:6d:6c:d6:6f:
         c8:91:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:26 2025 by rpki-client