Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/U6MhtFEXJdK_PNC-3OHmgTy0L2E.roa
File:                     U6MhtFEXJdK_PNC-3OHmgTy0L2E.roa (raw, json)
Hash identifier:          aes/OdLBF3BHF+hpgh4wCD1rUuqIRgYNaaaDo+Ei0Z4=
Subject key identifier:   53:A3:21:B4:51:17:25:D2:BF:3C:D0:BE:DC:E1:E6:81:3C:B4:2F:61
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0369
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U6MhtFEXJdK_PNC-3OHmgTy0L2E.roa
Signing time:             Fri 01 Aug 2025 01:47:09 +0000
ROA not before:           Fri 01 Aug 2025 01:47:09 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        110.4.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:09 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=53A321B4511725D2BF3CD0BEDCE1E6813CB42F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:83:16:bf:86:da:96:92:2a:a2:eb:44:fd:
                    b0:d0:6a:21:05:98:6c:2b:c8:74:c2:b0:f3:65:90:
                    f2:eb:95:5f:3d:e5:a1:bf:b1:a0:9b:ac:06:74:83:
                    09:2e:d9:6f:4b:a7:10:30:7f:06:de:a2:86:3d:94:
                    da:dd:3e:64:33:70:77:fa:2d:6c:a8:77:f5:1d:a0:
                    85:80:48:b2:34:8a:67:f2:91:6b:75:89:64:55:79:
                    35:5a:0c:00:b7:94:9b:b0:49:7a:a8:1d:04:63:30:
                    c6:c0:ec:8d:4b:a3:f1:0a:67:73:12:d4:61:f8:18:
                    ba:71:0d:bd:aa:26:54:36:1c:81:a9:6f:85:05:19:
                    19:41:f5:7e:16:d1:aa:cf:b1:62:47:79:53:79:ba:
                    f7:7b:dc:86:66:34:ab:c8:7b:88:4d:87:90:01:8b:
                    96:32:7e:f9:28:82:50:7e:52:65:bc:c6:3f:d5:1d:
                    be:2a:be:9d:51:1c:43:b0:d0:79:be:41:2f:a7:e3:
                    8d:74:3e:84:6a:ba:f9:9f:f3:1c:5c:84:e8:7d:87:
                    72:ca:69:80:58:d8:26:64:0c:35:4d:a5:e4:15:11:
                    94:19:09:df:96:0d:22:90:a1:b5:a4:13:e1:ba:c4:
                    57:40:db:a7:e9:85:05:c2:bc:9d:06:54:29:d2:45:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A3:21:B4:51:17:25:D2:BF:3C:D0:BE:DC:E1:E6:81:3C:B4:2F:61
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U6MhtFEXJdK_PNC-3OHmgTy0L2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:43:43:a6:3b:01:ce:cc:7e:f2:9d:e8:1a:83:d2:a5:97:
         a5:b8:24:78:f1:74:3d:76:da:14:92:85:87:ea:81:95:df:ac:
         c3:82:e3:27:95:79:37:90:ca:da:24:8e:45:ab:02:bf:2a:25:
         a5:e0:0f:3c:0f:8a:11:90:aa:58:23:60:c9:be:6b:dd:93:4f:
         2c:c1:63:4f:02:ab:b4:67:d8:3b:81:99:97:f5:f4:d3:8f:28:
         86:7f:16:40:af:68:eb:e2:ce:2a:b9:16:6a:a5:9b:94:2d:a0:
         dd:fa:5f:11:f7:09:43:5c:2b:c5:07:75:33:11:1f:c1:a1:ef:
         ed:71:e2:45:8a:d2:b6:d7:73:d7:de:79:72:0d:c9:96:40:06:
         d6:97:e6:e1:0b:05:6e:fb:d3:40:b1:c5:66:01:2b:95:d0:8f:
         29:72:c3:84:7a:37:0d:d2:77:0c:f9:e6:06:00:78:2b:11:99:
         45:9e:28:6e:44:ae:e0:04:b5:79:95:16:5a:d9:b4:1f:14:46:
         eb:98:88:84:bb:f0:d5:4d:31:9f:a2:2f:fe:b4:91:d1:c4:25:
         17:1c:8f:54:17:f1:ce:c0:0e:69:0b:85:30:7f:89:97:71:32:
         36:b9:f4:3e:8b:d5:72:0d:db:c0:18:66:00:f4:fd:2e:09:ca:
         f5:08:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:15 2025 by rpki-client