Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UsVNfxtA2v85UzsRYyXMIbsbqgA.roa
File:                     UsVNfxtA2v85UzsRYyXMIbsbqgA.roa (raw, json)
Hash identifier:          KRZ6C5CGNFmaQJEQ6X3zCXuBHlH/RuFCuILX03dzEME=
Subject key identifier:   52:C5:4D:7F:1B:40:DA:FF:39:53:3B:11:63:25:CC:21:BB:1B:AA:00
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03BF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UsVNfxtA2v85UzsRYyXMIbsbqgA.roa
Signing time:             Fri 01 Aug 2025 01:58:55 +0000
ROA not before:           Fri 01 Aug 2025 01:58:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        122.102.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=52C54D7F1B40DAFF39533B116325CC21BB1BAA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:80:40:09:1f:48:fd:ad:75:63:de:06:8d:
                    53:d2:ee:20:dd:e9:66:63:7b:86:ab:ea:d4:6d:f8:
                    af:25:d4:51:3c:b6:a1:b9:be:da:0d:2d:1e:c7:22:
                    83:5f:6f:18:29:f1:41:8e:66:de:46:60:c3:91:5a:
                    98:bf:44:43:07:ff:91:e0:1e:a2:fa:6f:b0:21:e0:
                    2f:02:9e:15:80:97:e2:2f:1e:23:b5:61:53:04:a9:
                    3e:27:ca:b7:16:e5:12:9c:75:2c:57:01:67:fd:69:
                    53:15:75:08:8b:39:49:10:c8:be:79:b7:bb:0b:bc:
                    0e:e9:d2:61:53:1e:11:b2:ea:24:75:a3:56:f4:95:
                    be:a1:41:c9:c2:13:b6:ea:90:67:36:ef:e7:6c:1b:
                    74:4d:32:fb:51:83:19:9a:77:84:99:42:a7:7f:55:
                    fc:d0:a4:8f:34:c8:82:61:f7:d1:ca:f9:4a:bb:44:
                    cb:7d:7c:61:de:82:67:00:14:a1:72:6d:8f:79:92:
                    18:48:d8:dc:b5:4b:d3:2b:f3:54:63:3a:07:69:fd:
                    2d:8e:a8:bb:df:74:db:12:e6:1b:a9:5e:e6:47:c8:
                    c9:69:a8:27:8b:26:98:58:8c:3d:79:0d:6b:bb:72:
                    be:1b:fa:89:e6:f4:99:9d:97:32:2e:43:8e:19:aa:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:4D:7F:1B:40:DA:FF:39:53:3B:11:63:25:CC:21:BB:1B:AA:00
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UsVNfxtA2v85UzsRYyXMIbsbqgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.102.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:9b:2a:ae:81:7a:d6:17:a3:af:f3:47:e0:8e:3a:77:fa:
         24:69:a1:96:b6:3b:92:31:10:8e:42:97:9f:1d:95:e6:29:a5:
         6d:a0:62:17:56:dc:83:31:19:3b:8a:72:74:fc:0c:e9:37:47:
         d2:fa:25:fd:fc:0a:f5:ad:35:54:54:38:ab:be:41:0e:8e:12:
         61:66:8e:40:5c:3c:48:e4:04:96:0b:3e:28:2c:b0:18:b9:94:
         ae:fd:3e:8d:0d:8d:c8:cb:e6:0c:75:71:00:b7:fe:12:f5:87:
         40:9c:0f:7c:3a:e8:b3:a2:76:e1:23:b4:8c:3a:56:58:83:63:
         7e:44:5d:53:38:83:40:55:f5:71:06:c5:d1:fc:5d:8d:e0:ab:
         1e:92:b5:82:51:ec:76:17:e7:ac:4f:45:8f:c7:7d:49:b3:da:
         b6:3d:9a:31:c5:de:7c:25:5d:42:a1:e8:68:31:ba:29:f2:27:
         a7:0d:04:ba:60:62:7b:07:82:6b:85:a0:85:e9:ab:9b:82:33:
         4a:07:55:47:84:d2:41:ae:7c:be:0e:5b:0d:11:65:8e:20:be:
         5b:70:7e:e9:4f:b6:f4:38:04:d6:3e:7a:b6:db:e8:bd:bb:71:
         b4:b9:32:cf:3d:12:63:4d:62:fe:93:43:00:2f:d7:78:3f:7f:
         d3:17:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:32 2025 by rpki-client