Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VmBiX1TW5j4aVW8VVVRuUOrhIxE.roa
File:                     VmBiX1TW5j4aVW8VVVRuUOrhIxE.roa (raw, json)
Hash identifier:          2ZGaO7lmzhjEpdo7en62mFcwyhYwgyTcZ7083E9xidM=
Subject key identifier:   56:60:62:5F:54:D6:E6:3E:1A:55:6F:15:55:54:6E:50:EA:E1:23:11
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       032A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VmBiX1TW5j4aVW8VVVRuUOrhIxE.roa
Signing time:             Fri 01 Aug 2025 01:34:52 +0000
ROA not before:           Fri 01 Aug 2025 01:34:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9378
IP address blocks:        61.215.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=5660625F54D6E63E1A556F1555546E50EAE12311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:d5:b2:7b:e8:9b:ff:db:b5:a2:ce:56:60:
                    f7:c2:56:e7:21:1a:53:96:2f:2a:21:7a:f1:b1:f0:
                    81:3a:f9:9d:70:08:ad:05:45:84:aa:e7:0d:b7:c9:
                    8d:40:23:17:99:78:6b:91:de:47:78:c6:dc:af:95:
                    0f:24:7c:76:24:a7:44:32:7f:9d:4e:c8:71:48:45:
                    2a:97:2f:5a:15:6d:31:fc:25:2f:b9:93:aa:33:6b:
                    32:c0:96:13:98:03:0d:50:d0:60:ca:0f:81:66:cc:
                    4d:f2:2a:9f:36:e3:b8:dd:05:17:f0:a0:40:72:7b:
                    a2:42:bb:a9:d5:ad:34:19:fc:b5:bf:60:23:a7:21:
                    2c:08:43:72:56:b9:68:c8:48:10:16:2b:d6:d8:3b:
                    2b:b8:00:69:91:8e:f0:19:79:39:b3:9f:2f:1a:d6:
                    a6:29:08:c8:63:2e:b3:5d:8e:16:d0:59:4b:f9:c9:
                    f2:d5:c0:82:53:94:b6:e0:f1:ec:29:88:03:43:77:
                    23:da:c4:f0:2e:93:06:02:22:a1:04:2a:e7:65:f8:
                    52:35:d8:22:5c:a7:e2:4f:0d:d9:f3:21:e6:dd:43:
                    ac:49:b2:48:d3:bc:03:b7:d3:9e:6b:5e:1a:b6:b6:
                    41:36:e0:35:9d:66:08:3c:b1:77:c3:72:56:31:43:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:60:62:5F:54:D6:E6:3E:1A:55:6F:15:55:54:6E:50:EA:E1:23:11
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VmBiX1TW5j4aVW8VVVRuUOrhIxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:ee:f9:75:5e:82:09:87:2a:b2:7e:c7:84:68:33:23:c7:
         fb:d3:72:f7:ae:44:a9:5a:9c:19:69:43:59:be:61:dd:2d:59:
         f3:04:71:a6:4e:ba:32:04:8c:10:79:a7:ed:8a:2f:5e:ff:79:
         e8:89:51:a5:9d:b0:8a:f9:2c:d3:a3:d0:a8:ae:e4:2c:ce:52:
         31:19:69:08:50:67:e0:d1:00:9e:d7:d8:8b:e1:5e:1f:da:55:
         d4:1f:07:ad:4b:35:c0:eb:d4:4c:3c:b5:72:0b:c4:6c:bb:9f:
         0a:97:0e:a1:5c:cc:4d:69:4e:46:22:33:5d:09:f2:4e:77:ab:
         85:66:da:f7:3f:c8:c4:d4:e7:f3:01:e8:d6:03:7b:3d:72:bb:
         a8:24:81:92:22:f7:db:b4:97:22:bb:33:49:56:2d:ab:96:3e:
         1c:85:be:2b:82:c0:b2:fc:2b:cb:a7:5b:a6:8a:58:12:03:cb:
         cc:20:84:31:a2:ea:56:60:f6:cf:2c:6a:b1:3d:8e:54:5b:34:
         50:ed:2e:2c:59:89:aa:ab:c3:0b:ee:81:e1:b3:21:4e:bb:09:
         57:29:58:23:ed:4b:dc:97:0e:4f:7c:d6:2a:54:ea:42:e5:8f:
         1b:cc:f7:a0:8a:60:00:30:e4:21:34:4a:c3:09:8a:83:24:32:
         90:28:17:b0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTM0NTJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDU2NjA2MjVGNTRENkU2
M0UxQTU1NkYxNTU1NTQ2RTUwRUFFMTIzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt4tWye+ib/9u1os5WYPfCVuchGlOWLyohevGx8IE6+Z1wCK0F
RYSq5w23yY1AIxeZeGuR3kd4xtyvlQ8kfHYkp0Qyf51OyHFIRSqXL1oVbTH8JS+5
k6ozazLAlhOYAw1Q0GDKD4FmzE3yKp8247jdBRfwoEBye6JCu6nVrTQZ/LW/YCOn
ISwIQ3JWuWjISBAWK9bYOyu4AGmRjvAZeTmzny8a1qYpCMhjLrNdjhbQWUv5yfLV
wIJTlLbg8ewpiANDdyPaxPAukwYCIqEEKudl+FI12CJcp+JPDdnzIebdQ6xJskjT
vAO3055rXhq2tkE24DWdZgg8sXfDclYxQylnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVmBiX1TW5j4aVW8VVVRuUOrhIxEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1ZtQmlYMVRXNWo0YVZXOFZWVlJ1VU9yaEl4RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ916AwDQYJKoZIhvcNAQELBQADggEBAHct7vl1XoIJhyqyfseEaDMjx/vT
cveuRKlanBlpQ1m+Yd0tWfMEcaZOujIEjBB5p+2KL17/eeiJUaWdsIr5LNOj0Kiu
5CzOUjEZaQhQZ+DRAJ7X2IvhXh/aVdQfB61LNcDr1Ew8tXILxGy7nwqXDqFczE1p
TkYiM10J8k53q4Vm2vc/yMTU5/MB6NYDez1yu6gkgZIi99u0lyK7M0lWLauWPhyF
viuCwLL8K8unW6aKWBIDy8wghDGi6lZg9s8sarE9jlRbNFDtLixZiaqrwwvugeGz
IU67CVcpWCPtS9yXDk981ipU6kLljxvM96CKYAAw5CE0SsMJioMkMpAoF7A=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:57 2025 by rpki-client