Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLdFavjQwg0is2OUmH3KdRXHU64.roa
File:                     WLdFavjQwg0is2OUmH3KdRXHU64.roa (raw, json)
Hash identifier:          wMtD/G478U3jS8Sv0hUlL9U53yBIoI0dn0RXAR6fOAs=
Subject key identifier:   58:B7:45:6A:F8:D0:C2:0D:22:B3:63:94:98:7D:CA:75:15:C7:53:AE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03C7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLdFavjQwg0is2OUmH3KdRXHU64.roa
Signing time:             Fri 01 Aug 2025 01:58:59 +0000
ROA not before:           Fri 01 Aug 2025 01:58:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        211.124.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=58B7456AF8D0C20D22B36394987DCA7515C753AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:0d:b5:0c:a1:e3:92:b7:93:d7:c6:09:fb:
                    66:5d:da:7b:e2:4a:53:21:9d:98:a9:b4:d0:01:af:
                    dd:78:f2:53:61:c9:36:b1:eb:10:29:fe:8c:40:c6:
                    2f:b5:9f:f4:2e:ec:82:e7:3c:4e:5f:b6:df:a7:5f:
                    3a:06:76:90:4f:4d:cf:90:a2:50:1e:dd:3f:b8:6c:
                    f7:59:5e:6f:ba:19:e2:31:45:43:c2:ae:d6:87:cd:
                    23:16:d4:58:34:ca:14:c0:ea:e7:a4:e8:d1:e2:5e:
                    95:45:95:b9:08:a7:94:e8:b3:70:78:e9:f9:f0:13:
                    1d:5f:14:a0:fe:d8:c5:b9:51:45:4f:df:f7:6b:98:
                    74:18:6f:e6:aa:fd:71:0f:2b:51:c3:e4:9e:d1:08:
                    39:88:2f:02:95:eb:cc:99:81:1d:b3:cc:70:5d:51:
                    b6:70:19:9c:e6:d0:18:ce:cf:91:9d:9f:18:48:6e:
                    eb:35:65:d6:d5:cf:b7:dc:48:ed:1f:e1:c7:f1:61:
                    fb:1a:97:b0:14:5a:9f:a4:cc:c8:b4:dc:8c:ed:4d:
                    fb:ea:53:e4:59:59:a5:ca:a8:6f:5d:33:44:24:4c:
                    45:8d:90:8d:9e:92:d5:cc:20:23:b5:f6:3d:d5:cf:
                    77:67:d6:62:9a:2e:05:ab:98:e8:f8:bb:74:70:25:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:45:6A:F8:D0:C2:0D:22:B3:63:94:98:7D:CA:75:15:C7:53:AE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WLdFavjQwg0is2OUmH3KdRXHU64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         e8:1b:ac:a7:a2:9c:46:4b:6c:0e:60:19:f4:07:5f:8a:5d:b6:
         59:e3:bf:24:b2:07:29:49:44:1b:00:e4:d2:ba:ec:66:7b:0f:
         f3:6b:75:72:80:94:60:1f:5a:49:39:38:2a:cf:8d:96:b3:58:
         13:c0:ad:74:5c:06:76:c1:f8:43:d1:d6:a2:02:f4:11:92:c3:
         0c:95:2b:eb:ca:19:80:36:62:2d:8c:fa:3c:77:c4:50:7d:07:
         a1:40:64:d6:45:e5:cb:6d:ea:72:f1:d8:cd:f8:9c:9d:69:46:
         b4:35:b5:d9:c6:0b:97:11:30:7e:41:0d:c6:ed:32:d4:23:3a:
         4f:ec:73:6e:d1:de:80:af:a9:23:fc:e3:e5:be:16:80:b8:ea:
         dd:c5:2d:19:5b:b7:eb:ce:46:39:80:56:63:6f:90:fb:b9:71:
         34:90:89:1b:93:da:e4:6f:01:72:6a:2d:ba:74:b1:94:f4:f9:
         92:bb:53:62:3c:a3:62:ca:6f:4a:db:c4:bb:df:3c:58:d7:3b:
         08:80:0a:28:a3:17:1f:61:b2:da:c6:03:79:6a:b8:58:31:29:
         e4:9d:ce:d7:db:05:47:5a:6c:35:bb:3e:69:ff:42:fa:b7:c4:
         83:a8:de:f9:08:83:0e:c3:13:3f:7d:66:e7:c2:a2:b4:7a:3f:
         f2:52:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:13:46 2025 by rpki-client