Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_J_oGpIZGDaI2IpawzioheNLjYU.roa
File:                     _J_oGpIZGDaI2IpawzioheNLjYU.roa (raw, json)
Hash identifier:          whKzRAlg0LP3KicCX+/eM2QfsHT5FrU5KLV0oORjOJM=
Subject key identifier:   FC:9F:E8:1A:92:19:18:36:88:D8:8A:5A:C3:38:A8:85:E3:4B:8D:85
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       037F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_J_oGpIZGDaI2IpawzioheNLjYU.roa
Signing time:             Fri 01 Aug 2025 01:47:22 +0000
ROA not before:           Fri 01 Aug 2025 01:47:22 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        115.42.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:22 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FC9FE81A9219183688D88A5AC338A885E34B8D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:a1:39:f9:ed:b1:e5:a7:0b:8c:0e:48:61:
                    55:46:76:33:ae:51:2a:54:c0:e9:b8:d6:a9:e6:34:
                    c2:d7:dd:37:d4:c7:7f:1d:60:dc:ab:5c:6f:f3:ce:
                    7f:e7:7a:af:25:b6:2a:93:57:d1:b0:e9:5f:01:4b:
                    fb:78:e9:62:2c:01:6b:c2:a8:8f:c8:00:85:36:d2:
                    7a:0f:77:05:6f:a4:58:51:61:ee:0f:8c:30:eb:ec:
                    ef:1d:e8:1b:f8:a0:7d:e8:15:c8:7a:41:00:77:a8:
                    77:a2:ea:15:62:c0:33:4b:9b:5a:f2:6c:9b:21:f2:
                    ac:4e:2c:af:e0:37:e5:9a:bb:e8:69:dd:d4:c4:44:
                    a8:0c:a9:67:18:ec:b0:78:ec:ae:cb:fa:06:53:a0:
                    06:3c:2d:f2:b3:d9:ec:cc:5f:57:c1:ea:6b:07:44:
                    01:6b:1c:fa:61:13:90:6a:2f:02:bd:2b:d4:c8:06:
                    75:84:db:c7:36:35:81:23:0e:e3:5f:f2:6f:9c:45:
                    a7:ee:26:d4:66:e7:12:2e:e3:bd:3c:f7:6a:c6:e9:
                    a5:b1:83:d5:fe:77:e9:7f:aa:88:29:5c:b6:da:4d:
                    10:44:3d:34:bd:6e:6e:52:48:7f:65:65:96:21:3e:
                    17:85:98:b7:a6:a8:cd:ab:6c:06:90:5a:c7:3b:5b:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9F:E8:1A:92:19:18:36:88:D8:8A:5A:C3:38:A8:85:E3:4B:8D:85
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_J_oGpIZGDaI2IpawzioheNLjYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:f1:2c:95:70:95:0b:2f:32:80:22:de:3f:25:7d:c9:2d:
         e6:a1:d5:10:d6:76:af:e2:b5:27:0e:6a:c6:78:df:d3:b1:85:
         06:c9:6e:03:91:27:dd:43:15:87:54:c8:7b:0a:21:5d:ea:b0:
         84:3a:0a:9a:eb:3a:ab:b2:c0:b2:c4:95:ea:3d:d9:de:f7:d4:
         d8:3f:7c:d0:9c:04:a2:87:e9:bf:4f:ca:d3:de:ec:e2:e6:17:
         5e:57:ca:8f:19:64:7a:03:f3:de:71:0c:8e:04:82:61:a0:b9:
         c2:22:5d:54:30:77:1d:40:44:df:31:07:e0:fb:5f:3f:95:32:
         63:fc:d2:d1:e8:7b:29:d1:00:7a:7f:52:45:cc:40:51:e3:24:
         1b:7a:1c:c6:be:ec:0d:b5:5f:5f:b8:a1:79:17:7a:6b:44:70:
         82:bf:48:96:9a:93:95:60:19:10:70:07:70:2f:c5:93:78:0b:
         d7:b2:54:6d:74:ab:c7:e6:13:b3:43:f3:1c:c6:3c:04:37:bf:
         95:3a:33:c6:bc:a4:5a:8c:cb:46:22:70:01:a5:bb:59:78:6d:
         68:57:14:ad:66:d7:5e:da:95:47:e2:21:09:cb:97:6a:eb:24:
         7e:ab:a0:16:14:89:94:aa:4c:bb:88:43:7d:08:d7:60:8d:d3:
         32:39:eb:12
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQ3MjJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEZDOUZFODFBOTIxOTE4
MzY4OEQ4OEE1QUMzMzhBODg1RTM0QjhEODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZPqE5+e2x5acLjA5IYVVGdjOuUSpUwOm41qnmNMLX3TfUx38d
YNyrXG/zzn/neq8ltiqTV9Gw6V8BS/t46WIsAWvCqI/IAIU20noPdwVvpFhRYe4P
jDDr7O8d6Bv4oH3oFch6QQB3qHei6hViwDNLm1rybJsh8qxOLK/gN+Wau+hp3dTE
RKgMqWcY7LB47K7L+gZToAY8LfKz2ezMX1fB6msHRAFrHPphE5BqLwK9K9TIBnWE
28c2NYEjDuNf8m+cRafuJtRm5xIu470892rG6aWxg9X+d+l/qogpXLbaTRBEPTS9
bm5SSH9lZZYhPheFmLemqM2rbAaQWsc7W1QFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/J/oGpIZGDaI2IpawzioheNLjYUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL19KX29HcElaR0RhSTJJcGF3emlvaGVOTGpZVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARzKmAwDQYJKoZIhvcNAQELBQADggEBACxL8SyVcJULLzKAIt4/JX3JLeah
1RDWdq/itScOasZ439OxhQbJbgORJ91DFYdUyHsKIV3qsIQ6CprrOquywLLEleo9
2d731Ng/fNCcBKKH6b9PytPe7OLmF15Xyo8ZZHoD895xDI4EgmGgucIiXVQwdx1A
RN8xB+D7Xz+VMmP80tHoeynRAHp/UkXMQFHjJBt6HMa+7A21X1+4oXkXemtEcIK/
SJaak5VgGRBwB3AvxZN4C9eyVG10q8fmE7ND8xzGPAQ3v5U6M8a8pFqMy0YicAGl
u1l4bWhXFK1m117alUfiIQnLl2rrJH6roBYUiZSqTLuIQ30I12CN0zI56xI=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:50 2025 by rpki-client