Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/djYPOdJywAE60STyA4PkfsUViQw.roa
File:                     djYPOdJywAE60STyA4PkfsUViQw.roa (raw, json)
Hash identifier:          O0h/zSljESyT5GVFC59CVtaTq3oJQr22+l7s/zNdbQU=
Subject key identifier:   76:36:0F:39:D2:72:C0:01:3A:D1:24:F2:03:83:E4:7E:C5:15:89:0C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03B5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/djYPOdJywAE60STyA4PkfsUViQw.roa
Signing time:             Fri 01 Aug 2025 01:58:48 +0000
ROA not before:           Fri 01 Aug 2025 01:58:48 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        61.46.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:48 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=76360F39D272C0013AD124F20383E47EC515890C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:3b:72:9e:51:37:b6:0b:ab:8c:30:75:7c:
                    bd:0d:7e:8d:7c:9c:50:70:bf:86:a2:d2:de:39:e6:
                    69:31:c3:61:8f:ce:0e:dd:ba:28:1a:67:94:14:4b:
                    e0:ab:eb:e9:a7:2a:7e:07:e0:02:a7:4b:94:ce:7f:
                    0e:6b:0f:7f:8c:c6:95:ad:cf:55:60:80:00:81:c4:
                    1b:51:b1:f8:9a:fa:1b:d8:7e:12:7b:4d:e7:62:ec:
                    e2:bd:01:20:56:1b:22:04:8b:4e:4d:e4:fc:15:f7:
                    25:5e:1d:d2:98:e7:5e:6e:59:3c:0f:75:c2:1b:dc:
                    e6:cd:27:9e:c8:6c:9b:16:af:1a:79:ef:6c:eb:0c:
                    81:56:aa:fc:e8:2e:35:5b:f8:33:74:2a:bf:16:99:
                    d5:d6:85:ff:76:45:1b:0c:ee:fb:8d:15:da:03:03:
                    d4:59:05:af:22:16:63:ef:b8:4d:f8:38:4b:c6:a9:
                    dc:23:19:32:f6:cb:c9:eb:94:71:a1:98:bf:fb:81:
                    2a:e6:8e:c5:7e:33:1e:9d:b5:9e:c5:c0:bd:e1:25:
                    25:80:ee:cb:c4:ab:56:47:d4:8f:68:da:b4:ef:36:
                    85:8c:0e:cd:66:79:3b:73:32:4a:be:a8:a7:ce:9d:
                    54:c0:ae:52:72:26:dc:ce:1d:b3:61:e6:17:4a:d4:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:0F:39:D2:72:C0:01:3A:D1:24:F2:03:83:E4:7E:C5:15:89:0C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/djYPOdJywAE60STyA4PkfsUViQw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:78:d7:33:f4:b0:f8:19:17:d1:89:78:80:62:09:84:6f:
         a4:45:07:1a:54:b3:4e:ad:66:f6:fa:8f:08:8e:96:16:a8:1e:
         9a:97:d2:6b:f0:80:56:a9:6b:38:f9:a5:76:b1:49:e3:aa:fb:
         b6:a4:cf:44:3e:b2:a3:66:9c:ae:33:30:2a:9d:80:70:cf:13:
         90:fa:8f:ee:0c:a5:00:2a:03:70:96:fe:4b:ff:26:7a:7f:a0:
         ad:6f:10:7c:47:ef:b5:61:94:bb:68:80:36:45:5d:6c:55:b3:
         46:ae:ab:ea:a8:8d:45:91:48:ea:be:c0:80:65:c5:8a:31:0b:
         9c:e5:e4:f9:42:93:6b:51:ba:a2:59:67:7a:75:34:0f:5d:bb:
         d0:48:10:a6:39:8c:cd:3f:e6:e8:0d:c7:53:14:4c:c4:d8:65:
         de:05:69:bb:e9:a7:8d:f1:b8:c3:06:a1:1e:b6:ac:75:48:cd:
         e6:6d:21:99:cc:9e:cf:25:92:22:30:93:80:96:24:1d:e0:ef:
         ab:65:eb:62:6b:ae:c0:e3:0a:d3:f2:47:b8:c2:8e:e2:64:7f:
         07:37:5e:d2:39:98:cb:71:89:bf:b4:fe:b2:bc:7e:11:97:b6:
         63:57:57:73:94:91:c5:d4:4d:15:36:86:47:bf:e6:65:3c:5c:
         e6:94:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:35 2025 by rpki-client