Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/dvqmoBaJ37JQ230EalDL3XEMKew.roa
File:                     dvqmoBaJ37JQ230EalDL3XEMKew.roa (raw, json)
Hash identifier:          HJIG2dqqKHv8/9NfJMAMQ+Wz6aunmcmdCDqTWDcF6p8=
Subject key identifier:   76:FA:A6:A0:16:89:DF:B2:50:DB:7D:04:6A:50:CB:DD:71:0C:29:EC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       033F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dvqmoBaJ37JQ230EalDL3XEMKew.roa
Signing time:             Fri 01 Aug 2025 01:40:00 +0000
ROA not before:           Fri 01 Aug 2025 01:40:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18134
IP address blocks:        202.57.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=76FAA6A01689DFB250DB7D046A50CBDD710C29EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:2b:24:9b:0a:80:7d:10:f3:09:75:49:1f:
                    a5:f7:12:4e:00:4b:8c:f4:28:36:68:56:98:fa:71:
                    ef:eb:66:86:98:5a:ce:29:44:cf:58:81:47:c1:ce:
                    ca:91:58:9e:57:3e:a0:a7:75:a6:a3:ae:68:21:e6:
                    e3:7d:f6:59:37:fb:61:dd:9e:89:b0:bd:f2:65:da:
                    16:27:f4:0c:96:b3:f1:1a:32:88:3f:82:2a:18:af:
                    a5:f3:ad:e9:f1:a7:cd:64:fa:1f:a2:4c:7f:7a:cc:
                    40:e3:bf:62:42:39:1a:33:88:9d:85:7b:99:1d:28:
                    53:d2:1c:af:5b:16:fa:d3:48:cc:cf:b7:32:5d:48:
                    36:93:44:b2:b0:2e:af:48:ec:65:6f:4e:a3:1d:0e:
                    3f:b8:77:9d:7f:00:89:c0:b9:62:3f:5b:17:e3:b6:
                    09:96:1d:30:4b:99:b3:95:9c:16:30:13:b3:e9:eb:
                    8b:06:91:b9:f2:ef:a0:24:62:9e:dd:8c:be:03:ea:
                    8c:c6:81:2c:e2:53:51:ac:f9:38:80:fc:dc:2b:87:
                    b3:20:83:42:25:b1:ad:e7:1d:74:ba:ff:e6:9a:c3:
                    79:ad:14:07:68:02:89:4b:91:cb:40:10:2e:6e:f2:
                    33:2b:e1:0a:38:37:45:ac:06:a4:80:b5:a0:7a:ff:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:A6:A0:16:89:DF:B2:50:DB:7D:04:6A:50:CB:DD:71:0C:29:EC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/dvqmoBaJ37JQ230EalDL3XEMKew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:76:36:bb:70:c3:3e:26:79:8e:39:06:4a:7f:8b:d1:89:fb:
         78:bb:14:a1:ae:9c:3b:54:72:e6:89:15:82:a4:cd:02:26:34:
         28:eb:c7:a5:d0:ed:50:32:af:6f:6a:bb:62:f6:cc:ab:d2:10:
         f5:a0:b8:82:97:f2:45:b7:bb:24:19:79:5b:fb:00:c0:df:18:
         75:02:f1:c8:3e:da:0e:2e:5d:83:b8:67:e9:b3:05:84:43:9e:
         7e:07:9f:0e:e5:e0:f2:b5:49:a6:6b:89:81:d6:fb:39:b9:7f:
         d1:32:bc:7a:b5:cd:75:4d:a2:ff:a7:a2:1b:3b:ad:7c:84:19:
         5c:aa:63:c3:9f:9f:95:ca:73:94:d0:59:22:00:10:9c:87:26:
         57:58:05:b3:53:f7:8e:5d:91:dc:1d:33:31:af:cc:02:af:de:
         16:ad:94:68:c8:6b:5c:da:fc:6b:01:5e:62:60:27:46:a2:39:
         ac:58:b6:26:2d:48:8e:38:08:b0:78:d3:51:11:b0:8d:c2:eb:
         5b:6d:ae:74:46:bf:1b:b0:d0:09:fb:f8:29:2d:03:55:c9:8a:
         07:fd:a4:2a:c3:ac:b5:a3:de:40:15:0b:78:58:bc:35:b1:1d:
         fb:2b:0d:00:57:0f:c1:88:fd:18:65:26:ba:1f:7c:4c:7e:c3:
         2c:f9:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:16:23 2025 by rpki-client