Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/e-fGyexPpvgsYPsVJgqu43E20gE.roa
File:                     e-fGyexPpvgsYPsVJgqu43E20gE.roa (raw, json)
Hash identifier:          EQ/PZ6x1veeu1TmHFDHQ2WiMK33pWfL3s5LYqQR47Mo=
Subject key identifier:   7B:E7:C6:C9:EC:4F:A6:F8:2C:60:FB:15:26:0A:AE:E3:71:36:D2:01
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0387
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e-fGyexPpvgsYPsVJgqu43E20gE.roa
Signing time:             Fri 01 Aug 2025 01:50:54 +0000
ROA not before:           Fri 01 Aug 2025 01:50:54 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        180.149.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:54 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7BE7C6C9EC4FA6F82C60FB15260AAEE37136D201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:e3:9f:8d:13:ef:ac:9f:ef:db:16:a1:1e:
                    20:fc:9a:7b:eb:74:25:73:8a:46:fb:08:c6:89:66:
                    0a:6b:b2:8c:8e:8c:6f:0a:00:98:62:be:2b:ca:5d:
                    a5:b9:a6:ae:94:4a:c4:11:3e:39:29:76:1b:5a:9d:
                    8d:7d:16:08:e5:e9:e3:c7:ed:ec:29:25:a0:27:7e:
                    04:d6:34:c9:15:9f:30:f7:73:91:93:93:18:f1:5f:
                    29:99:47:09:fc:5d:01:e0:65:a8:b2:81:51:f5:02:
                    5b:c7:5b:c2:ca:5b:89:25:98:1a:71:28:c3:3d:1e:
                    3d:75:ba:09:80:3c:07:7e:8f:5a:2f:b7:3c:95:49:
                    12:2b:e4:d0:c7:05:69:55:55:1a:7d:cf:54:f2:17:
                    0c:f4:33:f4:11:f0:21:28:1e:f5:7e:74:9f:d6:8a:
                    70:f7:89:80:1c:58:26:aa:70:11:2c:ce:e0:9e:da:
                    f6:7f:74:d3:c1:37:5d:f3:1f:9a:ee:3b:a0:7f:e4:
                    08:0d:17:28:0f:09:1c:de:cc:8f:eb:97:61:04:02:
                    21:a8:d9:e7:99:30:57:b9:b7:f5:17:42:cb:07:f4:
                    8c:8b:ca:7d:c6:89:40:73:5f:ff:d2:9d:ca:21:ad:
                    76:49:8e:14:80:68:dc:56:d7:f7:83:3b:2b:4e:10:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:C6:C9:EC:4F:A6:F8:2C:60:FB:15:26:0A:AE:E3:71:36:D2:01
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e-fGyexPpvgsYPsVJgqu43E20gE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:0d:28:3e:08:b4:39:93:ce:ad:97:27:03:fd:62:d8:3f:
         73:48:d4:3b:97:02:d6:a5:bd:da:d0:de:26:12:bf:e6:35:2e:
         36:fb:74:ed:f5:a1:f6:f3:b0:f5:50:cc:12:4a:5b:2c:f8:e7:
         91:4b:5f:5c:78:86:69:31:7d:b6:06:a6:05:8d:3f:fa:95:22:
         d5:1f:3c:03:2e:cb:2a:6c:ee:6b:7d:ba:f9:e6:31:5d:36:2f:
         30:5c:d9:0f:85:7d:32:34:90:3b:f6:a9:fd:34:ef:46:32:34:
         e1:2d:4a:af:14:dc:25:8e:93:ad:05:9e:e1:ed:81:6c:1d:6f:
         e4:78:9e:3c:00:7e:1e:de:ab:28:0b:8a:78:11:1b:ac:a7:0a:
         8d:0c:1c:23:b0:16:ed:f0:db:2b:ee:c8:8c:21:5b:f9:3b:9c:
         ec:24:c9:a4:7f:04:48:25:bd:a3:48:df:3a:8a:3b:d6:d0:78:
         7b:cc:ed:35:35:fa:97:b9:4e:d1:62:9b:a5:f7:37:6b:16:29:
         91:5e:11:18:9f:3f:0c:cc:be:f7:9f:33:15:88:43:c3:c7:0a:
         16:85:50:db:9c:4b:16:28:0c:41:6d:7e:e6:11:53:5f:3d:a5:
         4e:29:89:e4:77:c8:eb:88:d8:b0:01:32:a4:94:2d:f5:eb:a0:
         81:88:23:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTUwNTRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDdCRTdDNkM5RUM0RkE2
RjgyQzYwRkIxNTI2MEFBRUUzNzEzNkQyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCufOOfjRPvrJ/v2xahHiD8mnvrdCVzikb7CMaJZgprsoyOjG8K
AJhivivKXaW5pq6USsQRPjkpdhtanY19Fgjl6ePH7ewpJaAnfgTWNMkVnzD3c5GT
kxjxXymZRwn8XQHgZaiygVH1AlvHW8LKW4klmBpxKMM9Hj11ugmAPAd+j1ovtzyV
SRIr5NDHBWlVVRp9z1TyFwz0M/QR8CEoHvV+dJ/WinD3iYAcWCaqcBEszuCe2vZ/
dNPBN13zH5ruO6B/5AgNFygPCRzezI/rl2EEAiGo2eeZMFe5t/UXQssH9IyLyn3G
iUBzX//SncohrXZJjhSAaNxW1/eDOytOEBSlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUe+fGyexPpvgsYPsVJgqu43E20gEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2UtZkd5ZXhQcHZnc1lQc1ZKZ3F1NDNFMjBnRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW0laAwDQYJKoZIhvcNAQELBQADggEBAEKPDSg+CLQ5k86tlycD/WLYP3NI
1DuXAtalvdrQ3iYSv+Y1Ljb7dO31ofbzsPVQzBJKWyz455FLX1x4hmkxfbYGpgWN
P/qVItUfPAMuyyps7mt9uvnmMV02LzBc2Q+FfTI0kDv2qf0070YyNOEtSq8U3CWO
k60FnuHtgWwdb+R4njwAfh7eqygLingRG6ynCo0MHCOwFu3w2yvuyIwhW/k7nOwk
yaR/BEglvaNI3zqKO9bQeHvM7TU1+pe5TtFim6X3N2sWKZFeERifPwzMvvefMxWI
Q8PHChaFUNucSxYoDEFtfuYRU189pU4pieR3yOuI2LABMqSULfXroIGIIxg=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:51 2025 by rpki-client