Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/jWelaIhAVdSSx7sZrqzy4PpEV1c.roa
File:                     jWelaIhAVdSSx7sZrqzy4PpEV1c.roa (raw, json)
Hash identifier:          XqjVV9fotbvGtf3gGQZeHRfWrIzt3KZ3q2KaxYfxZmo=
Subject key identifier:   8D:67:A5:68:88:40:55:D4:92:C7:BB:19:AE:AC:F2:E0:FA:44:57:57
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0367
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jWelaIhAVdSSx7sZrqzy4PpEV1c.roa
Signing time:             Fri 01 Aug 2025 01:43:52 +0000
ROA not before:           Fri 01 Aug 2025 01:43:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        61.203.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8D67A568884055D492C7BB19AEACF2E0FA445757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:04:01:e0:74:44:d9:e6:ae:5b:9e:af:35:
                    df:c9:d2:02:1b:f9:3a:56:e8:af:97:06:9f:41:c5:
                    94:35:1c:f2:cb:fa:35:45:bb:d8:a4:5d:d6:f3:34:
                    f0:60:c0:69:84:e2:56:39:e5:57:45:1b:37:d3:c5:
                    a8:2d:3d:43:29:e5:a9:1d:a4:d0:cf:b4:e5:89:7c:
                    57:db:60:71:a8:91:59:86:d9:db:65:a5:bb:a5:71:
                    92:8f:fe:59:81:e7:cf:fb:20:b1:dd:2c:67:26:b3:
                    d8:f2:14:60:7b:07:a9:9d:16:13:92:89:ef:14:1a:
                    da:ca:0d:c5:2e:ea:af:a4:a8:fb:ab:08:b8:17:37:
                    17:1b:0b:9b:c8:9c:d7:e7:31:f7:10:54:82:71:ba:
                    55:43:d7:bc:14:47:1f:13:9a:41:b8:0f:c3:dd:07:
                    05:94:43:5d:c0:bf:b7:7c:a7:c6:da:1c:22:c8:3b:
                    74:4d:47:df:be:de:3a:7b:71:29:15:33:a8:af:2b:
                    2b:a3:58:cd:b1:fb:14:72:04:4d:38:21:55:4c:1f:
                    eb:4f:3a:fd:ad:91:65:fa:09:6e:af:7d:6d:3a:a6:
                    58:a7:0e:6c:93:a2:7a:19:59:72:ee:2f:1b:96:89:
                    d2:92:ed:5c:ab:6f:08:be:0d:63:f5:dd:a0:3f:d6:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:67:A5:68:88:40:55:D4:92:C7:BB:19:AE:AC:F2:E0:FA:44:57:57
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/jWelaIhAVdSSx7sZrqzy4PpEV1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d5:62:95:ac:81:b6:a1:ff:37:17:e2:1e:4d:63:87:b1:aa:65:
         41:ef:67:eb:a1:bb:6d:63:53:e0:28:ff:5a:43:75:f9:47:c0:
         28:f0:2d:c7:fc:f7:57:9e:5c:52:16:54:3c:38:82:fa:53:41:
         80:bb:3c:b1:36:75:d8:a1:c3:a9:7d:df:b6:01:a3:c2:ca:1d:
         1b:88:71:e0:e1:38:be:b8:f0:9b:75:99:53:ef:ff:35:56:74:
         2e:d3:01:58:46:fd:b9:3f:be:c8:4e:c1:2a:cf:9b:12:0b:1a:
         7d:bc:a8:c3:02:49:fd:e6:51:15:d9:cc:49:71:91:b6:e3:1d:
         8d:5a:62:ab:74:85:63:11:0d:0d:46:d3:ee:ab:6e:21:b5:77:
         8e:02:d5:57:79:9a:97:d7:95:87:af:dd:0e:94:65:82:b9:48:
         d0:17:26:39:ba:b7:e5:25:ea:1a:1e:1d:eb:12:d4:b0:1a:34:
         1f:58:82:c9:0b:8b:25:a8:9b:6b:aa:52:ad:46:3d:b0:60:30:
         7d:a2:88:1e:dc:7e:3d:8b:ae:b6:d6:1d:c0:1d:ac:f0:2a:81:
         64:60:df:59:2c:66:fb:b2:c9:85:a6:6a:d0:f7:30:94:72:de:
         c7:f4:e6:87:2e:54:70:1e:4c:95:51:08:88:14:5b:f4:75:57:
         f1:a1:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:43 2025 by rpki-client