Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/kOqoLF8pQ26ZajYsYmSFqCSgs54.roa
File:                     kOqoLF8pQ26ZajYsYmSFqCSgs54.roa (raw, json)
Hash identifier:          F3wrfXgRTTKZzvQ4rIuVGjpCtdhoZLLiRu0BxZQr7vg=
Subject key identifier:   90:EA:A8:2C:5F:29:43:6E:99:6A:36:2C:62:64:85:A8:24:A0:B3:9E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03B8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kOqoLF8pQ26ZajYsYmSFqCSgs54.roa
Signing time:             Fri 01 Aug 2025 01:58:50 +0000
ROA not before:           Fri 01 Aug 2025 01:58:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        61.125.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=90EAA82C5F29436E996A362C626485A824A0B39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:47:50:2e:0f:3a:d1:22:d4:fc:05:79:16:
                    e5:88:59:13:b5:2c:b3:c9:3b:27:55:ee:78:20:95:
                    2b:6e:be:99:5b:66:5b:83:b3:2b:4d:15:7a:8d:4b:
                    51:0a:f8:f2:9e:96:ae:4f:04:47:d3:fb:e1:a1:9c:
                    57:5e:46:1c:26:b4:b2:43:18:15:79:00:9f:1c:36:
                    15:3e:09:f8:f3:d9:8d:90:cf:60:e6:89:0e:5a:62:
                    4d:25:71:0a:78:9f:e6:97:c3:b2:bd:37:59:bd:b9:
                    ae:ed:49:e4:e0:f9:78:ee:d6:bc:b7:46:66:98:b6:
                    63:c3:d6:58:c1:74:0c:81:37:0b:4a:16:86:32:48:
                    44:6a:c7:3b:4f:d1:b7:67:df:30:93:0b:f1:cb:48:
                    84:fa:dc:4c:d7:79:ac:27:52:f5:de:60:c5:98:f2:
                    ec:b4:70:cc:aa:79:d1:48:ea:b2:c0:c8:c0:b1:38:
                    ec:7e:0b:df:06:d5:c6:45:b9:20:1e:25:f0:00:84:
                    c2:c0:24:40:bd:f5:f0:1f:d0:c2:ef:1b:3b:08:3a:
                    46:61:95:eb:ed:13:d3:e5:29:33:fc:44:4b:88:32:
                    81:87:75:f7:ba:1d:a7:05:22:15:e8:c5:0c:fa:ae:
                    eb:92:33:91:46:48:68:b9:c7:7b:b7:e2:95:79:56:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EA:A8:2C:5F:29:43:6E:99:6A:36:2C:62:64:85:A8:24:A0:B3:9E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/kOqoLF8pQ26ZajYsYmSFqCSgs54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cf:5a:ad:9c:64:b5:a4:2d:59:8e:06:b0:7a:56:3a:2d:1f:43:
         dc:ff:cc:73:98:4a:7f:84:18:da:81:f5:e4:89:50:a8:95:1f:
         47:71:4d:ea:f3:ee:6c:82:12:35:c8:1b:d3:4e:b0:25:7d:71:
         7d:e7:33:61:dc:1a:ed:d9:fa:18:33:09:34:5b:bf:00:bc:4c:
         b5:f8:ea:ce:f8:50:7c:4c:be:8d:8a:c6:0a:3d:be:d6:9d:5a:
         d8:da:96:4d:d7:6c:ca:7e:49:a6:af:50:11:f1:ce:93:ab:3b:
         36:81:4d:8d:df:3c:62:c8:a8:60:8c:62:f6:fb:b1:35:0c:9a:
         fb:b0:a7:d7:08:3b:ab:ab:97:25:45:fd:87:42:10:04:c4:81:
         93:69:87:ce:1e:c9:96:56:02:e5:d9:bc:4e:ca:a5:df:09:50:
         33:63:b2:64:8f:46:07:19:d2:a2:0f:19:f5:7f:bf:93:45:86:
         53:e8:34:86:8c:8f:dd:da:6a:f1:e9:80:91:d6:c3:1c:70:07:
         61:36:0b:a3:b6:48:14:6a:c9:8d:61:40:db:df:37:c1:e8:69:
         5d:37:67:4b:d7:d4:e7:b1:9a:02:2e:6b:03:bc:7f:f9:08:c9:
         fc:ad:d1:a4:6f:f2:a4:17:d7:68:c1:e0:50:86:4e:70:6a:8e:
         80:b5:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:02 2025 by rpki-client