Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lHjiamYjZ8PCLYG0Q86Y2b5bx8Y.roa
File:                     lHjiamYjZ8PCLYG0Q86Y2b5bx8Y.roa (raw, json)
Hash identifier:          gMgsoOGbWXS+tETOmdDhjt8apSsg4sDu19+Sw5NmOPM=
Subject key identifier:   94:78:E2:6A:66:23:67:C3:C2:2D:81:B4:43:CE:98:D9:BE:5B:C7:C6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0356
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lHjiamYjZ8PCLYG0Q86Y2b5bx8Y.roa
Signing time:             Fri 01 Aug 2025 01:43:43 +0000
ROA not before:           Fri 01 Aug 2025 01:43:43 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        202.148.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:43 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9478E26A662367C3C22D81B443CE98D9BE5BC7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:55:19:b1:dd:df:24:a9:de:3e:88:19:5f:
                    8a:44:a6:d5:0f:93:7e:1c:58:01:52:8d:ce:a4:06:
                    92:f9:37:3c:c8:73:fe:2d:36:1a:d2:c2:99:7a:51:
                    bb:78:3f:06:f8:a4:d8:c6:21:d1:98:c4:61:51:38:
                    0c:fb:dd:3b:8e:f1:b4:b1:bf:a3:08:00:2d:e9:2c:
                    d5:b3:12:6c:c7:21:4b:b2:e7:44:df:2b:09:0f:fa:
                    b6:46:26:c6:a3:cf:c9:0b:db:b2:a9:b8:d7:14:59:
                    97:35:df:b4:d3:5c:7b:bf:87:c8:9a:72:e5:7a:2b:
                    5a:f7:73:b4:de:ff:77:c8:f9:f0:55:b1:5b:c7:1e:
                    8c:d9:40:dc:83:5e:f3:3b:d9:74:57:d6:55:bd:7a:
                    3a:4f:57:81:71:0a:69:19:3d:30:2c:ac:56:cc:9a:
                    ae:88:6e:75:28:58:02:b5:32:e3:95:88:72:cb:4c:
                    5b:97:7b:4e:a2:64:b5:2e:b6:1b:16:f7:62:3b:91:
                    c8:0d:19:39:0b:df:53:8e:1d:d3:9a:33:66:42:e3:
                    f7:fc:aa:87:df:98:dd:4e:a8:c3:02:b3:ab:fe:57:
                    03:b4:43:ee:03:66:7d:df:ee:8a:7d:f0:de:52:ec:
                    65:eb:88:67:86:46:8d:b2:f1:2f:ea:8c:44:f7:0c:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:E2:6A:66:23:67:C3:C2:2D:81:B4:43:CE:98:D9:BE:5B:C7:C6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lHjiamYjZ8PCLYG0Q86Y2b5bx8Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dc:f4:6b:a2:52:96:5d:21:ef:3c:78:a3:b9:36:85:51:97:58:
         0d:33:d5:1b:7a:78:ee:dc:b9:d0:56:fe:d5:41:f3:7b:9c:40:
         ae:34:af:2b:42:94:86:3e:e0:ae:f9:14:65:a1:c1:27:aa:58:
         c2:0a:60:4e:c7:43:f5:26:47:34:de:ab:0d:94:d5:51:1b:30:
         50:39:50:10:ee:7d:e8:17:10:7c:6e:ec:5a:20:0f:74:f2:ab:
         fd:b0:6e:ba:16:c1:02:12:1e:be:6c:9a:8d:ba:55:36:ff:23:
         96:b7:70:19:20:ae:31:b2:43:79:fe:13:05:af:79:b4:09:81:
         3f:91:54:45:53:90:b1:45:1b:2f:3a:a8:ea:64:3c:92:fb:40:
         02:60:92:25:96:de:b6:3d:3d:d9:48:dc:7f:00:de:6f:04:ac:
         f7:31:2e:72:49:18:a4:e4:5e:3b:d2:4e:40:63:68:bc:c7:1d:
         e6:b3:1f:4d:cf:d8:cb:7f:19:36:59:7a:d4:71:0a:1c:71:5e:
         7c:ad:c2:61:93:71:ac:b5:7d:d0:95:06:ca:df:a2:bb:38:df:
         d4:d4:f7:eb:bf:d2:c7:b4:7c:a3:41:de:56:f7:c5:5e:b9:b3:
         d0:93:de:d9:9c:ff:77:2c:16:22:b9:44:5f:c5:5c:ba:15:73:
         8a:a4:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:26:29 2025 by rpki-client