Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSWgmVw7CrSFnuF_uph3B595OL4.roa
File:                     mSWgmVw7CrSFnuF_uph3B595OL4.roa (raw, json)
Hash identifier:          tDXCsXXARmLpp0vpXMoEPXCPQ6e/Lh6gNyITlFxRz0U=
Subject key identifier:   99:25:A0:99:5C:3B:0A:B4:85:9E:E1:7F:BA:98:77:07:9F:79:38:BE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03CF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSWgmVw7CrSFnuF_uph3B595OL4.roa
Signing time:             Fri 01 Aug 2025 02:03:06 +0000
ROA not before:           Fri 01 Aug 2025 02:03:06 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        219.114.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9925A0995C3B0AB4859EE17FBA9877079F7938BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6c:30:22:83:2c:b4:0b:0e:17:39:6c:f4:e5:
                    d6:d1:31:ed:48:ec:0e:bd:d0:41:5b:59:45:74:ec:
                    6d:7b:54:23:84:e2:e9:df:3b:11:e1:7c:0a:73:2b:
                    82:6c:69:75:d1:fa:1a:30:67:83:10:d0:f5:58:bd:
                    de:64:a8:11:62:08:ce:00:49:0d:79:d5:50:0f:19:
                    b5:29:40:31:1d:fd:ae:75:5d:d9:47:aa:ad:b5:a4:
                    8e:d6:70:75:3c:ad:a0:69:83:5f:b5:6b:3f:58:07:
                    b5:d2:da:96:10:0e:67:fe:bc:d8:25:20:b2:ee:e4:
                    b4:28:dc:a5:70:5d:9b:2d:08:fd:d9:35:ef:39:9b:
                    5d:9c:b2:a7:d6:09:0e:2d:0b:e6:71:cd:ce:01:b9:
                    52:29:0d:54:28:1e:ea:09:73:6c:73:4a:16:b4:14:
                    9c:b8:85:93:b8:a2:3f:af:d9:81:c0:c9:46:a5:e6:
                    44:f8:a9:ce:41:94:de:9e:55:d4:46:f3:d4:6b:c6:
                    bd:12:b7:8b:00:2c:28:56:8f:c8:ba:4b:60:b7:09:
                    28:d9:78:ef:ef:5f:d0:df:85:56:48:1d:ae:5b:ea:
                    72:2d:34:b9:a4:26:80:f2:91:e8:29:bf:0b:50:51:
                    c7:a0:ca:fa:4b:10:be:c5:c4:09:39:7a:9f:42:a4:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:25:A0:99:5C:3B:0A:B4:85:9E:E1:7F:BA:98:77:07:9F:79:38:BE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mSWgmVw7CrSFnuF_uph3B595OL4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:8c:c0:16:a7:9e:d3:e1:86:f3:17:ed:f8:41:ed:06:4e:
         f4:f7:8b:31:9d:4d:8c:f5:34:d0:e7:6b:80:db:a8:83:ae:ac:
         91:6f:90:e3:3d:68:48:7e:86:1f:69:d7:74:3b:7a:34:b3:91:
         82:b1:5c:8c:a4:12:2d:33:f7:03:51:7f:22:ca:df:5d:d5:98:
         0a:cf:2c:bb:84:a5:73:7b:b5:0c:cc:19:9f:8a:7f:66:36:3b:
         b5:ac:3c:11:6a:f8:9b:cb:b6:34:8d:07:48:2f:d9:dc:99:6c:
         a4:0f:98:d7:84:6f:ce:4f:13:05:cf:98:9c:e0:0c:ad:63:f3:
         9b:62:62:b8:95:7a:2a:1f:39:bf:70:23:9b:e9:a7:ef:7e:d0:
         b1:11:36:02:33:89:06:cc:27:cf:9d:4e:6f:58:c9:ea:f0:47:
         3a:2d:83:9c:ca:72:cc:0f:d6:84:39:53:30:b8:07:34:3d:b7:
         92:e1:ba:ad:5c:09:b2:ab:f2:15:6c:79:8f:2c:9a:70:59:94:
         ab:06:aa:8a:67:74:8f:9a:d7:4f:3a:69:e6:11:68:be:1f:0f:
         a4:84:cd:86:e0:61:d8:13:db:52:53:f7:f1:33:25:81:d2:7a:
         70:2a:e1:3b:f9:ba:23:00:85:08:e2:91:52:a9:c3:2f:89:98:
         77:44:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:23:52 2025 by rpki-client