Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mXpwbAgY303SscrQKzkefHDWaV4.roa
File:                     mXpwbAgY303SscrQKzkefHDWaV4.roa (raw, json)
Hash identifier:          y3MjrhVuwixTJKBeVLG7nxinD2x6OjIW0woCZeHaMy0=
Subject key identifier:   99:7A:70:6C:08:18:DF:4D:D2:B1:CA:D0:2B:39:1E:7C:70:D6:69:5E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0375
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mXpwbAgY303SscrQKzkefHDWaV4.roa
Signing time:             Fri 01 Aug 2025 01:47:16 +0000
ROA not before:           Fri 01 Aug 2025 01:47:16 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        113.61.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:16 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=997A706C0818DF4DD2B1CAD02B391E7C70D6695E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:fc:f2:27:34:38:1c:ed:a2:3e:1f:7d:98:
                    7b:ef:66:36:38:63:ee:0f:3b:82:3b:ce:d8:8a:10:
                    c8:f6:33:4a:3e:52:63:a0:09:32:0f:86:59:0e:51:
                    a3:c5:c8:97:7d:bc:0a:bc:87:76:56:e4:d5:bb:ef:
                    f0:ac:9c:af:47:3c:db:4c:49:0e:f0:5c:f3:f0:3a:
                    13:a8:17:57:a0:8e:5b:c5:86:3b:37:90:ba:d8:d2:
                    ac:c5:31:92:01:2f:d5:91:10:2c:71:8d:59:9e:88:
                    66:dc:81:03:5e:89:14:01:9a:44:88:02:c0:32:bb:
                    43:64:29:cd:26:4f:5a:10:07:10:5c:93:f0:e4:52:
                    80:10:4b:5e:4b:1a:e5:b5:fb:22:7f:f3:c3:e9:db:
                    36:ca:65:c2:b1:2e:ab:67:22:ce:f0:f1:99:90:3a:
                    c0:9f:24:63:9c:96:09:35:fa:7f:27:7d:8f:ac:5b:
                    b3:b6:b9:5a:cb:4c:83:fd:44:0b:b7:12:64:f0:c4:
                    b4:6e:4b:ff:fa:e7:95:6c:2e:e9:35:61:19:ac:ea:
                    c9:f6:17:fd:76:13:bc:fa:6e:f3:0b:4b:9c:df:9f:
                    72:b2:fa:2e:9a:89:35:75:1a:ff:00:42:6e:21:85:
                    78:ad:1e:ac:43:ef:10:ac:87:9f:ee:ac:b9:68:33:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:70:6C:08:18:DF:4D:D2:B1:CA:D0:2B:39:1E:7C:70:D6:69:5E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mXpwbAgY303SscrQKzkefHDWaV4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:4b:a8:56:84:f9:a9:6b:44:6c:ae:3c:b4:cb:9a:6b:05:
         1e:dd:90:a4:cd:f8:e1:2c:bd:af:64:80:0b:88:8a:19:fe:01:
         74:c7:45:7d:b6:e3:53:62:b3:67:74:21:30:d7:64:51:d2:17:
         54:08:fa:71:41:8b:49:c3:14:12:40:ab:45:2f:dd:a8:0f:1f:
         81:bd:6e:d1:3c:82:2f:f3:9e:1e:9a:8f:4d:70:17:f1:32:9c:
         7d:88:a6:53:76:c2:60:5c:dd:26:74:f4:05:82:1b:ae:43:77:
         e5:15:ad:7c:0e:d9:d9:73:b6:97:76:cc:f0:23:cf:18:9d:a1:
         5e:e9:b7:dd:f7:e2:df:eb:03:88:65:87:74:93:3a:18:c3:73:
         d6:96:70:6e:6a:2e:91:d6:be:14:87:d5:88:98:0f:31:61:92:
         f0:f1:b1:53:d4:5f:c5:fd:84:ed:c4:5a:01:37:47:25:81:b0:
         dd:13:5b:ba:cd:0b:f1:5d:bf:98:7f:20:1e:d6:f2:06:eb:62:
         e3:6b:68:75:a0:59:cf:00:31:a9:4a:6f:e9:1d:63:b5:09:05:
         ab:ff:9a:9b:aa:16:e8:f3:99:64:2f:ed:df:54:58:b0:55:37:
         38:0e:e1:60:8e:f3:d5:bb:1b:4c:e5:27:c7:be:98:2c:8e:27:
         82:79:6f:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQ3MTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDk5N0E3MDZDMDgxOERG
NEREMkIxQ0FEMDJCMzkxRTdDNzBENjY5NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3pvzyJzQ4HO2iPh99mHvvZjY4Y+4PO4I7ztiKEMj2M0o+UmOg
CTIPhlkOUaPFyJd9vAq8h3ZW5NW77/CsnK9HPNtMSQ7wXPPwOhOoF1egjlvFhjs3
kLrY0qzFMZIBL9WRECxxjVmeiGbcgQNeiRQBmkSIAsAyu0NkKc0mT1oQBxBck/Dk
UoAQS15LGuW1+yJ/88Pp2zbKZcKxLqtnIs7w8ZmQOsCfJGOclgk1+n8nfY+sW7O2
uVrLTIP9RAu3EmTwxLRuS//655VsLuk1YRms6sn2F/12E7z6bvMLS5zfn3Ky+i6a
iTV1Gv8AQm4hhXitHqxD7xCsh5/urLloMz23AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUmXpwbAgY303SscrQKzkefHDWaV4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL21YcHdiQWdZMzAzU3NjclFLemtlZkhEV2FWNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARxPXAwDQYJKoZIhvcNAQELBQADggEBAE+tS6hWhPmpa0Rsrjy0y5prBR7d
kKTN+OEsva9kgAuIihn+AXTHRX2241Nis2d0ITDXZFHSF1QI+nFBi0nDFBJAq0Uv
3agPH4G9btE8gi/znh6aj01wF/EynH2IplN2wmBc3SZ09AWCG65Dd+UVrXwO2dlz
tpd2zPAjzxidoV7pt9334t/rA4hlh3STOhjDc9aWcG5qLpHWvhSH1YiYDzFhkvDx
sVPUX8X9hO3EWgE3RyWBsN0TW7rNC/Fdv5h/IB7W8gbrYuNraHWgWc8AMalKb+kd
Y7UJBav/mpuqFujzmWQv7d9UWLBVNzgO4WCO89W7G0zlJ8e+mCyOJ4J5b+U=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:13 2025 by rpki-client