Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nfcb4Oxjyc4wPBtqliJHr_jPeH8.roa
File:                     nfcb4Oxjyc4wPBtqliJHr_jPeH8.roa (raw, json)
Hash identifier:          KgGiLs9+wec6LYiR4qwU5V21WYysjTEaXf2DGQBXuf0=
Subject key identifier:   9D:F7:1B:E0:EC:63:C9:CE:30:3C:1B:6A:96:22:47:AF:F8:CF:78:7F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03DD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nfcb4Oxjyc4wPBtqliJHr_jPeH8.roa
Signing time:             Fri 01 Aug 2025 02:03:13 +0000
ROA not before:           Fri 01 Aug 2025 02:03:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        122.255.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9DF71BE0EC63C9CE303C1B6A962247AFF8CF787F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:ab:d9:a6:e2:f3:b6:28:a6:39:13:e8:23:
                    08:c9:9e:86:d3:ab:b6:4b:5a:70:63:25:f2:b0:46:
                    87:c8:db:1a:5c:b2:ee:ee:f3:cc:c9:21:80:4a:2a:
                    b0:f0:8a:56:ef:04:2f:1f:50:47:74:b4:c7:db:92:
                    ea:59:a9:cb:f6:8a:5e:71:41:c1:8d:88:0c:43:a1:
                    cf:82:84:1f:57:47:7c:e4:f0:8d:a2:f7:c0:1c:d4:
                    7c:b3:c0:c8:d6:6f:43:50:01:67:5b:4e:6e:18:3b:
                    58:a6:40:5c:a1:b2:74:1a:25:fb:74:a8:1b:c2:62:
                    20:92:39:bc:5a:8f:55:2f:b3:56:2c:32:4a:fb:21:
                    f5:36:04:c0:f5:75:f5:1f:38:ea:ec:8d:2a:fa:b6:
                    89:32:9f:0f:9c:f5:7b:e8:5e:e1:7c:4f:b8:3d:b4:
                    0b:de:3d:2d:7d:81:f8:0b:22:d7:09:3f:2d:89:c9:
                    6e:92:53:3c:ec:3f:e3:4f:b7:00:bd:00:f2:22:38:
                    e8:80:5d:9f:e3:a0:a7:a1:88:0e:78:e1:44:3d:6a:
                    38:39:4b:fd:70:4f:1b:83:4c:a8:e5:86:50:00:00:
                    23:64:08:c0:33:89:61:dd:e1:5c:91:a5:76:c5:74:
                    cb:67:70:59:58:e2:b4:52:25:70:af:d1:f5:34:0d:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:1B:E0:EC:63:C9:CE:30:3C:1B:6A:96:22:47:AF:F8:CF:78:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nfcb4Oxjyc4wPBtqliJHr_jPeH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c2:aa:2a:35:6e:89:0f:62:a6:4f:39:58:de:62:4e:41:58:66:
         09:da:57:28:b1:f9:df:b5:8b:3a:e0:42:b8:a3:d4:9e:96:22:
         e9:84:90:47:6c:87:e7:af:a8:54:1d:dd:13:b3:4a:65:06:7b:
         04:dc:24:d6:9e:05:47:ff:f3:22:1d:92:e4:db:15:7d:42:39:
         86:70:47:b5:49:c9:57:31:d5:8a:fd:a9:d7:44:ac:8e:84:ef:
         4e:a9:07:a6:20:15:54:f7:89:6c:38:88:2f:74:74:b2:ed:b3:
         4e:86:3a:dc:db:8f:68:0c:ef:46:cb:82:05:cd:5c:73:a1:b7:
         cf:96:b2:7d:6f:4d:c5:2f:09:db:95:4f:a6:9a:80:05:94:d3:
         c6:4f:1b:9a:da:0d:92:a3:37:65:9b:8b:c6:07:ce:a2:3d:95:
         f3:59:07:c8:73:9a:57:41:82:6a:1e:a7:e4:86:8c:a8:0e:23:
         99:29:ba:26:42:3d:8b:87:8e:2d:7c:e6:1a:ed:04:25:cb:62:
         e6:2c:a9:0f:75:28:c3:cd:9a:da:f0:6c:ea:b1:74:1c:76:9b:
         5c:06:cd:39:6c:7c:69:ab:84:09:95:da:80:2b:8a:c6:f0:f7:
         6b:18:b8:07:bf:96:12:6e:1a:d4:c4:99:48:bf:fd:f0:11:61:
         44:fc:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:17 2025 by rpki-client