Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nxbgWMrSZPYF8vK43IXsrdeNCqQ.roa
File:                     nxbgWMrSZPYF8vK43IXsrdeNCqQ.roa (raw, json)
Hash identifier:          M9n05LcxDN47+QdkjmEbdiOYxDuS2Fugl4TxzL8MYTs=
Subject key identifier:   9F:16:E0:58:CA:D2:64:F6:05:F2:F2:B8:DC:85:EC:AD:D7:8D:0A:A4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0326
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nxbgWMrSZPYF8vK43IXsrdeNCqQ.roa
Signing time:             Fri 01 Aug 2025 01:34:50 +0000
ROA not before:           Fri 01 Aug 2025 01:34:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        27.113.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9F16E058CAD264F605F2F2B8DC85ECADD78D0AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:cd:93:d3:58:14:f5:d1:bc:c7:0f:bf:84:
                    f6:6f:67:bc:79:7d:77:43:45:65:7e:3c:e9:8e:d5:
                    92:49:50:43:d6:2b:61:0a:3b:2a:e4:ba:df:e0:89:
                    0a:cf:01:cd:ec:67:0a:e8:9d:0f:df:43:dc:e3:a7:
                    8e:44:c6:61:fb:85:cb:2d:0e:f5:b3:fb:ed:29:52:
                    7c:39:fe:3f:9c:36:70:3f:6b:0b:e6:91:11:5f:d2:
                    02:6b:c5:33:72:d7:fd:d6:d7:6c:6b:89:87:c2:28:
                    42:1f:a9:6a:43:02:f8:86:02:97:d1:e5:95:dc:00:
                    25:5a:1a:ad:b9:0c:87:18:ea:81:6a:02:9b:31:df:
                    0a:20:78:db:12:9f:b1:2c:45:bb:a9:89:02:50:33:
                    97:50:5a:fd:b3:a7:d8:e4:a8:0f:02:e4:eb:44:55:
                    09:8b:0e:83:75:ee:c0:63:7c:33:6a:73:7f:3c:19:
                    be:f4:62:c5:89:62:42:ba:94:b1:84:f0:2d:34:14:
                    68:38:2a:e0:7b:27:b1:f4:02:5c:6a:30:16:82:c7:
                    cd:62:86:ae:28:e8:a6:58:38:53:11:bf:ec:2d:a9:
                    9d:d3:bd:f7:ea:99:38:62:df:2f:c6:42:93:49:8d:
                    7f:83:b4:7b:40:c7:63:63:94:35:2d:1f:b9:2d:59:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:E0:58:CA:D2:64:F6:05:F2:F2:B8:DC:85:EC:AD:D7:8D:0A:A4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nxbgWMrSZPYF8vK43IXsrdeNCqQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e6:65:e9:7f:a6:04:35:82:4e:ad:30:29:e6:af:07:ad:73:41:
         32:6a:16:14:31:85:c0:09:5b:5d:2c:b1:51:54:f2:42:a4:23:
         ef:b0:1b:95:58:48:54:2e:5c:a9:9f:9e:aa:e1:96:ca:e5:2c:
         38:39:7e:94:44:b7:2f:6b:4d:28:3d:4c:e2:c3:5a:b1:58:49:
         02:ad:54:16:59:0c:c9:c3:24:0e:fc:12:6e:48:13:c0:90:3c:
         38:cb:e0:2a:93:c9:d2:aa:f8:6a:1b:0c:de:b7:e0:85:50:05:
         4b:4b:bd:72:6d:a1:c6:8a:6e:22:8b:81:b1:3c:87:4c:d2:b9:
         ca:8c:db:08:ee:2a:45:5c:88:5c:3a:55:9f:39:55:e6:95:72:
         9e:0e:0d:fe:18:e9:5d:71:19:97:76:32:28:9c:5a:96:96:27:
         7b:a9:85:f6:29:ce:44:dc:9d:0d:78:7f:74:7b:97:17:b1:9d:
         d2:e3:a6:80:f4:8c:24:f7:77:c7:f0:57:93:9d:94:c9:76:db:
         99:23:d9:75:2f:8c:20:ff:e8:66:44:a5:15:95:34:3c:fd:ed:
         38:4f:2b:85:8c:84:54:40:96:43:be:99:a3:94:93:fe:9f:c3:
         de:0b:5a:fa:eb:4b:0a:ab:93:3b:48:3e:58:66:f0:b4:87:e6:
         f8:13:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:31:54 2025 by rpki-client