Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qTt_vr1Vb1XPlP-XPa66sPQ2tCQ.roa
File:                     qTt_vr1Vb1XPlP-XPa66sPQ2tCQ.roa (raw, json)
Hash identifier:          tt3bn34U9MN5bzigk6z4MDr8ltWwZeRpwkfLDt2BfZA=
Subject key identifier:   A9:3B:7F:BE:BD:55:6F:55:CF:94:FF:97:3D:AE:BA:B0:F4:36:B4:24
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0389
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qTt_vr1Vb1XPlP-XPa66sPQ2tCQ.roa
Signing time:             Fri 01 Aug 2025 01:50:55 +0000
ROA not before:           Fri 01 Aug 2025 01:50:55 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        182.50.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:55 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A93B7FBEBD556F55CF94FF973DAEBAB0F436B424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:54:42:9f:c6:7a:8c:cb:c5:bf:4f:89:0e:
                    c4:b2:27:de:0b:5a:fd:61:4c:6c:94:ff:ed:b0:ab:
                    7d:43:23:96:14:5c:99:84:e2:3f:e9:09:ed:62:8c:
                    9a:68:eb:fc:13:a7:4b:ef:83:f6:af:ad:be:70:b9:
                    dc:e5:58:7a:e3:2b:6d:f0:52:f0:e7:c8:ac:a5:67:
                    b3:88:5b:b1:5a:fa:1d:93:16:46:d9:84:5f:9b:ef:
                    32:5e:7a:18:b7:2a:b4:13:37:3f:b1:df:11:0a:85:
                    cf:a3:c8:2b:78:02:b0:aa:4e:68:ee:28:14:cc:d2:
                    3e:d3:7c:98:aa:76:49:03:78:de:c0:a6:31:99:e8:
                    54:4a:25:f3:e5:2e:1a:5e:3e:10:c2:d5:d3:62:da:
                    1e:85:2a:4f:cf:43:f1:33:2b:42:0e:0f:fc:1d:16:
                    36:1f:90:a8:f8:c0:1f:7a:ce:2c:53:4f:93:6f:00:
                    d2:1d:1b:93:5b:7e:61:45:69:78:e4:2b:a3:a5:f6:
                    d7:d5:64:3e:80:e7:87:8e:9e:ad:13:f0:0b:f0:d8:
                    78:18:f7:05:65:15:97:15:24:d4:ed:70:44:b9:5b:
                    d0:9f:a2:e5:b3:0e:e7:f9:70:18:fd:2d:95:14:5e:
                    bc:db:c4:f9:62:69:6c:56:bb:5e:13:d8:b0:75:31:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:7F:BE:BD:55:6F:55:CF:94:FF:97:3D:AE:BA:B0:F4:36:B4:24
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qTt_vr1Vb1XPlP-XPa66sPQ2tCQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:27:b2:2d:07:90:8e:3c:b9:a0:a7:51:e6:3d:2b:af:3f:
         d3:cd:6c:ae:bf:ff:d9:9a:f8:d2:48:d1:6f:8f:86:e6:52:b5:
         ac:60:ca:e1:71:62:30:ca:4a:3e:1b:26:09:ee:18:0d:e8:e3:
         f4:b9:9c:fc:da:49:d2:bd:42:8c:e6:56:d2:6f:6e:f0:63:92:
         75:c0:5e:25:06:95:82:c7:56:53:b5:1f:98:40:36:ac:b3:3b:
         9d:9d:e6:24:cc:7c:d2:8f:a8:57:03:67:8e:4c:3d:b5:a1:15:
         3c:1a:7b:9e:11:10:f4:c2:00:13:e2:a9:76:3c:ac:93:47:a6:
         74:8c:a3:21:2a:98:87:d4:d5:c2:68:55:d6:32:77:c3:18:5d:
         c2:4d:fc:f7:da:65:f3:ca:f7:04:80:93:c5:39:71:7f:6a:74:
         f7:ee:b9:c4:9a:88:b6:82:6d:3c:b8:a1:65:43:a2:1b:aa:34:
         cd:94:44:6d:94:2e:59:74:51:70:ff:c7:85:62:1d:29:cf:92:
         9f:94:71:eb:0f:5a:9e:2d:3c:c3:25:58:53:37:5d:62:e3:83:
         37:eb:f1:35:3f:d3:55:0b:61:cc:47:41:3a:7e:c1:20:a4:ca:
         a9:8b:c5:44:b9:53:d9:23:93:f6:ec:72:96:82:70:95:39:33:
         80:33:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:33 2025 by rpki-client