Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qXW-YGD8tEQ-bImWEEMfhfNtk3g.roa
File:                     qXW-YGD8tEQ-bImWEEMfhfNtk3g.roa (raw, json)
Hash identifier:          JUR+mPSe0pMly2iprg1IW1TGlQ2iM1HlI8yEqFJvmwQ=
Subject key identifier:   A9:75:BE:60:60:FC:B4:44:3E:6C:89:96:10:43:1F:85:F3:6D:93:78
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       036D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qXW-YGD8tEQ-bImWEEMfhfNtk3g.roa
Signing time:             Fri 01 Aug 2025 01:47:11 +0000
ROA not before:           Fri 01 Aug 2025 01:47:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        110.173.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A975BE6060FCB4443E6C899610431F85F36D9378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:76:9e:36:3e:fd:5d:9f:e5:70:70:34:8b:
                    39:44:ac:fa:56:f7:31:4c:72:d3:2d:69:c7:da:37:
                    ad:17:50:d2:87:93:ae:7f:65:20:4c:40:40:2b:de:
                    06:98:1a:3e:cd:38:89:6d:9c:cb:e8:08:67:dc:79:
                    0e:02:bb:61:0f:79:13:98:da:04:5e:9b:5c:c8:d7:
                    05:1a:b2:cf:89:5a:fa:76:f3:3c:2d:4b:bf:f3:d1:
                    51:1b:28:38:a7:b6:f5:47:a5:37:6d:04:05:89:90:
                    65:e4:fc:e6:b4:9e:1f:13:65:f7:76:cc:4f:5f:86:
                    af:4a:7e:f3:33:f8:70:88:e2:49:08:cd:e3:fd:d6:
                    bd:3c:03:2b:30:55:eb:2c:21:cf:59:31:9d:56:98:
                    03:89:b2:ec:51:b5:c4:ff:a3:e6:4c:d9:c1:61:1a:
                    5f:d2:29:6f:9d:3b:aa:71:d4:b5:49:b1:99:51:ea:
                    fc:db:2d:87:fd:cd:cc:23:eb:eb:3d:e1:96:cf:e9:
                    e1:30:fa:97:d6:38:56:00:e4:2e:5b:fe:45:15:db:
                    90:ab:ec:22:2d:f1:70:d4:fe:49:9d:f0:c7:f0:a8:
                    20:0d:f1:44:45:65:36:96:ce:b5:3f:21:e9:6a:44:
                    13:55:06:0c:a8:39:68:5f:69:d0:b0:b2:1b:19:92:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:BE:60:60:FC:B4:44:3E:6C:89:96:10:43:1F:85:F3:6D:93:78
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qXW-YGD8tEQ-bImWEEMfhfNtk3g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:1d:35:4d:e8:e4:d6:e3:68:10:3a:32:bc:1b:f3:ca:98:a1:
         21:c9:57:60:47:93:54:4f:e4:5e:8d:7e:b6:1c:0c:3f:14:8f:
         37:a9:3b:b0:b7:bc:04:44:6d:76:d2:01:b5:cc:50:53:09:bc:
         fd:74:50:b6:4a:9b:93:62:c8:47:b0:63:cb:c3:bd:c1:a4:78:
         37:0b:52:1d:e5:2d:e1:7d:ba:b4:77:ac:9d:57:7e:c8:a1:71:
         a6:be:3e:f2:ae:d9:66:70:10:ef:05:cf:e9:f8:d6:3d:bf:df:
         a6:89:eb:91:86:d5:2d:ae:89:01:89:00:12:a1:e0:a4:ad:9a:
         a2:f3:95:99:66:df:40:56:0f:ce:75:5f:39:4f:7c:96:26:cc:
         d4:a7:b2:0f:04:e0:34:d7:48:12:eb:0b:d5:9a:6b:d6:b3:e2:
         69:5a:05:7b:9e:e3:24:a3:81:fa:a0:7f:84:6b:e4:46:da:31:
         64:d0:5d:39:85:00:2b:1c:f6:d5:d3:da:58:b2:17:bf:43:a0:
         f4:90:54:19:c9:51:f5:e0:16:db:e3:ac:83:3b:20:c6:41:16:
         12:9c:8c:01:fa:55:e9:67:f5:14:3d:23:24:0f:ab:b4:30:0e:
         e6:d1:5f:2e:16:6f:68:91:44:6c:2a:21:94:3f:ab:88:68:58:
         29:89:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:27 2025 by rpki-client