Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/r4vGstixaLooZiB4vvdVcVGH0a4.roa
File:                     r4vGstixaLooZiB4vvdVcVGH0a4.roa (raw, json)
Hash identifier:          75yeS8TDZDJDWjoOCOEmX3CF/ydupRSsekIEHR5clmM=
Subject key identifier:   AF:8B:C6:B2:D8:B1:68:BA:28:66:20:78:BE:F7:55:71:51:87:D1:AE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03CD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/r4vGstixaLooZiB4vvdVcVGH0a4.roa
Signing time:             Fri 01 Aug 2025 02:03:03 +0000
ROA not before:           Fri 01 Aug 2025 02:03:03 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        219.114.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:03 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AF8BC6B2D8B168BA28662078BEF755715187D1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:0f:a7:2d:8f:da:7c:f8:18:16:1b:99:2b:
                    c9:5e:5e:20:b2:f3:c3:9d:d7:18:e7:5b:db:d2:f3:
                    e4:61:95:30:a4:4f:a4:da:e7:7e:fa:ea:c3:92:4b:
                    64:6c:73:a2:2e:2f:ac:0b:e3:ea:69:e7:86:db:b1:
                    35:45:f9:dc:5b:f5:b3:9e:ad:9e:1d:b6:c8:79:3c:
                    43:e2:60:b2:df:fd:18:a4:50:43:a4:e9:93:03:39:
                    8e:e8:e2:88:9e:cd:db:5e:3a:9e:52:4a:e0:85:25:
                    d6:63:9c:4f:f7:5b:f2:39:23:2d:2a:d1:60:aa:84:
                    d6:4c:8a:20:17:b5:a6:86:31:83:af:bc:4e:52:bb:
                    76:68:d8:36:dd:fa:27:50:27:7a:e4:3a:db:91:d9:
                    39:cc:3e:ba:ec:2b:b4:21:a2:34:bf:d2:d8:cc:02:
                    b1:f9:00:88:3f:6b:f1:24:ae:c4:f0:81:12:7a:6d:
                    6f:25:35:1c:38:c6:e7:de:bc:df:fa:ad:e5:40:52:
                    c6:4d:56:33:90:6e:8c:f7:10:d4:13:f6:8a:55:16:
                    0c:08:d9:f6:3a:84:5e:6c:33:2e:c5:8c:06:11:dd:
                    17:9a:62:78:35:c0:d9:d8:e3:eb:55:32:c4:e1:c7:
                    fb:bb:2d:b9:b2:a8:86:3f:1a:5c:c6:b2:a3:d5:1b:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:C6:B2:D8:B1:68:BA:28:66:20:78:BE:F7:55:71:51:87:D1:AE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/r4vGstixaLooZiB4vvdVcVGH0a4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:24:95:59:67:ba:84:64:a2:4b:86:8d:91:46:14:e4:e8:f7:
         7a:d1:f8:9f:ce:a2:37:55:ab:28:c6:12:0a:58:2b:65:f8:b9:
         dd:30:2a:ce:b9:5b:ee:3b:bb:e4:b5:fc:52:44:04:74:1b:c8:
         f9:7a:cb:d8:81:08:e9:f9:92:23:b9:ae:fb:fa:00:a9:0e:c5:
         1b:30:33:f6:98:82:af:0d:18:5d:ed:14:47:65:a2:c4:60:85:
         26:cc:a2:66:df:5a:3c:98:c4:c5:7c:4e:22:6a:f3:bd:16:1c:
         05:0e:e5:b6:74:5d:f9:93:1a:0b:e7:70:6f:b9:2c:10:2a:de:
         0d:a1:fb:9f:c9:13:4e:01:0f:81:73:a6:8f:b5:2c:31:71:f7:
         8b:73:d3:ef:a8:ea:5b:7f:1d:52:38:94:be:0b:e7:1b:11:d3:
         14:22:9a:8e:16:66:c5:43:a3:be:3a:a8:2f:4e:76:04:a3:11:
         c4:bc:d8:0e:e1:93:71:c9:1c:51:30:0f:d2:af:f3:e3:0c:b5:
         e0:e3:3a:2a:aa:34:b9:b1:ab:6c:29:7d:79:a6:d1:3f:30:40:
         65:94:93:27:d1:6c:9a:10:f4:ac:c5:56:29:e1:9d:c6:2d:ef:
         75:9c:8e:9c:24:53:b3:0d:67:a1:ca:ff:40:26:1f:df:e3:7c:
         c2:a2:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:42 2025 by rpki-client