Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ruj0lh2LBsbJesy26h8zB66uCOE.roa
File:                     ruj0lh2LBsbJesy26h8zB66uCOE.roa (raw, json)
Hash identifier:          xpYFUotaTtPQ6IYK8rBHBKXuboBKolbfBJCcxcgIYpc=
Subject key identifier:   AE:E8:F4:96:1D:8B:06:C6:C9:7A:CC:B6:EA:1F:33:07:AE:AE:08:E1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       038C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ruj0lh2LBsbJesy26h8zB66uCOE.roa
Signing time:             Fri 01 Aug 2025 01:50:57 +0000
ROA not before:           Fri 01 Aug 2025 01:50:57 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        182.50.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:57 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AEE8F4961D8B06C6C97ACCB6EA1F3307AEAE08E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:d0:09:77:8e:0c:f3:e9:8e:cc:ff:1a:7e:
                    2a:f4:5f:63:ba:3d:36:5f:93:92:de:52:e8:be:f8:
                    30:7d:84:55:62:56:77:24:80:3d:bc:c2:eb:db:4b:
                    94:d8:0f:c3:5d:58:9a:e0:88:71:e9:43:bb:71:52:
                    ed:89:c7:3e:ed:9d:69:20:79:52:98:b4:9c:83:b8:
                    de:6f:c3:d0:96:9f:6a:7a:67:ab:71:74:9c:f6:95:
                    40:ea:a7:dd:a9:7c:be:f7:dd:63:0f:1a:79:3c:f6:
                    f0:9f:c1:79:7f:00:aa:9d:3b:16:d0:e2:ba:dd:d8:
                    22:fa:3c:31:a2:58:7b:45:e3:d0:65:0f:59:b1:86:
                    54:22:b3:01:05:45:30:ec:44:b5:4c:b4:2b:b9:26:
                    56:05:a6:5a:17:e2:70:d8:7c:90:3a:c3:b0:94:54:
                    dc:f1:ba:cb:3c:04:db:25:30:e8:c8:c5:ea:7e:82:
                    fe:39:d9:d3:df:e5:ae:24:1e:4b:74:55:a1:94:1d:
                    c6:0f:08:b2:5d:d5:3f:a2:e7:63:43:55:f8:7b:aa:
                    59:ef:dd:84:e1:cc:c6:f8:74:35:b2:76:a4:aa:d2:
                    b0:00:78:df:8c:ac:8c:b3:d3:a7:69:93:f5:31:06:
                    de:a5:53:63:1c:22:6d:b0:41:79:a1:ea:aa:27:c4:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:F4:96:1D:8B:06:C6:C9:7A:CC:B6:EA:1F:33:07:AE:AE:08:E1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ruj0lh2LBsbJesy26h8zB66uCOE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:54:bd:21:48:11:f7:69:69:47:92:c6:4f:13:f7:f9:16:b8:
         50:d9:b6:1b:e8:b4:22:af:27:2d:b5:4d:24:34:10:c0:b7:89:
         a5:89:86:4f:89:3c:7b:8f:ba:6d:b1:32:05:41:78:91:b6:78:
         bf:18:40:ea:3d:8b:c5:1b:78:82:a0:72:e5:0c:3c:8f:6e:a9:
         63:e4:5b:13:eb:4a:fb:3f:88:25:36:1d:5b:cb:fe:f6:7b:ef:
         9e:d4:2c:c9:a5:a9:c4:9d:ee:f7:25:c7:7d:c3:2c:ae:18:35:
         3d:7e:d7:03:6e:9e:dc:3f:e8:5c:07:b2:3c:06:db:81:b7:21:
         9c:f0:24:10:65:88:86:ad:65:3f:52:b3:f5:e5:32:1f:bc:f5:
         a1:79:21:60:d6:71:6f:47:72:12:95:fd:5d:41:31:3f:d5:fb:
         68:c1:79:58:0c:d1:9c:95:06:ab:79:ba:22:0a:09:11:47:16:
         7c:7e:68:8a:4d:c9:60:e5:32:3e:eb:8f:61:e1:5c:1d:7d:92:
         ba:ef:bd:cc:86:c7:21:a4:5e:ba:2e:47:be:a2:a7:81:5a:13:
         bc:2a:c9:27:1e:2a:58:15:4c:97:32:64:c8:ad:9c:3f:53:3f:
         46:40:f2:e4:40:b0:9d:d6:0f:37:84:a4:6a:29:07:50:70:a0:
         7d:39:20:e4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTUwNTdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEFFRThGNDk2MUQ4QjA2
QzZDOTdBQ0NCNkVBMUYzMzA3QUVBRTA4RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq/NAJd44M8+mOzP8afir0X2O6PTZfk5LeUui++DB9hFViVnck
gD28wuvbS5TYD8NdWJrgiHHpQ7txUu2Jxz7tnWkgeVKYtJyDuN5vw9CWn2p6Z6tx
dJz2lUDqp92pfL733WMPGnk89vCfwXl/AKqdOxbQ4rrd2CL6PDGiWHtF49BlD1mx
hlQiswEFRTDsRLVMtCu5JlYFploX4nDYfJA6w7CUVNzxuss8BNslMOjIxep+gv45
2dPf5a4kHkt0VaGUHcYPCLJd1T+i52NDVfh7qlnv3YThzMb4dDWydqSq0rAAeN+M
rIyz06dpk/UxBt6lU2McIm2wQXmh6qonxO6JAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUruj0lh2LBsbJesy26h8zB66uCOEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3J1ajBsaDJMQnNiSmVzeTI2aDh6QjY2dUNPRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS2MuAwDQYJKoZIhvcNAQELBQADggEBAAdUvSFIEfdpaUeSxk8T9/kWuFDZ
thvotCKvJy21TSQ0EMC3iaWJhk+JPHuPum2xMgVBeJG2eL8YQOo9i8UbeIKgcuUM
PI9uqWPkWxPrSvs/iCU2HVvL/vZ7757ULMmlqcSd7vclx33DLK4YNT1+1wNuntw/
6FwHsjwG24G3IZzwJBBliIatZT9Ss/XlMh+89aF5IWDWcW9HchKV/V1BMT/V+2jB
eVgM0ZyVBqt5uiIKCRFHFnx+aIpNyWDlMj7rj2HhXB19krrvvcyGxyGkXrouR76i
p4FaE7wqySceKlgVTJcyZMitnD9TP0ZA8uRAsJ3WDzeEpGopB1BwoH05IOQ=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:30:17 2025 by rpki-client