Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/sVgk7Q4_uOuS9jnY9uOaHMt83HU.roa
File:                     sVgk7Q4_uOuS9jnY9uOaHMt83HU.roa (raw, json)
Hash identifier:          08icy9S/V9XIhrwcGqPwQOomeYBdT/pHH4s2V7oq9s8=
Subject key identifier:   B1:58:24:ED:0E:3F:B8:EB:92:F6:39:D8:F6:E3:9A:1C:CB:7C:DC:75
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       035A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sVgk7Q4_uOuS9jnY9uOaHMt83HU.roa
Signing time:             Fri 01 Aug 2025 01:43:45 +0000
ROA not before:           Fri 01 Aug 2025 01:43:45 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        119.161.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:45 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B15824ED0E3FB8EB92F639D8F6E39A1CCB7CDC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:5a:29:aa:64:54:08:f0:fc:3c:96:2a:6e:
                    42:89:68:74:5f:90:6a:e5:dd:e1:b5:1e:21:2d:50:
                    51:c3:fb:ac:01:e4:bd:54:0a:cd:f3:d1:be:65:f4:
                    5c:70:6a:e9:31:58:77:ae:e9:6e:76:06:be:44:78:
                    87:93:0c:17:6e:ca:33:59:75:17:31:9f:1f:98:86:
                    3a:ef:4a:84:e5:e9:28:c2:30:ff:9d:15:a5:e0:d1:
                    a2:1b:48:42:ec:f7:11:b5:e0:f9:67:de:ce:58:45:
                    23:ec:51:99:08:fb:6e:c7:ad:34:8c:a2:a9:ca:fa:
                    a1:e1:68:da:52:f8:41:f0:ef:20:3c:e5:f7:0a:a3:
                    8b:a4:27:b2:0e:1b:52:d6:b2:86:3e:da:6a:52:70:
                    fb:7f:fc:e2:2e:ff:71:62:cb:dd:00:3b:66:02:dc:
                    9a:b7:1a:d7:e2:76:cb:f0:1e:67:8a:84:8e:cc:80:
                    0a:21:b7:67:1a:5a:ce:31:15:be:00:41:55:30:94:
                    9f:3b:3d:4f:7b:8f:63:72:d2:c3:88:3f:a2:b7:dd:
                    4e:1d:83:af:4f:3d:a6:cb:9d:af:5f:6e:73:1c:4d:
                    8d:e4:a4:19:d6:23:1f:c6:dd:a3:92:98:82:b3:42:
                    91:1a:21:ef:bd:6c:53:b5:e8:37:86:df:89:31:a8:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:24:ED:0E:3F:B8:EB:92:F6:39:D8:F6:E3:9A:1C:CB:7C:DC:75
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sVgk7Q4_uOuS9jnY9uOaHMt83HU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:6d:92:25:1b:1a:4c:4d:5a:54:54:6b:65:55:7d:64:60:
         27:96:fe:09:f0:d3:db:52:47:cf:86:45:e3:06:b6:bd:a9:f9:
         f5:fa:a3:9f:e0:80:f0:b2:b9:e7:1b:75:3d:92:32:03:88:50:
         b3:39:95:bb:43:c6:cd:49:0a:3d:a2:49:5c:9f:82:7a:40:ee:
         32:47:e5:5c:32:fb:70:58:be:c2:44:8f:ac:68:6b:2c:91:d0:
         e0:9a:e5:ae:33:e6:3f:9b:55:42:4c:42:e3:14:13:6c:dd:0d:
         8f:97:79:6a:96:ac:b5:1a:c5:d0:22:01:b6:69:d9:6f:06:e6:
         63:15:4c:49:94:d2:c1:51:9f:82:bf:a6:ab:68:df:a1:e8:d0:
         e2:46:aa:8d:50:e4:07:ea:62:5b:9f:25:d7:6c:f0:8e:f7:c6:
         bf:bc:63:a3:0f:3e:a8:8f:c8:c1:b9:75:af:79:8a:a4:f4:62:
         b8:4b:ab:f2:dc:84:d5:9e:cc:08:38:18:74:f9:09:3f:25:29:
         0d:cc:d1:70:03:ae:4c:00:7a:03:eb:8c:03:c5:6a:53:54:63:
         fa:e9:35:26:41:f4:81:7b:0c:a5:b2:73:73:f8:39:3e:9d:99:
         fd:da:eb:c1:e7:7d:15:ca:8e:e9:d7:1e:56:90:ee:2f:aa:c5:
         6d:e9:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:45 2025 by rpki-client