Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/sab-kAxqtCi_Jgx3UiVzu9ftbMI.roa
File:                     sab-kAxqtCi_Jgx3UiVzu9ftbMI.roa (raw, json)
Hash identifier:          psslCbvsoYXYZZ6lQuQswQlHtMWSakWSJSs2zr+hiUM=
Subject key identifier:   B1:A6:FE:90:0C:6A:B4:28:BF:26:0C:77:52:25:73:BB:D7:ED:6C:C2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0359
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sab-kAxqtCi_Jgx3UiVzu9ftbMI.roa
Signing time:             Fri 01 Aug 2025 01:43:44 +0000
ROA not before:           Fri 01 Aug 2025 01:43:44 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     23790
IP address blocks:        119.161.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:44 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B1A6FE900C6AB428BF260C77522573BBD7ED6CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:f8:04:6a:d7:b2:de:ae:45:09:9f:53:06:
                    cb:06:f8:60:77:94:59:1c:d8:87:e2:ae:83:af:4e:
                    ff:f5:bd:f8:af:28:75:5a:ec:a6:c6:64:15:d5:b7:
                    de:02:ee:e8:14:5f:3e:68:ef:32:36:46:bc:45:73:
                    66:cd:47:7c:05:8a:15:50:4e:9b:d2:bd:bd:58:2a:
                    97:41:de:c5:86:35:8f:d4:84:e0:3d:04:e7:8a:12:
                    1a:d4:f4:ce:6e:e4:a8:d1:a8:72:98:e8:cb:2c:b4:
                    7c:4f:b6:ee:64:bd:30:d7:dd:bc:98:58:b7:05:03:
                    16:32:a1:dd:15:f5:df:a6:3e:9a:fc:b5:f0:85:69:
                    07:1a:55:40:2a:ed:9b:40:34:6f:08:f9:75:92:b3:
                    42:66:c1:fc:aa:c6:7b:0a:d9:55:07:7a:cc:93:7e:
                    b6:da:b0:48:4e:2b:e6:cd:c8:e5:8f:70:2d:b2:72:
                    4b:21:92:05:d8:81:b5:fc:7f:c3:fb:f6:7d:b3:7e:
                    1e:ac:16:68:56:da:35:15:bf:fe:ad:bb:d0:54:2c:
                    bb:04:95:14:fa:6f:3f:ad:b2:b8:fe:48:c1:85:9e:
                    74:d0:53:e8:28:20:0f:41:2d:e0:b3:15:42:51:09:
                    e1:cf:8b:62:be:75:3c:2f:63:da:1e:f6:d1:1d:4a:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A6:FE:90:0C:6A:B4:28:BF:26:0C:77:52:25:73:BB:D7:ED:6C:C2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sab-kAxqtCi_Jgx3UiVzu9ftbMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d5:d7:10:7d:5e:38:ea:d7:a4:d6:96:be:8a:c5:15:6f:82:8b:
         38:ac:93:1a:f8:80:cc:f4:be:87:03:5a:83:67:22:1b:ac:cc:
         9a:c4:c6:15:27:74:dd:88:7e:1a:28:6a:74:29:1d:e9:bb:e5:
         de:5c:88:81:f9:67:e3:e7:78:a5:90:11:50:d3:d0:0f:df:95:
         49:0e:3d:d0:7a:aa:06:9c:22:71:8f:ab:7f:8f:e5:48:23:c5:
         0c:f7:d8:a6:af:8c:79:94:b5:b5:4d:73:a1:f1:b2:26:41:b5:
         6e:7f:d9:42:b0:0b:70:cb:cc:b4:da:30:f3:0e:3d:e6:01:aa:
         c9:14:19:ae:b4:3f:66:f5:d5:a7:b7:50:c4:e4:41:8d:07:d5:
         f0:9d:54:95:35:4d:53:e9:06:28:68:5c:19:29:ec:70:ec:94:
         a3:4c:4a:68:92:09:86:7a:f4:e2:5c:eb:f1:73:d1:0c:dc:97:
         8d:91:cc:a8:f1:54:03:b8:59:ac:dd:f5:5d:ba:91:1b:ab:65:
         1f:86:30:32:b2:d6:94:a6:a1:22:92:c9:76:13:4e:cf:f0:37:
         3d:51:1e:d0:4e:b3:e7:92:16:4b:53:12:a3:6c:33:61:72:4b:
         75:b5:2a:0a:ee:36:7f:0e:ed:49:bd:a5:cc:7b:27:d0:54:df:
         d9:4d:75:1b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQzNDRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEIxQTZGRTkwMEM2QUI0
MjhCRjI2MEM3NzUyMjU3M0JCRDdFRDZDQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBYfgEatey3q5FCZ9TBssG+GB3lFkc2IfiroOvTv/1vfivKHVa
7KbGZBXVt94C7ugUXz5o7zI2RrxFc2bNR3wFihVQTpvSvb1YKpdB3sWGNY/UhOA9
BOeKEhrU9M5u5KjRqHKY6MsstHxPtu5kvTDX3byYWLcFAxYyod0V9d+mPpr8tfCF
aQcaVUAq7ZtANG8I+XWSs0JmwfyqxnsK2VUHesyTfrbasEhOK+bNyOWPcC2ycksh
kgXYgbX8f8P79n2zfh6sFmhW2jUVv/6tu9BULLsElRT6bz+tsrj+SMGFnnTQU+go
IA9BLeCzFUJRCeHPi2K+dTwvY9oe9tEdSpFNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsab+kAxqtCi/Jgx3UiVzu9ftbMIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3NhYi1rQXhxdENpX0pneDNVaVZ6dTlmdGJNSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN3oXAwDQYJKoZIhvcNAQELBQADggEBANXXEH1eOOrXpNaWvorFFW+Cizis
kxr4gMz0vocDWoNnIhuszJrExhUndN2IfhooanQpHem75d5ciIH5Z+PneKWQEVDT
0A/flUkOPdB6qgacInGPq3+P5UgjxQz32KavjHmUtbVNc6HxsiZBtW5/2UKwC3DL
zLTaMPMOPeYBqskUGa60P2b11ae3UMTkQY0H1fCdVJU1TVPpBihoXBkp7HDslKNM
SmiSCYZ69OJc6/Fz0Qzcl42RzKjxVAO4Wazd9V26kRurZR+GMDKy1pSmoSKSyXYT
Ts/wNz1RHtBOs+eSFktTEqNsM2FyS3W1KgruNn8O7Um9pcx7J9BU39lNdRs=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:18:05 2025 by rpki-client