Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/t3H1u4ztfMNTTY-JfLygCK0FA9k.roa
File:                     t3H1u4ztfMNTTY-JfLygCK0FA9k.roa (raw, json)
Hash identifier:          ONHZXwFpZzLvIyJXIkoiPAdQ7uuZ6QhNUFc6N00gxyc=
Subject key identifier:   B7:71:F5:BB:8C:ED:7C:C3:53:4D:8F:89:7C:BC:A0:08:AD:05:03:D9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03BB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/t3H1u4ztfMNTTY-JfLygCK0FA9k.roa
Signing time:             Fri 01 Aug 2025 01:58:52 +0000
ROA not before:           Fri 01 Aug 2025 01:58:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9617
IP address blocks:        119.24.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B771F5BB8CED7CC3534D8F897CBCA008AD0503D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:4e:38:06:53:7a:8e:ad:de:e8:3d:86:aa:
                    06:e8:c3:de:bf:0d:cc:7d:de:d2:a7:8d:b5:17:d6:
                    d0:3d:bd:fd:56:e6:2f:17:14:6d:27:9d:f9:2b:62:
                    b2:9f:45:61:6a:84:51:e7:41:54:df:8e:32:d4:71:
                    bc:15:11:2a:f7:d4:13:6f:78:99:c2:71:06:fe:4a:
                    9e:ac:dd:1a:52:06:8d:f6:20:10:7c:9c:69:2b:8f:
                    d4:90:d7:72:7d:c2:fb:71:38:45:3b:35:b5:22:a9:
                    1d:aa:ac:8d:22:49:30:29:54:b2:78:4c:26:49:b0:
                    a0:a2:18:38:13:15:e1:bd:05:ea:52:98:68:4e:0d:
                    d9:ce:23:4f:78:a6:97:d0:32:6b:01:8c:44:61:32:
                    28:3d:1f:a8:39:fa:f2:19:a4:46:c4:b1:41:32:87:
                    1c:c3:db:81:18:f2:a3:c0:e5:9a:14:25:5d:a4:b0:
                    d3:d2:90:a3:9a:1d:d5:24:f0:eb:63:8d:8d:94:d3:
                    06:1a:a5:ce:2e:32:1e:fa:1b:cb:70:dc:c5:54:1c:
                    8d:04:2e:7a:81:aa:83:b8:df:33:30:0d:38:c7:c4:
                    a5:e6:0d:7f:26:dc:22:e4:b8:af:d6:3f:0e:00:15:
                    ee:ef:ad:70:a7:a7:4e:dc:cc:80:ec:d7:b2:43:f9:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:F5:BB:8C:ED:7C:C3:53:4D:8F:89:7C:BC:A0:08:AD:05:03:D9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/t3H1u4ztfMNTTY-JfLygCK0FA9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         e0:bc:bd:bc:e0:a4:d6:27:32:e3:fd:d1:25:d7:18:d6:23:96:
         51:32:37:10:e9:27:78:50:2c:3a:7a:3b:ed:0c:17:30:80:09:
         c6:63:f2:02:ae:75:01:cc:92:3b:82:0b:57:d2:be:87:8f:fa:
         31:6d:40:e6:89:70:31:cf:df:f7:17:d5:3d:80:31:c5:f1:b3:
         ca:67:23:07:fb:07:69:06:db:12:42:57:2d:99:78:49:4c:0a:
         9a:d2:17:c4:55:3d:85:71:9a:08:b7:b2:cf:57:d5:63:1d:2f:
         9f:be:3d:31:98:da:3a:3f:bb:1e:14:26:2d:82:e7:d7:84:cb:
         53:5e:c6:70:3f:0a:f6:ac:e0:55:41:8a:84:41:5d:a6:c0:11:
         d1:71:4c:b9:80:d4:54:c8:70:e3:00:3f:ce:9e:98:d2:5b:aa:
         11:0e:30:f3:6a:95:aa:69:13:fc:06:07:28:dc:93:43:f6:1f:
         15:ec:0e:f7:bc:d4:e7:74:52:7f:c4:cf:fe:34:6f:83:a5:15:
         4a:bf:35:42:16:a3:5f:79:a7:7b:28:86:ef:8d:5d:28:85:6f:
         08:46:30:f0:49:05:7e:cd:45:9d:54:69:dd:ad:9b:1e:9d:1d:
         fa:2c:d7:b6:fc:09:3d:cd:47:a6:91:3d:bd:a0:b2:ec:03:01:
         db:da:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:20:00 2025 by rpki-client