Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tPq70i2sRdhQXZT3G38MOxYPb1Y.roa
File:                     tPq70i2sRdhQXZT3G38MOxYPb1Y.roa (raw, json)
Hash identifier:          MlewqQ9GDRnwTdb81tBlQNb5rZxIgGk3rd4QOx7BW4Q=
Subject key identifier:   B4:FA:BB:D2:2D:AC:45:D8:50:5D:94:F7:1B:7F:0C:3B:16:0F:6F:56
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0385
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tPq70i2sRdhQXZT3G38MOxYPb1Y.roa
Signing time:             Fri 01 Aug 2025 01:50:53 +0000
ROA not before:           Fri 01 Aug 2025 01:50:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        180.92.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:50:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B4FABBD22DAC45D8505D94F71B7F0C3B160F6F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:2a:42:c4:dc:d8:40:29:d5:d6:8c:c4:ef:
                    87:14:f0:a0:4c:f5:96:0a:e4:c6:62:6a:34:5e:99:
                    1d:cc:6e:e9:8e:4a:e3:4a:e3:b3:38:ce:47:46:20:
                    da:e4:e9:3a:ae:39:70:a0:02:92:ea:fd:49:d9:24:
                    7c:44:b2:de:fa:43:34:f1:de:a0:05:dc:23:51:19:
                    da:cf:be:cb:cc:02:77:17:21:a9:21:99:d3:53:d9:
                    98:04:8e:c1:dd:ed:07:70:85:5b:5c:18:e8:cd:2c:
                    0e:2d:e7:74:8c:fa:a1:54:fe:d8:ca:05:61:0c:2f:
                    4a:2d:78:f8:a1:ef:40:3f:64:d5:72:9e:68:d8:8b:
                    54:58:1b:df:d8:95:84:ae:1b:f1:cf:b4:d6:80:b2:
                    cc:47:08:6e:8a:58:d2:99:16:3e:67:2a:e8:ff:b3:
                    38:a5:89:2a:8e:54:a5:16:88:7b:87:2e:d8:bd:32:
                    d7:de:22:ef:76:b1:29:1d:b1:15:18:b5:55:ba:07:
                    6e:21:3a:45:c4:3e:48:0d:de:1b:bd:bb:8c:6b:c0:
                    60:66:e9:34:5f:4f:d6:de:11:21:e9:da:a2:77:c7:
                    23:e9:75:19:e5:73:78:8b:d7:10:43:4f:d5:f4:a4:
                    c8:5d:53:ca:ec:84:b3:9e:e3:0a:39:2b:43:60:21:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FA:BB:D2:2D:AC:45:D8:50:5D:94:F7:1B:7F:0C:3B:16:0F:6F:56
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tPq70i2sRdhQXZT3G38MOxYPb1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:ab:f0:57:fd:8c:3d:8a:8b:70:a6:e4:31:61:15:ba:2e:23:
         f1:b8:4b:04:cf:3b:7f:57:d0:14:f7:eb:eb:b6:c2:ae:40:65:
         4d:cc:47:d5:54:e9:d9:76:ae:65:11:5b:01:98:37:88:9a:24:
         0c:7d:1c:e8:ff:90:09:7a:35:29:57:59:f8:1f:76:dd:a3:0d:
         38:d7:a5:1b:82:81:bd:71:a6:41:3b:b0:76:df:39:8e:d5:4f:
         cf:d1:94:10:94:ca:0f:d2:1c:8d:1f:f9:11:cd:1b:20:f9:c6:
         01:15:b1:91:a8:aa:68:04:c6:37:1a:0e:85:93:2c:a1:b1:9d:
         c2:4e:ff:66:39:5e:ef:c4:d7:53:f5:2e:cb:65:da:d4:23:e0:
         7e:59:fd:62:10:6d:66:c6:f4:18:ba:43:6b:d6:06:da:ea:89:
         74:70:3d:c6:22:32:c7:a9:28:0a:eb:bb:4a:8f:c3:56:35:aa:
         98:88:37:9d:d6:2f:08:c3:63:80:64:88:e1:83:c1:f0:1a:ec:
         e0:ae:6f:08:9f:9f:79:14:2c:8b:29:90:34:0f:10:1b:49:61:
         cc:25:d2:80:9a:75:d8:32:4b:66:dd:fe:a6:08:c0:14:69:3b:
         d8:89:18:06:b9:95:6d:bc:39:d8:4b:4e:85:f9:34:4b:65:16:
         f6:ba:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:36:32 2025 by rpki-client