Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/teb_v4sxjgfrNv38SPIZwVNqtNk.roa
File:                     teb_v4sxjgfrNv38SPIZwVNqtNk.roa (raw, json)
Hash identifier:          tBBsbguG6LxbFwNom1r44lxB15NwV1r557ZJfsAigQU=
Subject key identifier:   B5:E6:FF:BF:8B:31:8E:07:EB:36:FD:FC:48:F2:19:C1:53:6A:B4:D9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03B2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/teb_v4sxjgfrNv38SPIZwVNqtNk.roa
Signing time:             Fri 01 Aug 2025 01:58:47 +0000
ROA not before:           Fri 01 Aug 2025 01:58:47 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        49.250.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:47 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B5E6FFBF8B318E07EB36FDFC48F219C1536AB4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:52:eb:a1:91:0e:07:0a:53:7b:f1:60:71:
                    21:99:d0:92:0f:48:51:03:af:42:01:a2:32:cb:bb:
                    fa:68:68:c9:d2:9e:e1:b9:08:f1:28:82:2e:83:8e:
                    df:a8:ac:6b:72:ed:4d:6a:60:44:8d:8f:53:21:a6:
                    47:5b:56:10:ba:ce:2a:60:5b:32:91:f3:40:3a:32:
                    78:7a:02:40:68:06:21:53:c7:15:3b:26:fd:05:7a:
                    60:59:6a:18:cd:9e:a9:5f:cf:7a:e8:df:2a:f3:83:
                    c8:0c:e6:45:f5:3f:71:1c:8b:e9:50:38:76:53:25:
                    cd:11:ab:28:7b:64:27:b9:fe:15:3f:aa:58:88:8f:
                    53:90:e3:f7:59:a7:b3:6c:bd:75:32:88:d8:b1:17:
                    a9:45:9c:c6:88:f3:c4:2f:3a:65:c8:ed:b7:e4:ab:
                    18:3e:76:9f:e6:e1:d9:fa:db:80:da:d5:26:75:47:
                    51:c2:e6:0c:5e:5d:7b:63:f5:72:70:5f:0d:a4:6e:
                    4b:12:f4:b2:49:9d:f4:80:95:1d:26:fc:8e:8d:61:
                    7d:0b:0a:f2:35:f3:60:10:e0:af:46:99:2d:42:0b:
                    c1:47:94:2b:45:23:fc:d5:22:93:d8:5a:45:fa:b0:
                    c0:83:cb:4e:52:9e:91:94:21:bb:91:56:80:6b:ff:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:FF:BF:8B:31:8E:07:EB:36:FD:FC:48:F2:19:C1:53:6A:B4:D9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/teb_v4sxjgfrNv38SPIZwVNqtNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5f:94:0e:5a:3e:02:69:29:b2:54:ff:38:90:4a:6f:7e:d7:f8:
         dc:08:ca:33:88:9c:64:09:3e:2c:96:4d:01:b4:22:fb:95:3f:
         e9:f1:85:7e:15:84:a9:33:27:6d:5b:7f:a7:fd:43:35:8f:0f:
         11:5f:8f:61:11:2e:02:7f:e6:80:db:0c:8a:fc:ff:03:29:98:
         65:1f:c7:b7:0c:58:8f:2e:78:79:b8:d8:c3:7e:86:57:12:22:
         09:4f:05:3f:c0:1c:f8:09:d0:af:bd:9e:7d:c6:0c:10:a8:4b:
         61:ac:48:c5:36:20:e7:87:c6:52:9d:08:9f:b3:35:2a:90:94:
         01:f3:21:94:04:0a:fc:b5:52:39:73:bf:df:a3:ec:b5:4e:a8:
         de:b6:09:ec:f5:f0:f2:f7:93:9a:bc:9b:a8:7c:c1:25:38:78:
         00:ae:30:46:55:7d:67:ff:9f:88:52:34:ff:1c:e5:a9:df:61:
         d1:89:fa:1b:ab:0b:51:d1:6d:6e:cc:5b:e2:09:6a:4b:08:6e:
         53:1b:0b:60:32:93:87:96:e0:14:19:95:14:17:50:dd:9e:a3:
         f8:bb:d3:2c:21:03:ec:d6:b3:4e:0e:c4:9d:08:44:25:68:21:
         9a:36:fc:f6:03:81:b5:57:71:23:ec:07:c3:d7:38:f2:17:89:
         4d:e3:e0:b5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTU4NDdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEI1RTZGRkJGOEIzMThF
MDdFQjM2RkRGQzQ4RjIxOUMxNTM2QUI0RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAClLroZEOBwpTe/FgcSGZ0JIPSFEDr0IBojLLu/poaMnSnuG5
CPEogi6Djt+orGty7U1qYESNj1MhpkdbVhC6zipgWzKR80A6Mnh6AkBoBiFTxxU7
Jv0FemBZahjNnqlfz3ro3yrzg8gM5kX1P3Eci+lQOHZTJc0Rqyh7ZCe5/hU/qliI
j1OQ4/dZp7NsvXUyiNixF6lFnMaI88QvOmXI7bfkqxg+dp/m4dn624Da1SZ1R1HC
5gxeXXtj9XJwXw2kbksS9LJJnfSAlR0m/I6NYX0LCvI182AQ4K9GmS1CC8FHlCtF
I/zVIpPYWkX6sMCDy05SnpGUIbuRVoBr/1FBAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUteb/v4sxjgfrNv38SPIZwVNqtNkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3RlYl92NHN4amdmck52MzhTUElad1ZOcXROay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEx+jANBgkqhkiG9w0BAQsFAAOCAQEAX5QOWj4CaSmyVP84kEpvftf43AjK
M4icZAk+LJZNAbQi+5U/6fGFfhWEqTMnbVt/p/1DNY8PEV+PYREuAn/mgNsMivz/
AymYZR/HtwxYjy54ebjYw36GVxIiCU8FP8Ac+AnQr72efcYMEKhLYaxIxTYg54fG
Up0In7M1KpCUAfMhlAQK/LVSOXO/36PstU6o3rYJ7PXw8veTmrybqHzBJTh4AK4w
RlV9Z/+fiFI0/xzlqd9h0Yn6G6sLUdFtbsxb4glqSwhuUxsLYDKTh5bgFBmVFBdQ
3Z6j+LvTLCED7NazTg7EnQhEJWghmjb89gOBtVdxI+wHw9c48heJTePgtQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:23:59 2025 by rpki-client