Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tedmdSzk97Rbhp0Q2HzDLkYbm2k.roa
File:                     tedmdSzk97Rbhp0Q2HzDLkYbm2k.roa (raw, json)
Hash identifier:          zSDIRt9l/mxLSe/OwkwbXNxbNPTSQAtaAkJRb9lUrwE=
Subject key identifier:   B5:E7:66:75:2C:E4:F7:B4:5B:86:9D:10:D8:7C:C3:2E:46:1B:9B:69
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0328
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tedmdSzk97Rbhp0Q2HzDLkYbm2k.roa
Signing time:             Fri 01 Aug 2025 01:34:51 +0000
ROA not before:           Fri 01 Aug 2025 01:34:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        27.116.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:34:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B5E766752CE4F7B45B869D10D87CC32E461B9B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:1d:10:c4:0c:c8:97:00:fb:44:d0:d5:35:
                    a1:cf:c0:4d:e2:9d:65:90:dd:12:d8:6f:bf:e6:cb:
                    5a:fa:8f:28:59:4a:d2:a2:47:4d:6b:bd:86:ab:2f:
                    92:83:35:c7:63:be:95:3f:87:c6:00:4b:de:50:ba:
                    ce:6e:13:47:0b:49:a7:1a:3b:c1:40:f1:9c:60:de:
                    ad:28:2e:67:90:62:d9:c0:62:10:69:89:9d:bd:1c:
                    42:0c:9d:a0:3a:0d:b8:99:83:5a:dd:9b:65:d3:7c:
                    14:30:69:e9:b3:29:42:d9:2a:14:d5:31:d7:25:42:
                    80:89:ca:7d:fa:d7:e9:87:53:3c:76:86:fe:e1:9b:
                    74:2e:30:5b:74:44:9b:f7:5a:01:57:82:e9:8a:49:
                    d3:e8:64:a4:71:8a:b3:6d:19:79:02:51:51:b1:9c:
                    4a:ad:79:eb:8d:3e:6b:40:dc:28:eb:1b:22:39:8b:
                    7c:d3:b1:89:9f:66:ca:05:8e:dc:91:f2:07:42:e9:
                    8b:aa:88:3f:4f:33:93:89:f4:86:9a:30:ed:44:cc:
                    bf:51:a4:24:09:0d:d1:a7:8e:c0:ca:d8:7f:07:04:
                    ab:88:1e:16:c2:6c:8f:b0:2b:03:b4:69:b8:b8:f4:
                    56:8d:a9:2f:ff:70:62:ab:ab:02:0c:12:cf:50:4e:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:66:75:2C:E4:F7:B4:5B:86:9D:10:D8:7C:C3:2E:46:1B:9B:69
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tedmdSzk97Rbhp0Q2HzDLkYbm2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.116.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:79:4f:9e:c7:4b:ec:73:71:44:e5:0d:34:dd:4f:f4:28:e0:
         ef:05:f7:e3:8e:72:65:2a:bf:37:62:e3:e9:61:63:01:8e:00:
         68:fb:c2:ff:10:e3:42:d0:e7:19:15:cc:27:66:ff:d0:04:13:
         0b:9b:8f:73:38:1a:f2:98:51:e5:4b:31:82:f5:c2:1c:e0:ea:
         f7:5d:37:17:5a:4a:48:7e:62:96:2f:07:97:db:ef:e6:ed:61:
         b5:20:65:8a:fc:1a:f9:b5:56:4c:16:5c:05:62:8f:3e:f3:45:
         7d:5c:55:f7:de:50:9c:1f:f7:1c:36:45:9f:79:e0:2a:26:cf:
         9e:e3:8f:fc:a7:45:2c:10:d4:7b:07:e5:27:95:f9:fa:34:71:
         09:e8:05:d8:e4:fc:af:bd:e5:a6:b0:21:78:cd:19:fb:f4:6c:
         78:05:1a:b7:91:8c:2f:68:a1:80:52:a4:29:b9:66:0d:bd:22:
         cc:48:00:32:93:5c:72:a2:61:dd:ca:7f:64:28:4e:21:4d:7d:
         8e:36:d0:f6:86:f1:ef:d4:79:4a:8b:a3:be:71:04:f4:8a:c0:
         48:26:a5:a2:49:7f:c5:e4:f2:56:5f:2e:90:c5:d7:ca:af:bf:
         2f:47:db:5f:cb:69:54:a8:fb:fc:44:b1:cb:d9:a8:40:bc:06:
         ae:71:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:39 2025 by rpki-client