Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/urbSwyH2g_aMzljZn-futulLg8U.roa
File:                     urbSwyH2g_aMzljZn-futulLg8U.roa (raw, json)
Hash identifier:          rm4s4D/IHjdJxcWhdQFcBx5xmIuB0qzSWf5Y38JO2uc=
Subject key identifier:   BA:B6:D2:C3:21:F6:83:F6:8C:CE:58:D9:9F:E7:EE:B6:E9:4B:83:C5
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0338
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/urbSwyH2g_aMzljZn-futulLg8U.roa
Signing time:             Fri 01 Aug 2025 01:39:57 +0000
ROA not before:           Fri 01 Aug 2025 01:39:57 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        218.45.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:39:57 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=BAB6D2C321F683F68CCE58D99FE7EEB6E94B83C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:8a:bf:c1:28:45:3f:c1:82:b5:70:80:cd:
                    11:c2:00:5c:49:34:80:c7:2b:75:14:f6:a0:05:15:
                    61:89:19:52:08:db:cb:0c:58:d6:a0:27:eb:bc:ff:
                    0c:2a:79:57:95:5c:39:c0:e1:f0:c9:c8:0a:fd:43:
                    a1:79:ac:92:d5:27:c5:ba:b2:69:8c:b5:eb:64:e2:
                    71:c5:b4:01:89:c0:c1:96:18:55:c0:c1:f5:a4:15:
                    64:9e:a7:06:e4:74:e0:e1:71:ac:73:db:63:4c:2c:
                    26:3f:da:3d:68:1a:da:af:b4:1a:73:4f:08:30:88:
                    b8:52:3d:be:1a:fd:0a:9f:43:1a:53:e3:d0:b1:55:
                    eb:94:c3:b2:86:b7:be:b0:23:ff:88:c3:7c:a3:47:
                    b4:e9:2e:5b:36:b7:44:eb:ce:6b:ed:0f:39:62:d4:
                    4a:50:7a:5f:40:c9:b0:c5:9a:f4:3b:d8:45:95:00:
                    6a:50:e0:31:bd:79:82:f2:27:2d:72:89:93:4a:cf:
                    c2:d4:7b:95:6f:7b:07:22:6a:4e:a4:f0:3e:46:7b:
                    53:27:63:73:dd:96:37:2f:90:13:19:3e:5b:68:49:
                    04:11:34:6a:d3:85:b9:db:f8:bf:23:49:94:10:1f:
                    50:50:b2:fc:53:6e:a1:b5:aa:8d:76:be:34:4f:fe:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:D2:C3:21:F6:83:F6:8C:CE:58:D9:9F:E7:EE:B6:E9:4B:83:C5
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/urbSwyH2g_aMzljZn-futulLg8U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:a8:a2:23:07:cf:5a:5e:5c:19:2d:85:2e:70:23:f2:fc:
         93:45:1d:27:4a:27:1b:38:ba:37:d1:cb:0c:2e:0d:34:06:6f:
         0f:61:7c:70:26:d5:37:52:d2:08:f4:96:d8:8c:5a:c8:d2:26:
         84:a1:2d:1e:2f:7a:2f:a2:0f:e6:25:54:f4:58:7b:2d:3e:ec:
         05:99:be:71:f3:1f:ef:56:f9:43:0c:36:40:cd:c8:57:b2:5f:
         c7:92:67:7c:16:a2:a5:48:93:6a:36:19:6f:1e:6e:50:89:6c:
         0e:f0:61:97:f9:3d:30:b2:13:31:70:60:dd:25:93:9a:72:a5:
         5c:96:5d:ce:24:1d:8f:dd:7e:80:0a:6f:5d:99:07:34:fd:6a:
         6e:fd:19:10:e0:89:37:57:d4:4a:08:63:3e:a7:73:3e:98:fe:
         62:18:cb:af:94:1d:c7:8a:fc:5f:ed:0c:a7:30:d2:69:a6:18:
         eb:52:1a:90:ce:ab:5e:85:e0:92:3c:31:50:ca:f2:53:ba:40:
         b3:81:f3:be:27:22:ba:7a:cf:fd:e0:75:7c:84:32:89:66:db:
         41:00:3f:94:e6:85:1e:2a:56:1b:a4:d4:da:6a:ac:47:c9:3c:
         ba:bd:1c:84:20:0e:c4:e7:1d:cf:bb:12:74:81:e1:35:48:36:
         4a:46:58:43
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTM5NTdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEJBQjZEMkMzMjFGNjgz
RjY4Q0NFNThEOTlGRTdFRUI2RTk0QjgzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiToq/wShFP8GCtXCAzRHCAFxJNIDHK3UU9qAFFWGJGVII28sM
WNagJ+u8/wwqeVeVXDnA4fDJyAr9Q6F5rJLVJ8W6smmMtetk4nHFtAGJwMGWGFXA
wfWkFWSepwbkdODhcaxz22NMLCY/2j1oGtqvtBpzTwgwiLhSPb4a/QqfQxpT49Cx
VeuUw7KGt76wI/+Iw3yjR7TpLls2t0TrzmvtDzli1EpQel9AybDFmvQ72EWVAGpQ
4DG9eYLyJy1yiZNKz8LUe5Vvewciak6k8D5Ge1MnY3PdljcvkBMZPltoSQQRNGrT
hbnb+L8jSZQQH1BQsvxTbqG1qo12vjRP/pVNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUurbSwyH2g/aMzljZn+futulLg8UwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3VyYlN3eUgyZ19hTXpsalpuLWZ1dHVsTGc4VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATaLXAwDQYJKoZIhvcNAQELBQADggEBAJoKqKIjB89aXlwZLYUucCPy/JNF
HSdKJxs4ujfRywwuDTQGbw9hfHAm1TdS0gj0ltiMWsjSJoShLR4vei+iD+YlVPRY
ey0+7AWZvnHzH+9W+UMMNkDNyFeyX8eSZ3wWoqVIk2o2GW8eblCJbA7wYZf5PTCy
EzFwYN0lk5pypVyWXc4kHY/dfoAKb12ZBzT9am79GRDgiTdX1EoIYz6ncz6Y/mIY
y6+UHceK/F/tDKcw0mmmGOtSGpDOq16F4JI8MVDK8lO6QLOB874nIrp6z/3gdXyE
Molm20EAP5TmhR4qVhuk1NpqrEfJPLq9HIQgDsTnHc+7EnSB4TVINkpGWEM=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:25:50 2025 by rpki-client