Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vaKj4J2kVh7TDEVC0Ufe-f09R9M.roa
File:                     vaKj4J2kVh7TDEVC0Ufe-f09R9M.roa (raw, json)
Hash identifier:          WATZxMwU378ccr2bUTE0MLVifAH0LIy/hURROeL571M=
Subject key identifier:   BD:A2:A3:E0:9D:A4:56:1E:D3:0C:45:42:D1:47:DE:F9:FD:3D:47:D3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03BD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vaKj4J2kVh7TDEVC0Ufe-f09R9M.roa
Signing time:             Fri 01 Aug 2025 01:58:53 +0000
ROA not before:           Fri 01 Aug 2025 01:58:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        119.24.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=BDA2A3E09DA4561ED30C4542D147DEF9FD3D47D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:5c:bf:f0:cc:fa:5a:58:84:b6:a5:cf:57:
                    82:6e:c6:7a:98:70:6c:85:fc:ec:71:c5:c8:9f:ff:
                    f4:7b:76:09:d3:f5:64:11:97:80:8b:51:61:e0:ec:
                    19:8d:b7:62:31:cf:5c:ec:fd:5e:63:57:f3:27:ed:
                    c7:97:9a:84:30:67:16:d8:09:5d:0f:06:1a:b1:eb:
                    c0:3a:60:11:ed:13:fa:91:b7:a4:06:5c:0c:85:a7:
                    cb:89:00:46:83:a0:35:b4:ac:bb:34:ca:e5:04:4e:
                    ea:b7:7d:61:70:ef:a7:75:8f:6b:de:40:cf:bd:bc:
                    d4:8e:a3:1d:a6:cd:9f:a9:96:68:95:5b:b6:d3:12:
                    50:db:6e:60:a9:74:4d:59:fa:30:0c:c5:d0:ca:3f:
                    8a:87:6a:24:89:8a:ac:ef:d2:d9:b1:31:df:4c:77:
                    90:9d:f1:9a:8c:75:00:d7:61:b2:f5:24:23:49:b8:
                    ba:e6:16:d8:ff:5d:75:e7:e7:1d:2a:62:77:b1:f9:
                    43:8e:1c:83:24:45:89:9a:8b:f7:c6:c9:e2:54:b8:
                    95:25:93:51:95:26:e3:eb:80:9a:1b:14:24:3c:4f:
                    d7:e7:48:1b:44:fe:0f:9c:35:5a:34:99:b5:a3:33:
                    b0:3e:0e:da:51:72:04:8b:06:e6:45:60:32:31:1f:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:A3:E0:9D:A4:56:1E:D3:0C:45:42:D1:47:DE:F9:FD:3D:47:D3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vaKj4J2kVh7TDEVC0Ufe-f09R9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.24.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c2:f3:d1:a2:a9:be:3b:75:9d:86:57:f9:1a:f7:41:c9:ca:05:
         2b:7d:48:9f:df:0e:d3:3d:bc:7a:27:cc:f8:c7:d5:2f:ac:d4:
         c9:17:44:b1:77:6c:b4:3d:cb:ae:0a:71:9f:b8:ae:79:98:1a:
         ee:4f:93:93:ea:83:26:f5:09:b3:2f:e3:e7:7c:06:87:26:4f:
         7f:35:9d:45:cd:23:51:ca:fe:0e:58:9e:f9:3e:c2:5a:16:97:
         d4:22:dc:1e:3d:c6:22:51:f2:3b:8e:59:45:21:af:d5:69:2f:
         3f:b9:8c:55:15:ee:bf:db:e0:ed:c7:21:af:2c:b4:7a:5c:e3:
         40:e1:07:39:4b:19:99:e5:a9:5f:62:05:0d:3b:eb:c1:5b:a9:
         0e:fd:29:73:c0:06:9a:a7:fb:76:70:ae:70:77:bc:5a:3a:49:
         5d:63:83:c3:87:a2:1f:bc:e3:ac:73:91:91:b3:84:45:4e:96:
         a5:60:dd:09:0f:32:4d:28:b7:4f:d9:fe:8b:19:5d:10:e9:2b:
         d8:54:5d:7c:bf:c0:d2:ce:2d:5d:3a:e6:01:28:85:2c:d2:7c:
         d9:aa:2e:35:46:9b:d5:98:d8:e0:c6:ca:f6:fb:8c:fa:a5:9c:
         7f:e1:25:26:cc:08:46:bf:47:18:f6:3e:98:8f:74:64:26:fa:
         2b:4c:cd:49
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTU4NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEJEQTJBM0UwOURBNDU2
MUVEMzBDNDU0MkQxNDdERUY5RkQzRDQ3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYmly/8Mz6WliEtqXPV4JuxnqYcGyF/Oxxxcif//R7dgnT9WQR
l4CLUWHg7BmNt2Ixz1zs/V5jV/Mn7ceXmoQwZxbYCV0PBhqx68A6YBHtE/qRt6QG
XAyFp8uJAEaDoDW0rLs0yuUETuq3fWFw76d1j2veQM+9vNSOox2mzZ+plmiVW7bT
ElDbbmCpdE1Z+jAMxdDKP4qHaiSJiqzv0tmxMd9Md5Cd8ZqMdQDXYbL1JCNJuLrm
Ftj/XXXn5x0qYnex+UOOHIMkRYmai/fGyeJUuJUlk1GVJuPrgJobFCQ8T9fnSBtE
/g+cNVo0mbWjM7A+DtpRcgSLBuZFYDIxH3y5AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUvaKj4J2kVh7TDEVC0Ufe+f09R9MwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3ZhS2o0SjJrVmg3VERFVkMwVWZlLWYwOVI5TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwF3GDANBgkqhkiG9w0BAQsFAAOCAQEAwvPRoqm+O3Wdhlf5GvdBycoFK31I
n98O0z28eifM+MfVL6zUyRdEsXdstD3Lrgpxn7iueZga7k+Tk+qDJvUJsy/j53wG
hyZPfzWdRc0jUcr+Dlie+T7CWhaX1CLcHj3GIlHyO45ZRSGv1WkvP7mMVRXuv9vg
7cchryy0elzjQOEHOUsZmeWpX2IFDTvrwVupDv0pc8AGmqf7dnCucHe8WjpJXWOD
w4eiH7zjrHORkbOERU6WpWDdCQ8yTSi3T9n+ixldEOkr2FRdfL/A0s4tXTrmASiF
LNJ82aouNUab1ZjY4MbK9vuM+qWcf+ElJswIRr9HGPY+mI90ZCb6K0zNSQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:49 2025 by rpki-client