Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wDMGJmro94q3KU5kq-vPUbgaDF8.roa
File:                     wDMGJmro94q3KU5kq-vPUbgaDF8.roa (raw, json)
Hash identifier:          BzkOrehqnX2kh437E5L51Z4EIVGB9JEAWFjopwW+pT4=
Subject key identifier:   C0:33:06:26:6A:E8:F7:8A:B7:29:4E:64:AB:EB:CF:51:B8:1A:0C:5F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03E0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wDMGJmro94q3KU5kq-vPUbgaDF8.roa
Signing time:             Fri 01 Aug 2025 02:03:16 +0000
ROA not before:           Fri 01 Aug 2025 02:03:16 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        221.132.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 02:03:16 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C03306266AE8F78AB7294E64ABEBCF51B81A0C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:4a:09:39:13:0d:b3:23:bb:93:bb:dc:23:
                    d4:d6:67:46:4f:74:27:36:c0:c1:b5:c1:9d:b8:49:
                    bb:18:68:50:f6:72:8b:50:f7:db:e0:f0:c2:a2:06:
                    44:62:ff:bd:76:b2:08:dc:a8:b0:1d:2a:f3:ea:8f:
                    13:69:56:cf:6a:9e:8e:06:37:1a:8a:aa:dc:56:34:
                    9f:03:e0:f5:b9:af:4e:a6:9f:13:87:74:6c:b2:a2:
                    28:ae:a5:fa:51:a6:4c:bb:bf:3d:56:78:3e:0e:de:
                    61:01:35:bf:a9:6a:01:28:20:57:2f:95:46:42:90:
                    e2:e9:8c:2b:73:22:02:db:26:be:d3:ec:bd:3d:77:
                    7f:e4:ef:cb:3e:62:15:8b:9e:7b:59:5d:10:4b:d0:
                    b7:71:aa:89:4e:92:1a:5d:2b:dd:ea:94:11:9e:30:
                    fb:50:71:00:df:18:ec:0f:22:33:86:38:51:11:d8:
                    94:fc:a6:fd:b3:ff:2a:32:b3:2f:67:ab:09:ef:3f:
                    b6:65:f2:37:4a:ad:32:b2:37:5e:8d:19:f8:89:48:
                    45:3e:79:0e:58:b4:62:5a:cf:cf:55:24:d3:36:46:
                    9a:84:29:9d:a5:a7:11:2f:21:4d:4b:e6:a7:7c:f7:
                    06:92:8a:3c:81:d8:aa:d0:84:26:c3:79:26:6e:77:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:06:26:6A:E8:F7:8A:B7:29:4E:64:AB:EB:CF:51:B8:1A:0C:5F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wDMGJmro94q3KU5kq-vPUbgaDF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:71:cc:a4:f8:1f:ea:47:70:08:24:fa:6b:bd:8a:01:39:3e:
         3e:f3:4b:9c:83:9c:d1:e7:f3:a6:0a:45:4d:dc:20:5f:38:76:
         76:d6:ed:cc:5d:5b:48:fd:83:99:97:7c:8f:69:d0:de:a8:eb:
         f0:ea:ef:76:5e:eb:e6:13:25:07:0a:e1:d3:f0:6c:36:a0:bf:
         c8:cb:b3:e9:b7:23:d3:a9:6c:55:3c:26:53:76:59:e7:d0:8f:
         20:5a:e2:14:2d:28:54:1f:42:44:db:79:16:87:4d:d9:d3:7d:
         5f:61:e0:35:1f:02:72:8c:9d:63:91:1b:08:51:40:19:01:ad:
         5b:fe:bf:d2:9c:69:73:e3:e4:3f:0c:8a:b2:4f:80:d8:ca:bf:
         37:0e:7d:1c:9b:03:2e:1d:69:ac:84:1a:e3:99:21:b9:d4:2e:
         ad:96:d3:02:a3:5a:42:53:7e:db:23:01:ba:1b:20:3f:f3:80:
         24:94:df:27:31:f3:bf:d0:8c:cd:c0:42:da:b0:de:d1:69:32:
         cb:f3:83:ed:7e:cb:d6:ce:1d:e7:10:40:04:d0:1e:98:f8:a3:
         4b:3c:06:a4:95:1c:37:27:0c:81:e0:af:0b:c8:98:73:06:94:
         74:fb:c6:72:6a:1b:a6:c0:06:b4:2d:69:55:29:35:75:db:37:
         8a:52:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:32:24 2025 by rpki-client