Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/weWf5G7f9sHCZGzjG49-YFxgrmc.roa
File:                     weWf5G7f9sHCZGzjG49-YFxgrmc.roa (raw, json)
Hash identifier:          PXUReUVYtBCQA4p9rmv5c31YiPNQzYH9wXxHEiWI2bs=
Subject key identifier:   C1:E5:9F:E4:6E:DF:F6:C1:C2:64:6C:E3:1B:8F:7E:60:5C:60:AE:67
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0342
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/weWf5G7f9sHCZGzjG49-YFxgrmc.roa
Signing time:             Fri 01 Aug 2025 01:40:02 +0000
ROA not before:           Fri 01 Aug 2025 01:40:02 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        219.112.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:40:02 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C1E59FE46EDFF6C1C2646CE31B8F7E605C60AE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:0a:6d:1e:99:11:b5:70:59:ab:a1:11:08:
                    7e:ac:2d:03:19:28:8d:d3:e3:42:5c:26:01:5d:28:
                    8a:6c:28:d0:ba:f3:d0:b6:6b:b2:27:43:df:b5:f0:
                    e0:a3:2c:70:5b:5d:ef:af:8c:1b:61:75:72:28:c9:
                    72:4d:8e:92:83:ff:55:e8:cf:75:ac:32:6f:f9:84:
                    79:b1:34:f3:e6:16:8a:15:2f:a0:33:ff:de:9f:17:
                    21:86:f4:ff:0b:6c:5d:06:8c:df:43:f0:a8:41:8a:
                    b2:d4:10:2f:93:2a:99:33:0a:99:aa:d6:44:78:b4:
                    4d:41:e2:14:a5:ba:d7:ce:5e:d7:5d:44:23:31:59:
                    53:43:d7:f7:71:fc:4e:72:91:c2:24:e0:29:dc:10:
                    3d:97:d6:dd:ab:13:49:67:b4:9d:4f:5f:0d:90:fd:
                    1a:e1:fa:c9:29:c1:d8:b4:ab:13:15:64:82:29:15:
                    fa:e2:50:b6:dd:e2:e4:72:44:c0:96:06:87:49:79:
                    25:4c:c8:89:48:bc:43:99:c7:69:df:5d:07:60:07:
                    5c:5a:bb:fd:d6:08:1d:a1:17:c4:b2:ae:3f:fd:d4:
                    f6:21:e9:03:e9:32:6c:da:4a:0b:ea:a4:a0:9d:86:
                    06:3c:8c:d6:1d:30:34:98:5b:6c:c8:48:a9:66:a5:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:9F:E4:6E:DF:F6:C1:C2:64:6C:E3:1B:8F:7E:60:5C:60:AE:67
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/weWf5G7f9sHCZGzjG49-YFxgrmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:a2:0b:b4:23:8c:75:0b:78:11:47:9b:6c:c4:fc:61:92:
         31:c3:62:63:e7:94:15:10:da:e1:a4:04:51:ee:55:ec:56:5a:
         f7:b9:44:df:5d:18:65:c0:94:bb:90:fa:61:10:bb:be:54:1f:
         6a:47:8e:40:11:7a:19:c3:06:35:2c:5c:be:38:66:c2:e6:3d:
         53:e7:bf:3a:d5:60:2a:d6:ce:c3:82:f9:3e:5d:19:e3:81:e6:
         70:e5:d7:ab:15:3d:9b:06:d0:9f:56:18:66:d1:97:d1:00:73:
         3e:1a:0d:3d:ee:f7:a5:66:e4:14:45:dd:62:60:e3:43:07:15:
         32:6e:df:20:18:02:08:4a:bf:95:cc:49:16:10:be:41:74:84:
         ab:ec:a3:3c:cf:1b:fb:05:54:d2:58:5d:21:b2:5b:75:0f:ec:
         2f:5a:b3:83:cd:65:2b:d8:8e:7d:7b:63:0d:cc:4e:c4:93:56:
         5e:f2:a7:53:e5:85:61:ea:1c:00:3a:20:b6:01:e2:7f:cb:40:
         de:e5:4f:a0:ac:fa:11:78:83:98:a2:61:df:e0:e8:d0:3b:7b:
         35:a6:93:05:e9:ef:1c:fc:c2:ee:0f:db:7a:f1:cf:45:d4:d1:
         60:ad:71:bc:1d:c0:2c:ab:8e:2a:75:fc:07:aa:05:ad:a9:d6:
         b2:70:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:21:37 2025 by rpki-client