Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/xGB1suOvoytaCZcVIsez8s2Wn1Y.roa
File:                     xGB1suOvoytaCZcVIsez8s2Wn1Y.roa (raw, json)
Hash identifier:          PjRYRyOyT49DSjIskQ+8Z12sGHATw/hzG9eBYhfGIx0=
Subject key identifier:   C4:60:75:B2:E3:AF:A3:2B:5A:09:97:15:22:C7:B3:F2:CD:96:9F:56
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0360
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xGB1suOvoytaCZcVIsez8s2Wn1Y.roa
Signing time:             Fri 01 Aug 2025 01:43:48 +0000
ROA not before:           Fri 01 Aug 2025 01:43:48 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        210.2.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:48 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C46075B2E3AFA32B5A09971522C7B3F2CD969F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:2d:a9:0d:9c:ed:2d:45:10:f1:4a:da:91:
                    b7:31:17:dd:3b:f7:3b:1a:3d:72:dd:3b:8a:6d:de:
                    d2:69:d9:8a:05:b2:9d:6b:65:fc:d2:87:f6:1e:0a:
                    98:95:d5:48:3c:48:af:51:43:21:14:90:2a:87:6f:
                    62:6f:e8:0f:17:c5:53:04:dc:6b:77:ee:eb:da:10:
                    d8:42:13:a9:e8:80:44:19:bb:e1:e2:78:40:9e:dc:
                    a9:cc:dc:54:3d:d1:ac:58:de:58:55:af:fa:79:0e:
                    c2:4d:12:5a:ea:6c:01:5f:e0:81:30:79:40:77:4d:
                    e9:b0:2c:96:1e:7e:d9:96:67:af:49:04:3a:db:e3:
                    7f:59:86:83:c0:e5:61:b9:0d:6a:81:88:a1:30:6b:
                    3c:e0:ba:f9:77:fc:00:07:0f:19:9e:f3:25:6c:3d:
                    e4:41:b4:a6:48:46:ef:20:72:e9:16:63:c5:80:de:
                    44:5a:31:9a:83:f6:59:6a:cc:27:51:37:74:90:9a:
                    cb:06:74:eb:99:0b:bb:94:d0:73:ed:0a:ef:5d:0a:
                    07:78:00:38:0e:89:77:6e:36:2a:ad:55:35:1f:2f:
                    ae:65:c3:da:96:45:e1:3b:97:f4:0e:06:36:df:29:
                    19:90:de:9a:56:56:84:5f:95:4d:0b:5a:fa:ce:a9:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:60:75:B2:E3:AF:A3:2B:5A:09:97:15:22:C7:B3:F2:CD:96:9F:56
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/xGB1suOvoytaCZcVIsez8s2Wn1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.2.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:b7:e7:0d:6a:95:3e:db:96:83:d0:ad:ba:aa:f2:f0:55:
         4f:8a:7f:3f:ec:47:63:75:18:95:e8:c8:c0:7e:1f:d4:35:b9:
         73:65:48:c6:6c:4b:7f:9d:ec:4e:bb:cc:fc:bf:9b:07:65:9e:
         31:db:ee:d3:64:55:f0:71:98:b2:a9:0c:b5:db:28:fe:fd:f9:
         a3:30:7f:c0:6e:da:ff:6c:a0:42:da:22:0e:ea:d2:15:5e:ba:
         84:a4:51:e6:11:eb:3a:d4:88:22:3d:6d:83:a6:09:29:6c:f3:
         15:f4:54:7e:fb:59:55:c8:34:32:44:68:08:1b:11:b6:74:16:
         a0:99:58:6f:1b:64:2e:11:3c:81:61:ca:71:87:01:51:68:ef:
         9a:a9:63:8c:59:58:1b:f0:71:0a:a6:34:22:2a:0d:22:e8:6e:
         5d:0c:b5:b7:38:ca:75:db:9a:9e:34:01:17:93:35:af:3d:3f:
         ac:ef:6e:2e:df:ce:e4:b8:91:04:49:5e:a1:7c:c4:b3:8d:53:
         b0:60:68:0a:90:fe:0f:1e:b4:d9:fe:a8:e5:8b:99:50:06:15:
         56:ae:75:0d:ce:a9:95:01:65:98:f5:12:1c:77:81:51:13:d8:
         2b:35:93:45:f0:b6:75:b7:1f:86:b6:93:17:71:69:72:d4:7a:
         22:49:d1:fb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQzNDhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEM0NjA3NUIyRTNBRkEz
MkI1QTA5OTcxNTIyQzdCM0YyQ0Q5NjlGNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhFS2pDZztLUUQ8UrakbcxF9079zsaPXLdO4pt3tJp2YoFsp1r
ZfzSh/YeCpiV1Ug8SK9RQyEUkCqHb2Jv6A8XxVME3Gt37uvaENhCE6nogEQZu+Hi
eECe3KnM3FQ90axY3lhVr/p5DsJNElrqbAFf4IEweUB3TemwLJYeftmWZ69JBDrb
439ZhoPA5WG5DWqBiKEwazzguvl3/AAHDxme8yVsPeRBtKZIRu8gcukWY8WA3kRa
MZqD9llqzCdRN3SQmssGdOuZC7uU0HPtCu9dCgd4ADgOiXduNiqtVTUfL65lw9qW
ReE7l/QOBjbfKRmQ3ppWVoRflU0LWvrOqQyRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxGB1suOvoytaCZcVIsez8s2Wn1YwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3hHQjFzdU92b3l0YUNaY1ZJc2V6OHMyV24xWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSAsAwDQYJKoZIhvcNAQELBQADggEBAC1At+cNapU+25aD0K26qvLwVU+K
fz/sR2N1GJXoyMB+H9Q1uXNlSMZsS3+d7E67zPy/mwdlnjHb7tNkVfBxmLKpDLXb
KP79+aMwf8Bu2v9soELaIg7q0hVeuoSkUeYR6zrUiCI9bYOmCSls8xX0VH77WVXI
NDJEaAgbEbZ0FqCZWG8bZC4RPIFhynGHAVFo75qpY4xZWBvwcQqmNCIqDSLobl0M
tbc4ynXbmp40AReTNa89P6zvbi7fzuS4kQRJXqF8xLONU7BgaAqQ/g8etNn+qOWL
mVAGFVaudQ3OqZUBZZj1Ehx3gVET2Cs1k0XwtnW3H4a2kxdxaXLUeiJJ0fs=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:52 2025 by rpki-client