Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zclVX9rKVJAo2iZSxs56flIoZo8.roa
File:                     zclVX9rKVJAo2iZSxs56flIoZo8.roa (raw, json)
Hash identifier:          cCbrX35pXKF9Q4AE+c7cwDH9McW2DhV8Osg7pcIESss=
Subject key identifier:   CD:C9:55:5F:DA:CA:54:90:28:DA:26:52:C6:CE:7A:7E:52:28:66:8F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03BA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zclVX9rKVJAo2iZSxs56flIoZo8.roa
Signing time:             Fri 01 Aug 2025 01:58:51 +0000
ROA not before:           Fri 01 Aug 2025 01:58:51 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        61.192.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:58:51 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=CDC9555FDACA549028DA2652C6CE7A7E5228668F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:54:63:08:15:81:c2:ce:8f:fa:98:a5:25:
                    81:47:d4:29:34:fb:2c:37:93:2a:3b:5a:0e:73:b5:
                    86:20:73:2c:f2:8b:44:ab:15:4d:81:0e:78:6a:ef:
                    ad:0b:fe:71:42:2d:70:cf:20:a0:e1:02:2f:cb:b6:
                    a9:48:98:ed:57:b1:40:b3:fc:7f:ff:95:51:cd:59:
                    66:13:b4:ea:16:13:3f:8b:11:65:15:76:a6:40:ca:
                    ca:cc:a6:75:8f:09:b5:93:99:08:a2:10:ce:ef:5c:
                    83:d9:16:11:34:9e:bb:4f:cb:18:d8:b0:b7:bc:18:
                    3e:7a:76:a6:3d:42:7d:ef:7d:a0:62:1c:3f:91:4e:
                    76:0d:cc:1f:ef:cd:93:75:de:bb:56:0f:ae:28:84:
                    e0:e2:a4:21:22:c7:31:0a:37:bc:4a:34:87:95:3d:
                    ab:fd:1d:f7:ab:e8:1f:d0:d2:ae:30:ba:34:32:21:
                    c6:a2:ba:03:59:a4:8f:1e:54:5a:9b:c2:d4:47:79:
                    ec:93:d6:1a:e2:42:6c:9a:45:ce:d8:4c:97:38:f1:
                    2d:9d:a3:b4:7c:3c:3d:d5:ca:d7:4c:2b:af:7d:03:
                    12:ee:c0:c8:d9:39:32:d3:b9:f5:8e:30:a1:43:45:
                    ab:7f:d8:ba:5e:ee:c2:51:12:f1:23:87:85:72:4d:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:55:5F:DA:CA:54:90:28:DA:26:52:C6:CE:7A:7E:52:28:66:8F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zclVX9rKVJAo2iZSxs56flIoZo8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:68:4e:84:98:80:24:0f:59:a9:c0:53:b9:d0:1e:89:e4:
         fe:7c:3d:f8:ff:5e:af:bc:23:e0:ca:df:d5:66:0f:1c:6f:f2:
         dc:c2:3f:ba:bd:1a:7a:1d:5a:e0:d2:38:c0:e7:02:7b:77:6e:
         b4:0a:41:34:c5:e6:b9:3e:94:25:f6:24:b8:09:a3:b3:a4:d3:
         4c:3d:f3:60:7a:e3:80:df:f2:51:06:38:b1:86:2d:2a:96:c8:
         e4:75:12:a6:cb:b8:7a:f0:30:36:64:be:9d:a7:a0:1e:7a:74:
         57:78:b1:6c:23:30:31:3c:97:0a:8c:f4:db:a0:87:a4:8d:78:
         ba:d7:5a:cd:6e:95:5c:aa:48:a4:50:02:7a:bb:5f:9a:85:50:
         56:2c:4c:59:2a:4f:1e:b5:7b:f8:d1:c2:58:7e:1c:77:b3:b9:
         a9:e8:41:28:d1:80:d5:de:fc:6b:64:ea:08:94:9f:6e:86:00:
         27:02:b2:e9:4d:ee:a5:2d:7a:1e:f7:22:0e:87:0e:67:b8:11:
         9a:f2:ac:f9:8f:80:a3:6e:33:1c:62:a2:bd:46:ed:a1:e6:4f:
         21:05:a4:62:29:d6:03:bd:ad:c8:7b:72:ad:9f:6a:c1:bd:0b:
         be:17:48:07:17:aa:7a:ca:b2:d6:0b:e2:1a:ea:26:20:95:2d:
         d7:1c:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:24:17 2025 by rpki-client