Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/pFCTO2qgF5yZbMi4PhtQsYwqxLs.roa
File:                     pFCTO2qgF5yZbMi4PhtQsYwqxLs.roa (raw, json)
Hash identifier:          4flHzZeR5dXKgZ049V/dafM9E2kxqaEilynHQwb2hGA=
Subject key identifier:   A4:50:93:3B:6A:A0:17:9C:99:6C:C8:B8:3E:1B:50:B1:8C:2A:C4:BB
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       2E
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/pFCTO2qgF5yZbMi4PhtQsYwqxLs.roa
Signing time:             Fri 01 Aug 2025 01:36:04 +0000
ROA not before:           Fri 01 Aug 2025 01:36:04 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24255
IP address blocks:        202.127.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Aug  1 01:36:04 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A450933B6AA0179C996CC8B83E1B50B18C2AC4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:81:a1:25:fe:d6:7e:52:2f:e9:c0:3d:f2:
                    4a:50:ee:0b:da:b0:a1:7b:66:20:f8:42:d5:01:0e:
                    a3:e1:2c:16:80:3c:31:d6:6e:af:18:a3:0a:6a:01:
                    22:f7:3e:20:a7:0a:f9:7f:c6:a4:35:8a:4c:d6:e6:
                    a4:c7:13:8d:5a:1f:66:bc:a6:9c:b7:63:2e:d7:0a:
                    d6:fb:6d:38:8c:51:f9:33:bb:7d:29:18:c8:7b:47:
                    d2:1b:86:c0:15:3c:b8:bd:88:8f:7a:a5:14:94:b0:
                    80:0f:e5:65:bf:82:11:c6:ee:c2:c8:bb:e9:13:f4:
                    60:f2:c7:62:ff:6a:5c:d1:60:5b:17:89:a7:af:34:
                    85:7a:dc:54:b1:7e:ab:9b:5e:3e:0f:f4:b4:fe:c6:
                    87:1b:70:7b:04:56:69:ee:b5:5b:30:c4:05:ee:7c:
                    00:4c:b8:a2:1d:02:77:ba:0a:79:d7:f8:df:64:ae:
                    83:cb:6e:28:6b:b3:2e:d7:8c:bc:d1:cc:54:be:2b:
                    6f:df:40:0b:0c:26:79:e1:b0:51:88:1d:7f:a2:bf:
                    10:85:34:36:cf:ca:ba:92:80:07:a0:1b:be:5e:58:
                    58:15:1c:5d:8a:b6:16:9c:1c:bf:ea:77:78:13:26:
                    0b:b1:4b:45:99:15:7b:c4:47:d9:bc:30:36:c8:bb:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:50:93:3B:6A:A0:17:9C:99:6C:C8:B8:3E:1B:50:B1:8C:2A:C4:BB
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/pFCTO2qgF5yZbMi4PhtQsYwqxLs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:6b:61:7b:f4:a1:18:29:64:c1:da:9c:1c:0c:62:5c:94:a8:
         b1:00:b5:db:c5:5c:33:f6:80:8d:5a:62:d3:27:a5:96:6d:8b:
         be:92:f8:a4:e6:0f:b8:c2:4d:17:a7:b0:4b:94:2a:8d:bc:c6:
         c4:7d:30:e4:13:1b:b0:b8:3f:1e:11:39:59:5a:f0:55:6b:ea:
         f5:39:11:45:34:34:41:d9:a7:c3:69:43:a6:f8:1a:d3:81:0a:
         15:48:14:42:41:2f:3c:0b:f1:7d:f5:6f:f6:44:c6:9b:1b:5e:
         b4:3b:22:f4:82:00:ac:88:c6:6a:ae:4a:db:66:8c:1b:1a:ae:
         63:58:4f:66:b0:28:b9:d8:a1:d4:2c:7a:85:61:e8:45:f9:8f:
         86:94:80:fb:8e:2f:69:52:13:ac:da:5a:c5:52:bb:0f:7d:db:
         17:57:5b:b3:cd:11:ad:31:df:4d:c6:98:5b:c7:99:15:f9:f9:
         f3:60:81:1e:e6:04:ae:67:52:e8:d7:db:c0:a8:39:e1:31:2a:
         ac:89:f9:be:d0:fc:bc:f6:04:2d:e8:eb:4f:c6:eb:d9:b3:2a:
         dd:31:e7:15:b2:25:c3:a5:d0:56:51:8a:ab:68:84:b9:ac:dd:
         10:63:ba:34:1d:ea:30:38:f4:70:30:bb:50:48:a7:7a:a0:e4:
         05:37:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:01:12 2025 by rpki-client