Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/5gOy5GzczerRlicrBU10jUd8l0g.roa
File:                     5gOy5GzczerRlicrBU10jUd8l0g.roa (raw, json)
Hash identifier:          a3z/Q3SkqG0+Nzt8UsmS3QOtTI0IDXpfgCnCUpOIzDk=
Subject key identifier:   E6:03:B2:E4:6C:DC:CD:EA:D1:96:27:2B:05:4D:74:8D:47:7C:97:48
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0305
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5gOy5GzczerRlicrBU10jUd8l0g.roa
Signing time:             Tue 01 Jul 2025 01:39:46 +0000
ROA not before:           Tue 01 Jul 2025 01:39:46 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        175.103.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:46 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E603B2E46CDCCDEAD196272B054D748D477C9748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:61:fd:66:aa:81:18:8e:1d:f7:c2:5a:28:
                    0e:49:3e:6e:21:1c:34:f9:8e:ab:bc:5e:ed:d6:da:
                    04:c2:b6:36:b6:0e:6b:72:6d:54:bd:98:9f:bd:e2:
                    e4:af:9a:f4:86:22:bf:ca:bd:da:24:30:90:9a:f8:
                    83:b3:4c:b5:2d:39:cc:5a:4c:a2:f4:cb:e0:d8:52:
                    ea:2c:93:83:78:49:53:f9:fd:aa:ca:a8:73:f9:0b:
                    a2:e2:64:48:32:73:fd:e7:0c:81:46:16:bb:4c:85:
                    72:59:07:ff:70:a2:d9:31:bf:54:78:b5:1e:e6:1f:
                    f8:95:0a:7d:ef:b4:de:29:ef:fe:2c:e3:bc:22:ab:
                    e2:20:c0:f6:8d:5a:e9:f0:19:68:90:05:a2:cb:eb:
                    e7:e7:57:d6:11:89:a5:4d:f0:e4:ae:4f:75:aa:0f:
                    38:9d:1a:49:5f:de:8e:b0:cc:e5:51:de:c7:4c:e0:
                    95:83:fa:d0:c5:c4:d2:20:91:87:fc:99:1c:2f:12:
                    00:76:a3:d6:11:76:44:0d:2c:e9:98:8a:75:f7:cc:
                    f4:43:4e:53:3e:6e:07:1a:77:8b:8b:fe:bc:8f:30:
                    4b:4e:23:c5:a2:bf:37:cd:5c:52:01:be:2c:45:6d:
                    87:a2:1a:70:ce:e6:b6:8b:74:e7:29:9a:e6:a5:02:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:03:B2:E4:6C:DC:CD:EA:D1:96:27:2B:05:4D:74:8D:47:7C:97:48
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5gOy5GzczerRlicrBU10jUd8l0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:46:37:e2:64:af:7f:32:1b:28:f1:f6:04:99:33:0c:c2:
         c6:60:f7:f6:ee:81:23:10:ef:69:05:af:04:ad:02:d9:31:7a:
         43:c1:22:15:52:01:3d:90:ea:63:d8:42:c7:1b:87:f0:b0:8c:
         9b:24:a6:9a:7b:60:10:23:9b:39:72:74:e9:f2:30:a0:ab:03:
         ff:4a:d8:c7:87:de:eb:d3:94:fd:5e:5b:49:4a:ec:c3:83:ba:
         f5:8d:c6:60:0c:fc:b5:58:21:80:00:e4:bc:2c:7c:77:d8:ed:
         64:c9:ba:02:32:ac:33:45:7a:a8:31:6e:d7:05:48:9b:8d:3a:
         60:66:b8:30:09:a2:9d:a4:3e:4a:07:9e:a3:aa:d5:ae:14:2e:
         73:56:b3:4f:4a:26:e7:39:f4:e7:89:c9:dd:88:38:fe:a0:f2:
         64:13:13:1c:89:60:b8:49:d0:d6:9c:e6:8b:8b:df:73:e6:34:
         aa:a1:58:e1:b5:35:11:8b:16:c4:f6:cb:e0:70:0c:5d:13:ab:
         f6:a7:d6:96:6a:72:d4:90:50:17:a2:8c:b5:2f:68:3f:49:7f:
         18:94:c7:55:c0:58:be:51:04:db:61:9f:4c:0a:fb:79:d7:89:
         79:eb:ff:71:10:36:e0:2f:c5:d1:f8:2f:17:eb:e5:c5:2d:88:
         ba:72:b8:d8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw
MTM5NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2MDNCMkU0NkNEQ0NE
RUFEMTk2MjcyQjA1NEQ3NDhENDc3Qzk3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYs2H9ZqqBGI4d98JaKA5JPm4hHDT5jqu8Xu3W2gTCtja2Dmty
bVS9mJ+94uSvmvSGIr/KvdokMJCa+IOzTLUtOcxaTKL0y+DYUuosk4N4SVP5/arK
qHP5C6LiZEgyc/3nDIFGFrtMhXJZB/9wotkxv1R4tR7mH/iVCn3vtN4p7/4s47wi
q+IgwPaNWunwGWiQBaLL6+fnV9YRiaVN8OSuT3WqDzidGklf3o6wzOVR3sdM4JWD
+tDFxNIgkYf8mRwvEgB2o9YRdkQNLOmYinX3zPRDTlM+bgcad4uL/ryPMEtOI8Wi
vzfNXFIBvixFbYeiGnDO5raLdOcpmualAhYjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5gOy5GzczerRlicrBU10jUd8l0gwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzVnT3k1R3pjemVyUmxpY3JCVTEwalVkOGwwZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKvZwwwDQYJKoZIhvcNAQELBQADggEBACtARjfiZK9/Mhso8fYEmTMMwsZg
9/bugSMQ72kFrwStAtkxekPBIhVSAT2Q6mPYQscbh/CwjJskppp7YBAjmzlydOny
MKCrA/9K2MeH3uvTlP1eW0lK7MODuvWNxmAM/LVYIYAA5LwsfHfY7WTJugIyrDNF
eqgxbtcFSJuNOmBmuDAJop2kPkoHnqOq1a4ULnNWs09KJuc59OeJyd2IOP6g8mQT
ExyJYLhJ0Nac5ouL33PmNKqhWOG1NRGLFsT2y+BwDF0Tq/an1pZqctSQUBeijLUv
aD9JfxiUx1XAWL5RBNthn0wK+3nXiXnr/3EQNuAvxdH4Lxfr5cUtiLpyuNg=
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:44:44 2025 by rpki-client