Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Y5h-ddsYURowsweSc068QalCbo.roa
File:                     7Y5h-ddsYURowsweSc068QalCbo.roa (raw, json)
Hash identifier:          +8KrJK5Xcu7dc+WGrPrxtABIdi8CpuxAGKkRoW8a6us=
Subject key identifier:   ED:8E:61:F9:D7:6C:61:44:68:C2:CC:1E:49:CD:3A:F1:06:A5:09:BA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0316
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Y5h-ddsYURowsweSc068QalCbo.roa
Signing time:             Tue 01 Jul 2025 01:39:56 +0000
ROA not before:           Tue 01 Jul 2025 01:39:56 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        203.217.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:56 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=ED8E61F9D76C614468C2CC1E49CD3AF106A509BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:02:05:a4:ef:04:23:07:38:ce:1b:04:eb:
                    2d:05:78:f6:83:62:66:55:2e:4d:5e:65:e0:73:3f:
                    58:e8:c1:2e:fb:f1:c4:d4:df:d0:4e:5f:c8:74:02:
                    5a:53:f6:c4:d7:f0:69:2e:a9:51:32:b5:dd:4f:67:
                    5e:e2:55:45:e3:89:99:50:9c:78:60:16:34:ad:48:
                    d4:28:e1:20:b8:f6:fa:39:34:55:94:37:d6:ab:03:
                    d0:76:2d:1e:87:45:9a:56:b0:29:07:ad:ce:50:aa:
                    91:81:12:f4:6d:f3:17:81:27:5c:e9:e6:23:42:cb:
                    41:93:6f:c3:1f:bd:71:f0:2c:3b:88:2c:b0:d1:a6:
                    ab:9f:d2:54:cb:01:57:0f:cf:dc:07:d9:36:c9:30:
                    f9:77:b0:a0:3b:66:22:2a:d9:94:4c:25:e4:a6:41:
                    6c:63:70:4f:27:7b:55:3d:a4:c4:7e:fd:d5:7c:b3:
                    e3:88:1c:c8:01:a1:f6:45:e6:be:d4:92:95:28:b1:
                    d3:71:b4:a5:24:e9:d6:cc:73:44:b4:3a:cd:0d:26:
                    38:a7:2c:62:f6:3e:bd:23:8e:89:51:ae:34:1e:db:
                    7d:c2:b5:cc:38:43:04:e3:5c:44:8e:72:a1:53:f9:
                    3b:c3:77:cd:b5:e8:71:86:0b:86:07:a3:e0:b2:22:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:61:F9:D7:6C:61:44:68:C2:CC:1E:49:CD:3A:F1:06:A5:09:BA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7Y5h-ddsYURowsweSc068QalCbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:a1:53:cc:f9:88:8a:31:99:81:0a:80:5e:db:bd:ea:ff:
         33:de:68:91:61:14:89:6b:f5:fb:59:86:93:04:7b:60:9b:87:
         7e:5b:a9:c1:a0:f6:cf:2a:36:6d:88:90:3f:9b:2c:f7:a7:e4:
         0f:64:21:c6:fe:68:c6:e5:89:4b:70:69:7c:8b:59:0b:ff:52:
         33:3b:5b:a7:c1:8f:b0:9d:d2:2b:7e:5f:e3:e9:4a:f5:27:39:
         76:73:69:17:52:09:cb:1e:cf:8e:5e:42:a5:91:0b:6e:6c:59:
         a4:c5:4c:2d:71:9b:0e:e7:13:81:dc:73:22:b7:d4:7b:36:15:
         3e:35:5e:53:ad:6c:af:17:a5:b5:c8:c7:a5:08:51:38:d1:b2:
         63:c4:b5:c5:f0:14:03:6b:6f:a3:77:8f:2d:2a:7a:4e:14:ca:
         92:85:e6:fa:fd:cd:17:3a:ec:c6:01:d8:2d:3e:da:01:c7:b9:
         76:d1:ac:a9:2a:8f:9b:02:34:aa:d6:a9:4b:61:24:58:5a:fe:
         fa:92:12:a1:08:e4:fc:e8:b9:f2:44:7b:09:c6:dd:e1:07:b6:
         d2:c3:6d:39:f4:ef:e5:65:ab:68:2a:7c:fd:f7:5a:f3:63:c8:
         fc:ca:68:ae:2c:bb:72:48:a7:36:bc:69:85:53:8b:bc:23:20:
         8d:7e:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:27:15 2025 by rpki-client