Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/A8EoOMfDj9r0hHkNkJXcAMQFGR8.roa
File:                     A8EoOMfDj9r0hHkNkJXcAMQFGR8.roa (raw, json)
Hash identifier:          7+eENgG3tfmomCTAEudBTOuwchzal+n/xp23JN8Fqa4=
Subject key identifier:   03:C1:28:38:C7:C3:8F:DA:F4:84:79:0D:90:95:DC:00:C4:05:19:1F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       039E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/A8EoOMfDj9r0hHkNkJXcAMQFGR8.roa
Signing time:             Fri 01 Aug 2025 01:54:53 +0000
ROA not before:           Fri 01 Aug 2025 01:54:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        211.19.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:54:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=03C12838C7C38FDAF484790D9095DC00C405191F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:13:69:c8:09:a9:09:eb:8b:b0:5e:6f:b2:
                    93:b8:52:d4:ab:1e:2f:8c:87:c8:e0:4b:f0:db:6c:
                    10:a5:37:41:bf:34:e0:a9:0e:b7:aa:ee:9b:14:a0:
                    ee:a9:00:81:c3:9f:65:39:1f:0b:ce:da:e5:9f:63:
                    e4:9b:8d:56:09:33:a5:97:30:25:f9:15:c9:16:34:
                    5b:b8:95:cc:05:51:57:8f:6d:82:f1:b0:36:89:f6:
                    1a:a3:65:74:96:45:25:88:63:45:8b:54:f1:72:29:
                    47:85:9e:94:48:fe:2d:2e:63:b9:26:a4:7e:ef:1d:
                    53:8c:3d:ee:08:e4:24:18:6e:52:45:a6:ce:a3:22:
                    f3:08:74:e3:d2:d8:4c:79:f5:02:36:6d:57:40:f0:
                    0a:2a:7e:7b:6a:0a:6e:3a:14:64:85:2f:11:6f:9c:
                    30:ff:25:ac:06:dc:36:0f:d9:37:03:f6:57:88:3a:
                    97:0e:12:6e:af:7f:dc:7c:77:42:2e:4a:0c:98:9a:
                    3a:01:d7:52:7b:a3:c0:fc:c0:6e:ee:7b:12:08:7c:
                    1b:5e:c5:95:ac:ad:4c:87:df:1f:ba:f9:77:ff:ea:
                    6a:2e:75:f7:d1:f9:5f:97:23:77:b9:db:ff:2e:ff:
                    f6:16:b3:a9:32:bc:92:06:82:81:9c:4c:cc:d7:f6:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:28:38:C7:C3:8F:DA:F4:84:79:0D:90:95:DC:00:C4:05:19:1F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/A8EoOMfDj9r0hHkNkJXcAMQFGR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:1e:90:24:f0:b5:d8:f3:ea:e6:48:a8:6f:7a:a3:72:f8:
         f7:80:1d:95:cb:0b:52:27:b7:0a:c3:c0:5c:b9:72:46:f9:3d:
         f3:c3:94:e6:04:57:7b:92:d5:b3:bc:0c:a3:b7:d1:94:2d:95:
         da:60:57:98:9f:40:43:ae:2a:4b:d1:c9:b1:dd:e3:27:e9:f2:
         b3:0f:e5:9c:bf:d7:5b:ab:bd:fb:52:69:58:7c:11:32:91:9c:
         b1:ce:36:ae:fa:ee:01:3e:4c:0c:6d:18:b3:cf:ab:ef:f5:09:
         98:dc:fd:39:48:66:1a:d5:99:56:f9:5f:d7:8f:77:08:6c:6c:
         c6:a4:81:ff:68:5a:a5:5a:d6:d8:06:d1:8b:f7:54:2a:06:ab:
         b4:55:33:aa:7a:49:f6:21:04:ef:99:ed:0b:a3:de:a2:f9:9c:
         c3:35:69:1f:2f:67:e7:ba:7f:1f:86:10:55:73:56:9f:69:2c:
         a8:63:a1:6d:e4:d6:ff:f1:8c:c3:d7:bc:4d:e3:0a:0a:de:b6:
         3b:48:d3:73:fd:ef:23:36:63:3d:f7:44:29:b4:58:09:1e:7c:
         45:76:21:dc:42:59:83:cf:a0:e9:54:92:c4:5f:09:6a:b4:f2:
         df:f8:cf:ca:d0:ff:b1:e6:b6:a6:61:61:66:33:f0:46:5b:0b:
         dc:11:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:13 2025 by rpki-client