Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CDtyBJkh6IMuIgrecqOrPFw-6Ew.roa
File:                     CDtyBJkh6IMuIgrecqOrPFw-6Ew.roa (raw, json)
Hash identifier:          58LftLoqcxQhXFs9mj81V+KgoDyS2Bi/hNhFCJ+bsBQ=
Subject key identifier:   08:3B:72:04:99:21:E8:83:2E:22:0A:DE:72:A3:AB:3C:5C:3E:E8:4C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       030D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CDtyBJkh6IMuIgrecqOrPFw-6Ew.roa
Signing time:             Tue 01 Jul 2025 01:39:50 +0000
ROA not before:           Tue 01 Jul 2025 01:39:50 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        223.165.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:50 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=083B72049921E8832E220ADE72A3AB3C5C3EE84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:ef:7b:d7:f3:8d:ff:a3:d1:06:2f:33:c5:
                    b1:7e:3e:10:0c:64:70:7f:d9:91:a7:8f:a1:86:7e:
                    3b:e8:c3:ed:24:ca:44:08:6a:1e:1e:81:8b:eb:f3:
                    ef:70:c7:90:6d:51:92:0c:a3:64:dd:3e:6b:53:9e:
                    99:f4:1f:b1:cf:de:dd:ce:fc:e1:c9:a7:f6:9a:3c:
                    69:d5:5f:d7:68:ce:8c:d6:23:68:9f:1d:7f:ff:89:
                    dc:61:c1:ec:9a:95:d3:a3:30:3a:45:35:76:dd:1a:
                    33:f6:a5:82:33:a7:fa:ed:9c:26:96:77:df:16:3c:
                    60:88:95:55:18:05:f0:05:b2:43:f8:48:0e:05:0b:
                    61:bd:d8:f5:1b:69:8c:e6:20:9a:73:14:ed:56:18:
                    99:0a:2f:08:8f:35:ec:21:ba:18:36:c0:6b:6c:16:
                    b5:31:63:29:1b:6c:c8:b6:58:f5:d5:24:1d:67:94:
                    a8:54:c8:fc:16:a5:5d:c9:38:1e:14:50:97:87:bb:
                    5e:5b:bd:18:a8:ba:b9:b4:6b:59:21:c1:45:cd:a0:
                    f3:e6:4b:4b:3d:32:4d:01:e7:72:c7:a1:51:87:27:
                    2d:e4:df:0e:f7:07:73:57:7a:39:90:3c:0e:ec:0b:
                    cf:95:58:09:f1:3c:1c:c9:27:fe:cd:de:8a:84:2b:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:72:04:99:21:E8:83:2E:22:0A:DE:72:A3:AB:3C:5C:3E:E8:4C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CDtyBJkh6IMuIgrecqOrPFw-6Ew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ff:11:f9:f3:09:71:a6:ae:bb:13:51:b3:66:5e:d7:5e:94:
         71:85:b9:91:67:7b:d7:cc:8c:9e:5c:a1:7c:f3:e7:75:14:42:
         33:f8:17:04:2e:72:5e:32:cf:23:dc:58:0c:bb:17:56:61:a8:
         63:a8:e3:a3:d9:82:7c:0b:5b:35:2b:92:e0:c9:6b:59:cb:91:
         81:d0:6b:1a:cb:8e:47:f3:94:bf:25:99:b7:f6:b7:09:f4:75:
         ff:67:9c:db:29:81:70:30:ed:88:f3:2e:20:cf:8a:13:8d:fa:
         fe:bb:4d:6f:b0:94:20:d7:68:88:11:86:b1:0b:1f:9d:47:10:
         e9:7d:d3:01:c5:4d:d8:62:60:55:99:56:01:9f:f7:9d:fc:44:
         4b:9d:42:cd:27:5f:4b:06:ff:c2:da:a2:21:ad:b0:c4:62:08:
         4b:e7:6b:90:f6:bb:cc:36:09:03:e7:52:a8:e3:1f:89:ff:32:
         7d:f0:22:bc:98:1c:3a:ba:99:64:7b:51:e5:90:55:be:10:21:
         cb:ea:c8:23:8c:15:50:be:31:e3:57:22:c1:30:10:4e:4e:1c:
         0f:b5:cf:58:9e:5d:32:09:ee:a2:af:d6:06:60:d6:93:ab:8c:
         63:ef:7b:81:c5:b7:5a:92:d9:03:fb:b7:f0:35:df:49:f5:27:
         2d:c8:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:15:27 2025 by rpki-client