Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KSG5H9VRc_scfNEeY1s73s-w2oc.roa
File:                     KSG5H9VRc_scfNEeY1s73s-w2oc.roa (raw, json)
Hash identifier:          9RcDyRpxeZTZh0rdZgLkmbiFL+Gl99ZMCXXevC4fwgI=
Subject key identifier:   29:21:B9:1F:D5:51:73:FB:1C:7C:D1:1E:63:5B:3B:DE:CF:B0:DA:87
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0312
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KSG5H9VRc_scfNEeY1s73s-w2oc.roa
Signing time:             Tue 01 Jul 2025 01:39:54 +0000
ROA not before:           Tue 01 Jul 2025 01:39:54 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        103.55.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:54 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=2921B91FD55173FB1C7CD11E635B3BDECFB0DA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:de:cb:4e:51:05:9c:85:41:29:e9:6f:34:
                    23:b2:96:17:52:00:e1:28:bc:2a:23:71:24:ca:fc:
                    be:42:eb:61:f5:ad:63:82:0e:04:47:4a:5c:46:ea:
                    5d:8a:68:a0:e6:c4:2a:12:bf:30:18:c5:65:a2:a0:
                    9a:b1:f5:67:dc:06:13:f3:bf:f4:88:12:fb:83:d4:
                    4d:65:fc:f1:4c:1f:ed:b0:c0:df:5a:02:d0:57:da:
                    94:45:98:5e:16:e4:37:73:80:c9:48:51:46:f2:b3:
                    00:58:8b:54:db:77:34:f1:3b:20:37:74:1f:56:13:
                    a0:d1:e2:e1:96:c2:46:10:15:f7:0f:ce:0a:05:c6:
                    a1:da:1b:c0:1e:e4:53:a0:25:2e:b3:47:f2:33:88:
                    6d:7e:0c:64:a3:2c:36:27:d5:cc:6c:c1:05:92:9d:
                    32:8e:de:c8:32:fb:0a:f3:ca:2d:f6:89:60:41:ab:
                    c2:d6:a4:7a:41:7d:fa:a6:20:cf:e3:a6:48:51:a8:
                    be:c6:0a:f9:cd:7c:be:b9:80:d0:16:d8:ca:58:04:
                    ab:6f:b0:76:16:c5:d1:c2:97:d7:a3:d3:7e:12:18:
                    72:86:d1:b7:59:64:d7:29:e3:d7:e3:83:08:1d:09:
                    66:c0:ac:f7:5f:74:f0:5d:d8:78:79:f1:6e:04:78:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:B9:1F:D5:51:73:FB:1C:7C:D1:1E:63:5B:3B:DE:CF:B0:DA:87
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KSG5H9VRc_scfNEeY1s73s-w2oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:68:e2:b4:00:7a:2c:59:68:f4:68:78:7f:69:fd:a1:f8:
         c0:0b:68:15:3a:54:40:4f:69:38:c5:ab:9f:15:6f:cc:89:6e:
         b0:2f:bb:56:e9:6d:3b:48:c9:32:bc:2f:9e:42:c9:6f:b5:81:
         27:76:97:20:e6:44:4b:a5:db:57:10:5a:a7:a6:0d:33:e1:da:
         2e:92:2b:54:45:ec:b1:4d:fc:43:47:d7:64:e6:26:45:c0:a2:
         90:20:90:2c:23:20:c6:2e:ab:9d:d8:ff:99:6a:1c:b4:db:bf:
         33:0a:5d:02:a0:7c:aa:6d:89:3b:d3:d3:79:bf:17:e3:6f:ff:
         e6:88:54:ea:7d:31:60:1f:ca:68:29:49:4e:1a:78:39:68:38:
         26:14:16:93:fc:b7:e8:70:0d:2a:7e:df:b5:15:23:00:ee:df:
         48:ad:b6:97:e9:ff:28:a2:72:80:6c:4d:1b:50:1c:7e:96:6d:
         19:e9:08:ba:75:dc:35:ca:19:94:a7:5a:3a:9a:8f:cf:e1:2b:
         4b:7c:20:4c:aa:fc:bf:56:1b:5b:e2:47:f6:52:24:64:5e:20:
         ca:df:b0:5c:b0:69:bb:74:e7:6b:a9:fa:e3:ba:4a:4b:a3:22:
         7a:19:f7:7e:fd:5c:85:aa:e8:1f:ce:9c:e6:cc:ac:19:49:57:
         16:a8:ed:c1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw
MTM5NTRaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI5MjFCOTFGRDU1MTcz
RkIxQzdDRDExRTYzNUIzQkRFQ0ZCMERBODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe5t7LTlEFnIVBKelvNCOylhdSAOEovCojcSTK/L5C62H1rWOC
DgRHSlxG6l2KaKDmxCoSvzAYxWWioJqx9WfcBhPzv/SIEvuD1E1l/PFMH+2wwN9a
AtBX2pRFmF4W5DdzgMlIUUbyswBYi1TbdzTxOyA3dB9WE6DR4uGWwkYQFfcPzgoF
xqHaG8Ae5FOgJS6zR/IziG1+DGSjLDYn1cxswQWSnTKO3sgy+wrzyi32iWBBq8LW
pHpBffqmIM/jpkhRqL7GCvnNfL65gNAW2MpYBKtvsHYWxdHCl9ej034SGHKG0bdZ
ZNcp49fjgwgdCWbArPdfdPBd2Hh58W4EeDfPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKSG5H9VRc/scfNEeY1s73s+w2ocwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0tTRzVIOVZSY19zY2ZORWVZMXM3M3MtdzJvYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnN8QwDQYJKoZIhvcNAQELBQADggEBAEbLaOK0AHosWWj0aHh/af2h+MAL
aBU6VEBPaTjFq58Vb8yJbrAvu1bpbTtIyTK8L55CyW+1gSd2lyDmREul21cQWqem
DTPh2i6SK1RF7LFN/ENH12TmJkXAopAgkCwjIMYuq53Y/5lqHLTbvzMKXQKgfKpt
iTvT03m/F+Nv/+aIVOp9MWAfymgpSU4aeDloOCYUFpP8t+hwDSp+37UVIwDu30it
tpfp/yiicoBsTRtQHH6WbRnpCLp13DXKGZSnWjqaj8/hK0t8IEyq/L9WG1viR/ZS
JGReIMrfsFywabt052up+uO6SkujInoZ9379XIWq6B/OnObMrBlJVxao7cE=
-----END CERTIFICATE-----
Generated at Sat Jul 5 02:23:22 2025 by rpki-client