Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/U8PhLFtsKTSLSFjYCCtrZzodU18.roa
File:                     U8PhLFtsKTSLSFjYCCtrZzodU18.roa (raw, json)
Hash identifier:          SNLu7txAx0PQQh/HVA0TwY1GMPUIhbqDKM7k/bQynJ4=
Subject key identifier:   53:C3:E1:2C:5B:6C:29:34:8B:48:58:D8:08:2B:6B:67:3A:1D:53:5F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       030B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U8PhLFtsKTSLSFjYCCtrZzodU18.roa
Signing time:             Tue 01 Jul 2025 01:39:49 +0000
ROA not before:           Tue 01 Jul 2025 01:39:49 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        203.153.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:49 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=53C3E12C5B6C29348B4858D8082B6B673A1D535F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:3f:e8:f7:30:4c:05:56:a5:67:30:7f:5c:
                    0e:02:8f:75:7f:d7:26:0c:ab:fd:ed:5f:f8:d8:7c:
                    76:49:6d:5e:77:2e:90:41:15:1f:c3:be:91:dc:5d:
                    45:44:af:d9:c1:c1:b7:48:5c:00:9f:86:24:44:0a:
                    42:5c:da:c2:70:a8:a2:92:44:34:0e:2d:62:8b:d7:
                    36:56:89:be:6c:60:ae:12:61:b3:77:19:86:f3:98:
                    39:85:5d:bf:2a:87:74:01:88:5e:2d:c2:4e:45:54:
                    2f:a7:04:3c:65:4f:95:83:a7:83:c5:f4:e8:2c:6e:
                    c5:11:9e:2e:b7:39:94:63:61:c3:da:17:4c:1b:09:
                    26:32:17:b1:57:04:a2:c4:fd:62:ad:c8:35:df:cc:
                    f5:2c:b4:6b:d3:e6:91:29:fe:4a:e0:55:e2:cd:e3:
                    fb:d0:b6:fb:8d:40:ef:6d:40:5a:07:71:79:fc:83:
                    44:ba:cd:a7:4f:5b:82:41:0f:51:c3:4f:70:02:80:
                    16:b0:d5:d0:ce:42:cc:21:94:e1:35:76:97:63:b5:
                    c2:be:2b:94:aa:9a:fa:b1:aa:0c:14:46:c1:c5:fd:
                    1d:3e:e1:a6:56:71:dd:e5:d4:09:cc:06:96:97:d0:
                    44:11:38:55:1c:f9:8b:39:86:44:6b:82:dd:a6:4f:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:E1:2C:5B:6C:29:34:8B:48:58:D8:08:2B:6B:67:3A:1D:53:5F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U8PhLFtsKTSLSFjYCCtrZzodU18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:e7:d1:f3:d7:c6:24:57:f9:af:b4:f0:76:4e:b8:6a:ae:
         26:95:07:46:e4:fb:d2:d4:63:8c:c3:6a:da:b9:5b:09:90:46:
         55:26:05:bc:70:12:f3:01:63:cc:3f:d8:29:52:15:4b:08:5c:
         90:f7:b2:d6:7d:a2:aa:27:21:6c:0c:09:61:d7:43:df:ba:7d:
         15:61:7c:aa:b2:60:4b:9e:dc:58:4b:eb:fe:07:34:7d:01:bc:
         86:0c:d1:0b:39:07:0f:7e:e1:48:1d:d9:3c:98:71:0f:2e:49:
         51:49:27:cd:b4:df:f4:41:f9:3b:04:85:8e:62:61:7b:dd:1d:
         f2:6d:59:3d:d6:a1:4d:a3:67:26:1a:07:73:1e:24:3d:42:e7:
         52:30:36:63:d5:3c:9f:e4:ae:6d:8a:aa:44:d1:cf:ed:d6:d8:
         fd:e0:f9:ff:e0:4c:dc:90:3f:12:a8:52:4e:00:e1:99:0b:de:
         1b:e9:d6:ad:7d:bc:5d:b2:bb:11:61:e9:fd:46:6b:d7:84:4e:
         97:ed:4a:a0:99:ba:7d:a1:d7:d5:96:bc:20:5d:9a:fd:a9:43:
         e5:0d:45:83:46:09:c3:7c:2a:e8:a5:f3:d2:3d:c8:82:cd:c3:
         ec:0c:75:b6:ab:11:a5:65:d7:aa:4d:04:d4:3d:8b:b8:a7:76:
         20:98:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:41:25 2025 by rpki-client