Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VT9f0Lco5FU912vAD6OBZ3EU7c4.roa
File:                     VT9f0Lco5FU912vAD6OBZ3EU7c4.roa (raw, json)
Hash identifier:          pKEBiYyum12f5+r36x3Qbj3e9pX5bElVm1TeguzWp1Q=
Subject key identifier:   55:3F:5F:D0:B7:28:E4:55:3D:D7:6B:C0:0F:A3:81:67:71:14:ED:CE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0300
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VT9f0Lco5FU912vAD6OBZ3EU7c4.roa
Signing time:             Tue 01 Jul 2025 01:39:44 +0000
ROA not before:           Tue 01 Jul 2025 01:39:44 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        202.43.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:44 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=553F5FD0B728E4553DD76BC00FA381677114EDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:52:f7:de:bb:db:39:ea:90:e1:05:04:ed:d0:
                    82:4d:25:4b:72:d6:7d:3c:fd:46:0c:01:42:64:3c:
                    69:ef:f8:76:54:62:45:2a:4f:af:dd:d1:a3:4f:d4:
                    a3:4e:77:c8:1d:4f:88:a9:f6:be:d1:a0:f7:e3:da:
                    45:7a:cf:fd:30:d9:ea:b0:db:c0:a4:66:1a:a6:bc:
                    81:50:3c:f9:37:10:86:17:98:c9:f5:d2:ba:4f:9f:
                    4e:dd:ca:c3:80:5c:5d:3a:8f:ac:38:45:42:f3:47:
                    ef:3e:d3:e3:1a:11:a2:d5:94:19:9c:9e:88:29:39:
                    77:9a:d4:22:a1:aa:a8:04:20:42:5a:fe:86:69:75:
                    bc:3d:0e:ca:3a:25:b7:6f:e6:7a:c8:89:d6:0a:4f:
                    0c:2b:1c:7f:7a:83:3f:f1:58:e4:bc:80:b2:ac:34:
                    b9:13:6d:ac:2c:b8:65:d3:80:9b:5b:ea:8e:d5:d4:
                    97:7f:21:f8:30:4e:73:9e:be:bc:a8:b0:c0:3f:14:
                    80:dc:9e:eb:c1:7f:37:b6:a3:c0:3e:ab:07:c1:f8:
                    b1:2a:b9:eb:3e:17:89:18:97:a5:8d:12:85:b9:51:
                    28:2b:dd:07:15:4f:73:60:87:e9:a5:1c:54:28:68:
                    72:ec:13:38:49:7c:d6:8a:96:8d:02:85:d9:2b:53:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3F:5F:D0:B7:28:E4:55:3D:D7:6B:C0:0F:A3:81:67:71:14:ED:CE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VT9f0Lco5FU912vAD6OBZ3EU7c4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:dc:ce:b3:8c:a4:de:1f:ae:77:d6:e7:81:56:4a:30:b6:
         55:6d:8f:34:2e:cc:f9:06:9f:e6:13:4c:8e:f5:5c:ef:72:55:
         be:ac:c5:2b:32:90:76:cb:46:af:bf:ad:23:85:09:a7:05:8e:
         28:b2:cf:bf:ae:48:e7:19:c0:cd:85:a8:d5:7f:79:64:a1:2d:
         f5:15:6e:ac:ee:a2:9c:2b:cb:16:a0:f6:2e:6f:60:54:6f:7a:
         f4:66:a2:da:e5:15:63:b1:8d:45:b9:32:df:e8:9f:0a:85:de:
         3d:14:5b:38:3c:9f:74:8a:f0:ca:0b:54:e4:c9:de:e8:67:d3:
         70:8e:da:54:4f:73:cb:be:2f:a7:72:95:cc:f9:17:c2:a6:06:
         e5:33:45:30:fc:2c:ee:f9:d1:f9:a2:d4:5c:80:ee:05:2a:8c:
         aa:fa:a8:49:ed:6e:a8:b8:d2:d4:43:27:74:62:2b:6d:2c:23:
         d9:af:30:2a:33:7a:b8:41:90:05:55:73:11:a8:04:34:99:ed:
         1f:dd:a6:3b:79:cc:ee:0a:b4:19:ac:9f:61:7d:3b:0e:bd:e1:
         ae:f5:71:59:41:78:14:66:05:5d:3a:8d:f1:45:ce:60:2f:9c:
         36:4d:d9:5a:0e:f7:f5:dd:55:1e:30:ee:34:17:64:1f:8d:bc:
         a0:ca:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:24:08 2025 by rpki-client