Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
File:                     Z3opzT7mND4VOk1ejMNtVw0CRYU.roa (raw, json)
Hash identifier:          acIVRX74gIJNqV+4bWVJOvTfamNUrvZuPrExSBBKcp8=
Subject key identifier:   67:7A:29:CD:3E:E6:34:3E:15:3A:4D:5E:8C:C3:6D:57:0D:02:45:85
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02FB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
Signing time:             Tue 10 Jun 2025 10:48:07 +0000
ROA not before:           Tue 10 Jun 2025 10:48:07 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9824
IP address blocks:        203.114.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jun 10 10:48:07 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=677A29CD3EE6343E153A4D5E8CC36D570D024585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:5c:60:6f:e2:e6:8f:40:ca:75:34:73:54:
                    75:86:49:2c:9b:6f:1a:20:52:3c:d0:62:0c:6f:ce:
                    18:cd:bb:72:1c:be:84:3b:7e:2f:48:65:63:8a:b8:
                    e6:63:d1:62:61:9e:16:32:6d:21:0a:07:72:67:28:
                    cd:33:3a:5f:68:5f:b9:ec:ce:5f:32:3f:19:bc:ee:
                    af:aa:b7:a0:bc:26:c6:f2:9b:85:0e:c9:31:b7:f1:
                    32:fa:08:8b:81:da:86:c2:0a:39:dd:ae:4c:ab:53:
                    fd:aa:33:57:de:88:d9:e4:8f:85:59:ce:8a:31:22:
                    71:4e:71:88:a5:da:05:e1:3f:7b:14:99:c7:2c:3f:
                    ac:78:5c:bf:37:11:da:63:68:d6:7e:0e:6b:64:2e:
                    50:59:2e:c8:23:39:2c:24:cc:09:54:c9:5b:9e:61:
                    22:0c:0e:5f:0b:d4:74:8b:c3:5d:79:00:be:da:ba:
                    fc:ce:6a:1d:69:59:60:b5:1a:97:2e:ff:d0:9c:1a:
                    16:52:4d:4a:90:a1:cb:0e:29:f7:f5:7e:94:20:7d:
                    d9:fb:5e:8c:38:d2:bf:8d:da:e7:6c:e8:6e:34:22:
                    f8:00:ee:5b:35:01:1a:1d:d3:67:bd:57:cc:c5:71:
                    e1:ff:7d:e0:4a:10:01:0e:c8:3f:87:15:c8:15:32:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:29:CD:3E:E6:34:3E:15:3A:4D:5E:8C:C3:6D:57:0D:02:45:85
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z3opzT7mND4VOk1ejMNtVw0CRYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:e1:41:77:c9:57:53:15:97:b4:87:67:69:30:2d:87:fa:
         5b:6e:06:9c:84:2f:b5:26:76:36:59:6f:8b:72:29:b4:93:d7:
         5f:a7:86:7b:f2:1b:b5:2d:e4:7d:67:6c:aa:ed:5c:b1:ee:0c:
         13:5e:a7:a9:2b:c3:32:71:06:d0:7b:63:13:72:83:b5:18:07:
         4e:d4:55:9b:a9:8f:42:78:85:df:bb:ff:36:89:9f:ee:ab:37:
         9c:c3:17:ca:da:75:56:aa:83:29:17:a5:58:bd:02:a8:7a:d7:
         5d:fc:db:70:60:5b:cb:0c:e1:e2:b0:6a:e2:eb:72:d1:c8:a1:
         ca:fc:97:89:5b:3b:dc:45:42:c5:1c:6b:d1:28:0b:0c:6f:f4:
         d1:3a:75:a7:06:53:4c:31:6c:97:c3:fd:9d:9f:8b:a4:78:38:
         ce:26:c9:c7:43:c4:b4:96:1c:2b:30:ac:4a:57:20:48:46:71:
         de:d6:ed:f2:e3:87:61:41:6f:c0:0d:f2:ce:ea:b0:fc:8e:75:
         e9:d5:9e:49:f9:a6:40:3e:4d:e1:5e:70:fa:d5:58:29:44:0b:
         e4:b2:96:c8:4d:7c:89:fa:0e:6a:c1:40:3d:72:9b:65:b6:d6:
         83:cd:cd:39:9b:ec:54:4f:4a:79:ec:07:62:e3:1d:b0:f5:0f:
         2b:d3:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:34:21 2025 by rpki-client