Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/akn26lVcw9vTiSJdC_FeJNWlQ2k.roa
File:                     akn26lVcw9vTiSJdC_FeJNWlQ2k.roa (raw, json)
Hash identifier:          vzX0tdCap5wCVaQy67DrDQeVoCVTPzaThaha0hFhXgo=
Subject key identifier:   6A:49:F6:EA:55:5C:C3:DB:D3:89:22:5D:0B:F1:5E:24:D5:A5:43:69
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0306
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/akn26lVcw9vTiSJdC_FeJNWlQ2k.roa
Signing time:             Tue 01 Jul 2025 01:39:47 +0000
ROA not before:           Tue 01 Jul 2025 01:39:47 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        175.103.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:47 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=6A49F6EA555CC3DBD389225D0BF15E24D5A54369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:bc:be:61:85:21:c3:ff:17:77:87:c0:bc:
                    03:85:b5:fb:de:90:4e:74:72:a1:7d:fe:ce:4c:2d:
                    e7:94:8d:ac:2b:91:cb:88:54:9e:93:b1:d4:40:2a:
                    22:a3:d0:de:70:a4:9f:a9:6c:6b:97:69:01:2b:ff:
                    5f:bf:a6:76:90:af:8f:c3:09:b7:af:62:a7:5f:91:
                    fa:64:32:75:36:c5:a2:1e:9d:d2:e4:73:93:64:b5:
                    e7:d2:43:b8:a3:3f:bd:90:1e:71:59:9f:db:f7:9a:
                    d3:ff:ce:c3:b5:32:b8:9e:e8:06:05:f5:3c:29:80:
                    4d:f7:49:0a:1d:33:b8:0a:e2:12:57:54:ee:ac:72:
                    03:87:33:7f:5f:54:be:4b:5a:aa:e7:3e:fd:73:11:
                    2a:51:86:c9:80:4b:19:64:82:5c:68:98:87:ec:ec:
                    77:1e:3f:bc:bc:5a:25:0b:ec:a8:79:ca:cb:c2:a7:
                    0a:59:a6:4f:2f:c9:57:3d:38:a3:f0:c7:c9:93:62:
                    fc:41:c6:f3:d8:8e:65:a8:12:8e:18:e3:47:6b:e0:
                    bc:dd:cf:d0:b4:9f:15:50:db:c2:68:26:c2:53:65:
                    2e:91:f9:ff:81:74:e4:d9:12:fa:3f:bb:a5:34:b4:
                    30:5c:27:89:2f:41:33:de:5e:30:aa:7a:b2:55:1d:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:49:F6:EA:55:5C:C3:DB:D3:89:22:5D:0B:F1:5E:24:D5:A5:43:69
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/akn26lVcw9vTiSJdC_FeJNWlQ2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:64:bd:6b:be:07:32:3e:90:45:58:a4:da:ad:be:c0:13:
         1e:79:f0:14:bf:65:40:f0:60:aa:68:3c:41:62:9f:57:15:58:
         74:da:67:4a:69:6d:22:62:33:fb:82:b4:51:6b:4f:34:f7:ec:
         ea:f3:40:7e:19:f0:3f:7b:c3:e9:67:ff:87:23:3e:8b:4c:f3:
         be:ed:3f:25:d8:e2:72:f2:be:c3:a7:9b:48:ea:86:57:c5:7d:
         51:30:7b:0e:9d:42:40:50:71:ff:bb:6d:9e:f0:4a:81:92:61:
         0e:52:33:b4:69:ab:c7:7b:ff:30:6a:fd:0e:87:92:f3:cd:ce:
         54:69:29:d5:6e:18:4e:5b:ed:7f:ce:6c:47:18:dc:12:00:12:
         be:17:d6:b1:d6:c4:a5:b2:da:cf:40:c2:9f:e2:f1:d4:6e:8e:
         d9:6e:00:a4:69:36:1d:29:3c:a0:f9:f7:bd:1a:18:06:f5:34:
         d7:75:76:5b:72:bb:14:51:1a:fc:cd:6d:2a:a9:b5:88:ba:62:
         40:05:d3:13:82:d9:8d:f1:fa:0d:36:36:2c:15:cb:67:33:19:
         c9:33:b9:33:c5:a8:11:d2:bf:17:dc:ae:b8:9a:2e:0b:7c:b4:
         aa:44:82:77:12:d0:45:b4:88:da:35:4a:4f:a8:db:64:03:4b:
         9f:c2:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:29:45 2025 by rpki-client