Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gS_RMFduCyGKhe5eiubR6ISbwz0.roa
File:                     gS_RMFduCyGKhe5eiubR6ISbwz0.roa (raw, json)
Hash identifier:          ouSu8Zpm8fHU1RQ2yfWpygTMzrAap/m18LR7myxzTgE=
Subject key identifier:   81:2F:D1:30:57:6E:0B:21:8A:85:EE:5E:8A:E6:D1:E8:84:9B:C3:3D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       035C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gS_RMFduCyGKhe5eiubR6ISbwz0.roa
Signing time:             Fri 01 Aug 2025 01:43:46 +0000
ROA not before:           Fri 01 Aug 2025 01:43:46 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        202.157.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:46 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=812FD130576E0B218A85EE5E8AE6D1E8849BC33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:21:33:8f:52:c0:14:30:a7:78:db:65:46:
                    bb:30:74:a8:1a:21:b8:a8:d0:97:64:4c:41:33:50:
                    fd:f3:72:f2:cf:b0:73:38:6b:a2:54:61:59:e8:7a:
                    57:d7:a2:37:ff:cf:4d:8a:8f:4b:07:38:0b:99:c4:
                    ea:dc:ce:09:89:ec:34:58:82:f8:f7:94:6f:15:0f:
                    6c:6f:42:fd:c9:c3:f2:80:6d:4c:dc:3a:5b:cb:ad:
                    41:5d:c5:ef:55:9a:c9:d7:53:1e:9d:5b:ca:7e:fe:
                    1a:9a:60:a8:77:01:df:0a:1d:c2:50:15:c5:a5:0e:
                    8e:dc:64:02:3e:2c:da:88:0a:9e:71:9b:71:94:3b:
                    71:d2:54:0b:61:3c:c9:87:b4:c9:29:fc:b7:df:0d:
                    8b:6a:20:2a:82:f9:d3:7a:1c:e7:7a:70:d5:fe:a6:
                    75:d7:80:9b:95:1b:41:51:38:ac:81:6c:ac:c7:fa:
                    a6:5f:42:73:8d:10:79:ec:40:7f:60:fd:4d:52:f4:
                    6a:29:5a:82:2a:21:7e:bd:7b:52:21:8e:0c:2f:88:
                    f3:58:dd:e0:c1:87:76:c5:f7:a9:36:40:97:46:f2:
                    9f:27:5e:50:f6:c5:64:69:24:f4:ef:32:30:0d:84:
                    f1:35:03:32:39:d3:15:0f:c0:21:10:b1:52:ff:c4:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:D1:30:57:6E:0B:21:8A:85:EE:5E:8A:E6:D1:E8:84:9B:C3:3D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gS_RMFduCyGKhe5eiubR6ISbwz0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:56:c6:3f:15:e5:6b:96:f3:24:a9:ed:a2:c3:f7:fb:a3:6b:
         16:87:c3:5c:8d:11:09:d6:18:73:ab:ab:36:4d:2c:ff:c4:e6:
         cb:c4:1f:6d:8a:cc:5c:9f:a3:92:a7:7e:78:c0:7a:85:8b:63:
         7f:3d:32:b4:c7:a0:14:c9:ad:c8:d9:86:1d:26:77:03:50:1b:
         06:4d:49:b8:ad:ce:bd:88:1d:da:37:74:97:d2:a0:66:9c:62:
         ee:64:07:88:af:8f:c8:15:48:ee:10:3f:fc:3c:40:6e:93:ef:
         f4:31:a5:18:2c:7a:a3:d9:5c:0e:18:15:77:f1:e1:df:40:05:
         93:dd:23:a6:02:06:66:9a:66:0e:47:05:37:29:34:2f:94:9d:
         43:8b:92:a6:84:13:55:c4:24:93:99:c7:ff:5b:8f:d8:71:7c:
         43:59:44:0e:96:89:3e:73:75:05:58:04:58:df:c8:2f:49:9d:
         c4:7b:84:21:72:40:40:e6:a2:32:31:26:59:38:79:13:2d:00:
         d9:e5:9a:7d:1b:c0:9f:e7:ff:97:eb:26:99:b8:bb:eb:ee:41:
         52:78:ea:46:a0:bb:93:13:63:69:9a:c2:b8:72:1d:15:cf:f6:
         23:c1:f7:86:07:f4:49:87:1c:55:9a:39:a4:e4:1a:4e:a8:70:
         d0:7a:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:34 2025 by rpki-client