Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/n9tCimuwVVIhMZubE75osGmc2q0.roa
File:                     n9tCimuwVVIhMZubE75osGmc2q0.roa (raw, json)
Hash identifier:          +i76lGnwx8ufWB8hJvo4jLq0W6pr6UE+hxCDSA61Sps=
Subject key identifier:   9F:DB:42:8A:6B:B0:55:52:21:31:9B:9B:13:BE:68:B0:69:9C:DA:AD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03AB
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/n9tCimuwVVIhMZubE75osGmc2q0.roa
Signing time:             Fri 01 Aug 2025 01:55:00 +0000
ROA not before:           Fri 01 Aug 2025 01:55:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        220.208.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:55:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9FDB428A6BB0555221319B9B13BE68B0699CDAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:a4:06:73:5b:68:d1:8a:9e:1f:3a:2e:aa:
                    a9:a0:ac:32:51:68:f1:2d:0c:8e:22:57:3b:82:49:
                    95:d5:5d:b3:8b:eb:02:8c:1a:ec:98:35:53:fe:ff:
                    0e:6c:98:55:5f:60:25:56:82:84:9f:07:0d:63:0e:
                    77:f0:1a:a3:3f:da:1c:40:99:12:b8:27:1a:a8:b0:
                    99:c5:2a:81:71:a6:ab:f8:8a:d2:af:a6:86:07:59:
                    75:30:c1:69:1c:f9:0b:20:45:87:46:4a:37:c1:db:
                    95:b0:90:b1:bc:5a:4c:03:f7:14:ad:3a:cc:84:a4:
                    3b:44:57:b7:a1:5c:cd:9f:71:42:5c:32:1b:6d:95:
                    23:27:98:73:b6:0b:bc:5d:b4:33:4e:d0:2c:5a:be:
                    5f:19:aa:63:d2:0d:1a:0e:cc:6a:af:ca:ad:1b:72:
                    aa:f6:18:c5:33:ea:fe:c5:d5:f0:55:01:bc:22:48:
                    42:23:1e:b5:1f:98:d8:03:cf:6f:76:7c:4c:37:c7:
                    11:22:29:66:07:53:2b:d3:48:ad:4e:29:62:17:24:
                    20:08:52:92:1e:9d:46:a4:8c:b1:6f:9f:f7:12:a4:
                    70:e4:15:52:d2:0d:90:a5:9d:f8:08:d1:80:5c:ce:
                    a6:53:90:ba:76:85:44:05:0d:c7:33:cf:e5:18:13:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:42:8A:6B:B0:55:52:21:31:9B:9B:13:BE:68:B0:69:9C:DA:AD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/n9tCimuwVVIhMZubE75osGmc2q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e6:75:96:11:c0:b5:cc:a1:66:a0:22:18:99:0a:80:7a:fe:a3:
         7e:d3:78:f2:25:ec:2c:66:8c:e6:d0:db:b0:c4:d5:ab:5b:01:
         fe:82:5a:ed:ce:98:fc:3f:e3:c6:0d:1e:c3:8f:f5:20:99:ff:
         d7:54:2b:7f:54:94:6e:04:d9:47:72:c6:15:b8:2b:bf:07:ea:
         55:f6:4b:09:b4:40:16:0e:36:c4:d6:3f:2d:c9:9e:99:ca:02:
         13:36:33:ae:55:87:db:60:8b:a4:19:36:1d:13:a5:25:ef:3f:
         a8:69:02:38:37:42:29:73:df:9a:39:9c:74:e3:cb:f6:64:9e:
         e3:e8:75:f1:ab:72:bc:10:eb:7f:5c:9d:c8:05:87:25:f0:9d:
         a5:9d:b3:90:59:46:9c:13:7d:24:4d:86:e9:ce:eb:86:64:6f:
         df:18:68:ed:07:3f:0b:6b:0a:56:da:b2:07:4a:2c:8a:65:6b:
         af:64:d3:d9:4e:97:56:7b:41:69:9b:22:13:89:cc:84:28:18:
         ba:27:42:7d:5c:f2:c9:50:01:3a:0e:53:ca:34:b4:a4:3b:6b:
         76:5e:a8:8c:42:8b:71:33:e0:5d:32:b4:9f:d1:a3:b5:30:ea:
         43:7a:61:df:4b:f3:69:15:53:ca:5f:8f:62:63:7c:3e:da:10:
         95:72:e5:77
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTU1MDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDlGREI0MjhBNkJCMDU1
NTIyMTMxOUI5QjEzQkU2OEIwNjk5Q0RBQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMRaQGc1to0YqeHzouqqmgrDJRaPEtDI4iVzuCSZXVXbOL6wKM
GuyYNVP+/w5smFVfYCVWgoSfBw1jDnfwGqM/2hxAmRK4JxqosJnFKoFxpqv4itKv
poYHWXUwwWkc+QsgRYdGSjfB25WwkLG8WkwD9xStOsyEpDtEV7ehXM2fcUJcMhtt
lSMnmHO2C7xdtDNO0Cxavl8ZqmPSDRoOzGqvyq0bcqr2GMUz6v7F1fBVAbwiSEIj
HrUfmNgDz292fEw3xxEiKWYHUyvTSK1OKWIXJCAIUpIenUakjLFvn/cSpHDkFVLS
DZClnfgI0YBczqZTkLp2hUQFDcczz+UYEzobAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUn9tCimuwVVIhMZubE75osGmc2q0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL245dENpbXV3VlZJaE1adWJFNzVvc0dtYzJxMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbc0EAwDQYJKoZIhvcNAQELBQADggEBAOZ1lhHAtcyhZqAiGJkKgHr+o37T
ePIl7CxmjObQ27DE1atbAf6CWu3OmPw/48YNHsOP9SCZ/9dUK39UlG4E2UdyxhW4
K78H6lX2Swm0QBYONsTWPy3JnpnKAhM2M65Vh9tgi6QZNh0TpSXvP6hpAjg3Qilz
35o5nHTjy/ZknuPodfGrcrwQ639cncgFhyXwnaWds5BZRpwTfSRNhunO64Zkb98Y
aO0HPwtrClbasgdKLIpla69k09lOl1Z7QWmbIhOJzIQoGLonQn1c8slQAToOU8o0
tKQ7a3ZeqIxCi3Ez4F0ytJ/Ro7Uw6kN6Yd9L82kVU8pfj2JjfD7aEJVy5Xc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:32:49 2025 by rpki-client