Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/q0SmQi4t-Iz-oaydWMClSdCnDVI.roa
File:                     q0SmQi4t-Iz-oaydWMClSdCnDVI.roa (raw, json)
Hash identifier:          oWaBJ3q53F2HtPMK80k8GNTzVQ97hH7ICFv18h/f7nE=
Subject key identifier:   AB:44:A6:42:2E:2D:F8:8C:FE:A1:AC:9D:58:C0:A5:49:D0:A7:0D:52
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0301
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q0SmQi4t-Iz-oaydWMClSdCnDVI.roa
Signing time:             Tue 01 Jul 2025 01:39:44 +0000
ROA not before:           Tue 01 Jul 2025 01:39:44 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        110.93.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:44 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=AB44A6422E2DF88CFEA1AC9D58C0A549D0A70D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:45:ab:53:61:a8:ed:23:1a:57:b8:c9:79:
                    96:d0:fb:66:3b:9a:55:fd:a3:8b:3d:56:65:34:ce:
                    2e:56:17:aa:f3:21:1e:92:e5:94:c9:a4:8e:d9:34:
                    2d:24:f7:ef:9d:93:a4:a7:81:e9:7d:ee:5e:6f:16:
                    ae:ab:43:7a:e5:dc:9a:fb:72:37:de:1b:b8:77:31:
                    66:b5:2d:4c:0d:4b:ca:3a:0e:ad:c2:d6:ba:b6:07:
                    b8:dc:e7:b1:c4:79:2d:63:6e:be:78:e8:cb:f8:23:
                    1d:29:9d:f2:22:e2:4c:2e:40:71:2c:ce:3c:fc:dd:
                    8d:0f:21:9a:82:b9:a4:ab:6e:38:ec:41:d0:46:55:
                    23:61:3d:c4:cb:d0:b6:cb:4d:78:69:a3:07:8a:84:
                    b4:85:cc:c7:02:ba:62:82:31:cf:4c:00:0e:1d:d3:
                    4d:97:e4:11:e8:ea:aa:cf:a8:f5:a1:5f:e0:ac:1b:
                    9c:d5:89:80:24:a1:0b:16:f0:11:7f:19:39:53:f2:
                    2e:d7:09:81:11:b8:88:0a:1f:93:45:8a:05:96:83:
                    41:6d:ab:10:ae:9e:59:0e:a6:e7:a7:35:c5:f9:9c:
                    dd:77:c0:ca:13:46:57:8c:95:ec:1d:22:36:2b:a3:
                    98:cd:8e:b8:cb:44:a6:97:94:67:97:66:fa:98:bd:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:A6:42:2E:2D:F8:8C:FE:A1:AC:9D:58:C0:A5:49:D0:A7:0D:52
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q0SmQi4t-Iz-oaydWMClSdCnDVI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:ab:71:91:4b:d2:d8:8e:10:ab:ea:16:1e:64:95:36:ae:
         48:45:81:eb:ea:e8:00:aa:cc:b5:70:4b:da:f4:c5:e9:6a:3b:
         cb:7d:06:46:5a:f5:d1:e0:29:cc:6f:08:61:7e:b3:ac:45:b6:
         32:cc:8a:db:22:b9:a6:5d:57:cb:fc:9a:ac:c1:3f:2c:71:85:
         99:53:da:d4:ff:3e:70:f7:b8:e9:c9:a8:f7:21:f7:fd:6b:c8:
         e7:21:ec:8b:26:7b:4c:47:ca:9e:b1:40:cc:58:8e:9b:fc:7f:
         12:3f:1c:ca:91:68:27:f4:4a:f7:40:47:69:98:2e:bd:80:e2:
         3a:bf:fc:36:2a:d6:c7:29:2d:90:3e:d5:4b:a5:23:f7:a3:ad:
         60:48:22:32:e9:2c:3d:29:6f:5e:21:f1:cd:65:94:1e:56:a8:
         a9:dc:93:e8:ee:59:cb:c5:ea:3c:cc:14:86:d1:00:9f:cf:9a:
         a1:71:22:62:57:de:57:a1:25:5a:04:87:51:50:69:08:c7:67:
         57:b0:d2:04:dc:6b:07:39:47:89:b1:70:bd:56:3f:e8:0e:48:
         a6:db:f1:03:8b:a8:ff:3f:fa:06:f9:7a:6e:d6:b7:f7:cd:0a:
         b0:40:6e:dd:4e:27:f7:05:06:c6:df:3e:c8:17:54:85:02:14:
         bd:dd:b8:e4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw
MTM5NDRaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCNDRBNjQyMkUyREY4
OENGRUExQUM5RDU4QzBBNTQ5RDBBNzBENTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVzUWrU2Go7SMaV7jJeZbQ+2Y7mlX9o4s9VmU0zi5WF6rzIR6S
5ZTJpI7ZNC0k9++dk6Sngel97l5vFq6rQ3rl3Jr7cjfeG7h3MWa1LUwNS8o6Dq3C
1rq2B7jc57HEeS1jbr546Mv4Ix0pnfIi4kwuQHEszjz83Y0PIZqCuaSrbjjsQdBG
VSNhPcTL0LbLTXhpoweKhLSFzMcCumKCMc9MAA4d002X5BHo6qrPqPWhX+CsG5zV
iYAkoQsW8BF/GTlT8i7XCYERuIgKH5NFigWWg0FtqxCunlkOpuenNcX5nN13wMoT
RleMlewdIjYro5jNjrjLRKaXlGeXZvqYvdaHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUq0SmQi4t+Iz+oaydWMClSdCnDVIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3EwU21RaTR0LUl6LW9heWRXTUNsU2RDbkRWSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANuXQAwDQYJKoZIhvcNAQELBQADggEBAKkfq3GRS9LYjhCr6hYeZJU2rkhF
gevq6ACqzLVwS9r0xelqO8t9BkZa9dHgKcxvCGF+s6xFtjLMitsiuaZdV8v8mqzB
PyxxhZlT2tT/PnD3uOnJqPch9/1ryOch7Isme0xHyp6xQMxYjpv8fxI/HMqRaCf0
SvdAR2mYLr2A4jq//DYq1scpLZA+1UulI/ejrWBIIjLpLD0pb14h8c1llB5WqKnc
k+juWcvF6jzMFIbRAJ/PmqFxImJX3lehJVoEh1FQaQjHZ1ew0gTcawc5R4mxcL1W
P+gOSKbb8QOLqP8/+gb5em7Wt/fNCrBAbt1OJ/cFBsbfPsgXVIUCFL3duOQ=
-----END CERTIFICATE-----
Generated at Sat Jul 5 01:38:40 2025 by rpki-client