Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wCrLmH3uRcnL4N-ea6PKCcTmSpQ.roa
File:                     wCrLmH3uRcnL4N-ea6PKCcTmSpQ.roa (raw, json)
Hash identifier:          PTYt0U/twtl924z6gcbf3grWsCrAbbpG6oCMLPlOelU=
Subject key identifier:   C0:2A:CB:98:7D:EE:45:C9:CB:E0:DF:9E:6B:A3:CA:09:C4:E6:4A:94
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02FD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wCrLmH3uRcnL4N-ea6PKCcTmSpQ.roa
Signing time:             Tue 01 Jul 2025 01:39:42 +0000
ROA not before:           Tue 01 Jul 2025 01:39:42 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        110.232.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:39:42 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C02ACB987DEE45C9CBE0DF9E6BA3CA09C4E64A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:3f:e8:45:a0:2e:a4:84:8d:1d:51:ba:18:
                    ed:4c:94:93:89:d3:47:cd:4e:80:25:64:26:4e:e8:
                    90:36:df:8f:ca:7d:d2:08:dd:d1:f8:06:53:00:40:
                    cf:73:68:d9:81:dc:44:7d:e1:db:a2:46:53:99:25:
                    18:65:13:b4:5a:90:e3:d3:4f:36:2b:b9:07:0c:85:
                    0c:82:da:26:e9:9f:af:57:f3:30:c2:cd:6c:65:54:
                    b8:0d:7e:b0:41:95:cb:c3:d6:78:24:95:f4:90:a0:
                    eb:87:c6:e6:b5:58:83:d8:22:e7:97:e1:30:d1:9f:
                    f7:d3:03:e2:e3:52:2d:14:9e:c8:67:3a:98:f4:3b:
                    7d:52:ee:92:82:8c:71:4b:a9:95:8d:3a:ba:26:dd:
                    ea:c0:46:54:3c:ab:5b:04:77:5e:1a:9b:70:83:52:
                    0f:e6:0d:d4:c8:bc:81:0b:fa:19:d8:68:11:4b:0c:
                    a5:ec:31:95:5e:dc:41:a8:83:56:67:95:ad:1b:ab:
                    e8:f4:f5:6f:03:e8:26:f7:06:96:ab:42:10:ae:cc:
                    48:fe:d4:ff:c3:76:3c:9c:b1:67:c8:4f:cf:6d:5e:
                    81:ff:e5:1e:d5:59:a6:4b:43:de:61:b1:c1:5c:7e:
                    e6:b7:53:ae:56:7c:70:37:25:63:a3:e3:2b:bd:52:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:CB:98:7D:EE:45:C9:CB:E0:DF:9E:6B:A3:CA:09:C4:E6:4A:94
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wCrLmH3uRcnL4N-ea6PKCcTmSpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:0d:fd:78:93:15:bc:d8:83:57:89:c0:a1:a3:d7:94:44:ac:
         0c:ec:a4:e2:b9:43:21:51:26:ff:52:23:76:aa:57:9d:f0:10:
         21:d1:f3:0c:0d:2f:b9:d4:07:0b:3a:8b:6c:ef:c6:c2:1a:b5:
         6c:08:33:56:ce:e5:44:4a:e6:a9:78:83:e6:b3:f6:d2:eb:57:
         bd:f0:bf:2b:16:5c:1c:65:ba:18:1e:68:82:68:d9:21:da:77:
         25:4d:6c:70:f7:39:62:3a:be:3a:42:6c:b4:f4:cc:55:2f:d7:
         19:30:bd:31:19:ca:73:25:77:ef:03:50:3a:f0:7e:0d:e1:e0:
         7a:65:1f:54:dd:98:ad:e7:6b:2a:cb:2b:32:00:23:2d:92:1c:
         a0:47:50:02:e9:80:ff:12:21:cb:b6:4d:6c:3c:20:f6:cf:89:
         dc:a8:82:4e:47:48:5a:ca:bc:c4:97:a3:58:e4:e5:e9:dc:37:
         8f:de:35:3f:48:cf:0d:92:73:d1:e8:6e:af:36:62:8f:05:da:
         f6:b2:96:e7:48:60:6a:b4:ec:5d:e0:b4:1c:fb:69:66:c7:c5:
         c6:70:c4:bc:fd:d3:09:5e:8a:9f:8f:c7:a8:e4:77:d5:86:e4:
         e5:54:40:42:a5:25:4e:e9:ba:85:3d:31:e0:1b:16:2e:2d:3c:
         55:95:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:08:03 2025 by rpki-client