Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/x8OULH07_Cbf9xv1YeSTEHYeUYE.roa
File:                     x8OULH07_Cbf9xv1YeSTEHYeUYE.roa (raw, json)
Hash identifier:          1GLFcRQursCEJJLrqW6ugbi+uW8g1oOWBGltPWZ4FPI=
Subject key identifier:   C7:C3:94:2C:7D:3B:FC:26:DF:F7:1B:F5:61:E4:93:10:76:1E:51:81
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       031A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/x8OULH07_Cbf9xv1YeSTEHYeUYE.roa
Signing time:             Tue 01 Jul 2025 01:47:15 +0000
ROA not before:           Tue 01 Jul 2025 01:47:15 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        103.192.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul  1 01:47:15 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C7C3942C7D3BFC26DFF71BF561E49310761E5181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:0b:8e:fa:a8:f3:3d:e7:2f:1a:a5:d5:a2:
                    32:3a:19:ca:ed:0f:b0:7f:bc:d5:da:c6:df:10:5e:
                    50:81:c3:44:76:98:3e:9e:f1:47:ed:f4:55:da:d3:
                    bf:ca:bc:90:fa:d9:5f:63:a3:2d:17:c6:59:b7:21:
                    59:9d:17:d3:f4:f1:13:66:e4:6a:dc:ab:c9:8e:82:
                    31:53:2e:2c:db:f5:c7:10:9c:90:a0:fd:ea:af:c6:
                    65:ee:fe:31:e5:3d:8c:22:7b:13:e6:f5:05:9e:24:
                    7e:c2:aa:29:c8:4f:e8:23:76:d8:23:cf:a9:65:28:
                    ec:36:1e:7f:94:52:40:a6:52:21:f1:9d:1a:29:12:
                    57:47:e8:81:8e:a6:6c:7b:64:9e:81:c8:2d:b2:dc:
                    4e:b7:a5:a9:cb:54:65:2a:38:f4:3b:dd:a9:6f:91:
                    53:7d:f3:15:b3:95:3b:2e:10:07:65:b2:fc:1e:45:
                    78:5e:01:0d:38:41:5c:ec:7d:9a:ea:3a:88:d8:54:
                    9f:b6:69:78:d6:4c:4a:ff:a8:c7:85:52:0f:61:c0:
                    c7:25:e0:c4:43:71:56:53:52:38:a2:21:ba:bf:9c:
                    fc:af:80:af:06:86:9f:30:ec:78:98:92:85:72:0f:
                    08:43:e5:30:3a:bb:1d:c6:d1:b7:d9:c4:d1:ae:fd:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:94:2C:7D:3B:FC:26:DF:F7:1B:F5:61:E4:93:10:76:1E:51:81
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/x8OULH07_Cbf9xv1YeSTEHYeUYE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:cd:bc:76:c8:79:80:59:0d:7d:b7:a5:a1:d4:66:f0:e9:
         3b:8a:be:84:bf:cc:a7:23:35:80:3f:63:65:fa:25:d0:55:72:
         2b:3d:82:3c:f7:36:52:96:74:07:ff:95:25:5c:90:00:cc:fb:
         cd:62:29:2c:16:e6:3a:ee:82:df:91:9c:40:cd:ed:b9:e6:53:
         48:e3:10:b0:97:de:38:be:4d:24:ff:a3:05:c1:1e:5f:b2:ff:
         5b:71:9d:9a:95:bb:f6:00:f4:39:fe:14:41:6b:7e:ac:1c:41:
         8e:f0:55:74:02:67:a7:83:06:04:34:1f:71:08:66:4e:e1:d5:
         3a:b1:89:48:8f:0c:63:8a:3e:4b:16:68:f5:ac:29:19:67:a8:
         75:ba:95:6b:9c:26:e7:d6:04:d0:93:8f:4c:15:7c:1f:30:3b:
         36:38:a1:63:62:92:e2:7d:22:ee:9b:a5:62:87:c4:42:a4:81:
         29:59:75:e8:5d:3f:20:63:00:ed:90:20:0d:31:b6:82:83:a3:
         61:ef:81:e6:b8:e2:3c:60:18:a3:76:be:7c:2e:03:b0:39:e6:
         b1:33:40:7b:6e:cb:e9:e6:39:26:8e:96:74:b1:b2:7f:dc:40:
         b6:e3:a2:40:49:e3:87:a4:30:24:ed:00:9e:d2:73:76:7b:ed:
         7f:fb:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:28:01 2025 by rpki-client