Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/6QhFC-MJOGXJJNywAR6VT0GyFog.roa
File:                     6QhFC-MJOGXJJNywAR6VT0GyFog.roa (raw, json)
Hash identifier:          EV1C2Sclj1Hc7HwnBXTFq9NZey6B8rM/FQktXKhxop8=
Subject key identifier:   E9:08:45:0B:E3:09:38:65:C9:24:DC:B0:01:1E:95:4F:41:B2:16:88
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       5C
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/6QhFC-MJOGXJJNywAR6VT0GyFog.roa
Signing time:             Fri 01 Aug 2025 01:29:14 +0000
ROA not before:           Fri 01 Aug 2025 01:29:14 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     23805
IP address blocks:        27.100.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 17:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Aug  1 01:29:14 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=E908450BE3093865C924DCB0011E954F41B21688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:36:12:f2:6e:c4:29:96:81:cf:e8:a2:05:
                    27:84:bc:36:fb:27:93:0c:8f:f1:01:b8:9b:58:dc:
                    89:6a:f2:5c:06:b3:4b:40:44:29:df:14:75:ba:16:
                    3b:85:a7:9a:ac:cf:5a:ed:3f:a1:5c:19:06:36:62:
                    95:46:66:43:c1:89:12:72:b5:f9:1e:ba:e3:a7:ea:
                    69:f3:fe:51:6d:84:54:73:3a:49:02:19:7f:30:75:
                    30:c8:e6:ce:d3:45:c0:30:68:65:e9:6e:28:e4:e8:
                    ba:5e:56:5c:80:5c:09:8b:04:af:a1:e8:ab:0e:4e:
                    0f:c0:cf:1b:d8:28:d7:2b:2d:f9:dd:81:ad:fd:45:
                    dd:bf:1d:3e:7f:a5:6b:9a:97:72:46:8c:8a:7e:e4:
                    64:d6:4b:d8:5d:7d:96:b7:c5:28:c1:d9:e1:8a:20:
                    00:3f:fe:92:e1:f3:e4:60:cd:9a:90:85:ec:7d:66:
                    8c:d2:77:d5:e3:34:22:ad:5b:ca:bb:33:8a:ac:5c:
                    94:68:94:cb:2b:6c:99:67:d5:a9:82:96:6b:0e:b7:
                    b3:95:ca:e5:79:6d:24:b9:be:e2:b9:9a:97:4d:a8:
                    4b:6b:fc:b5:08:4e:f0:f2:37:6f:98:08:a4:37:b3:
                    73:17:a6:a6:a9:bf:52:08:4a:ff:fb:87:55:62:66:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:08:45:0B:E3:09:38:65:C9:24:DC:B0:01:1E:95:4F:41:B2:16:88
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/6QhFC-MJOGXJJNywAR6VT0GyFog.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.100.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:9a:6a:ac:fd:50:79:52:a7:a5:96:18:a2:ec:7d:d4:6a:b9:
         2e:57:c9:6c:1a:86:ec:e0:38:86:f4:bd:aa:af:48:a1:60:69:
         f5:53:7b:ec:31:b6:a2:23:91:c7:4d:16:24:ce:46:50:57:fa:
         a9:bb:45:a3:41:95:f3:b5:1a:69:05:31:88:c2:ce:3c:d6:49:
         89:8b:72:c7:1f:06:78:44:12:6b:c5:44:2a:a1:87:00:6f:c8:
         fd:ec:43:fd:ba:01:ca:00:f3:96:f0:cd:15:ec:b0:1d:be:80:
         2a:74:c9:26:5a:96:87:6e:a1:a4:e5:79:40:1c:9f:d2:98:ea:
         9b:0b:0f:9f:ac:7f:a0:5f:33:b5:ec:6d:a7:8a:d1:09:b8:b6:
         ea:0e:0d:de:73:7c:8b:17:c1:ef:d1:32:32:0c:d4:71:73:ae:
         f6:f7:03:ae:1f:60:57:9d:fd:77:dc:d7:4f:e8:b8:83:0d:9e:
         51:0b:7b:a4:c0:33:6f:77:97:fb:44:50:4f:1c:36:dd:6a:b9:
         89:5b:80:4f:e7:81:5e:87:7e:7d:0d:de:a4:a2:6e:aa:e7:a9:
         38:29:97:44:73:5a:c5:28:ee:df:04:59:59:d9:9d:3d:d2:b3:
         d5:61:e6:23:40:cf:82:d1:1d:7a:bb:41:96:38:72:1c:03:f3:
         ae:15:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:08 2025 by rpki-client