Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/m1JCwDScK6RfTFIF8nSYBI9UVuA.roa
File:                     m1JCwDScK6RfTFIF8nSYBI9UVuA.roa (raw, json)
Hash identifier:          3CcyPPkJhj+ngBWvRWUU1nS9l/pXOAvKalc7TNn50MA=
Subject key identifier:   9B:52:42:C0:34:9C:2B:A4:5F:4C:52:05:F2:74:98:04:8F:54:56:E0
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       76
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/m1JCwDScK6RfTFIF8nSYBI9UVuA.roa
Signing time:             Tue 02 Sep 2025 02:32:37 +0000
ROA not before:           Tue 02 Sep 2025 02:32:37 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 09:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Sep  2 02:32:37 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=9B5242C0349C2BA45F4C5205F27498048F5456E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:32:ea:28:15:dc:46:93:30:5c:24:5c:6c:
                    46:52:27:27:6f:a4:df:0b:df:46:73:08:92:29:24:
                    27:ff:7a:c5:f4:d5:41:44:14:bd:20:fc:21:1f:a3:
                    11:2b:cc:56:15:b9:6e:20:52:ae:e7:8d:ac:d4:fe:
                    9d:d3:5a:89:de:18:86:13:8e:00:07:1a:b4:05:74:
                    53:a7:ef:37:66:25:4c:3b:84:d7:a4:7e:18:25:a9:
                    71:ac:4d:fb:d9:b1:43:c1:3d:36:17:11:63:73:9a:
                    ff:99:7b:5c:2b:60:8a:a0:8c:71:8c:83:58:df:ca:
                    e9:0b:15:9d:31:f2:92:b7:fa:e8:e7:9d:cf:78:45:
                    8e:99:94:a6:91:d2:8d:7c:ce:21:2a:95:1c:32:11:
                    b4:34:e4:ed:2d:fc:7c:8e:ca:a4:0d:a8:52:73:4e:
                    20:1e:f4:99:ae:70:2c:58:32:83:60:5e:26:ec:bf:
                    4a:d3:7f:64:99:c4:8b:64:1a:fd:4b:5f:a5:24:82:
                    3c:82:ac:ba:8e:ef:44:a1:a3:68:c5:11:9b:8d:9d:
                    d8:69:a5:89:b7:c1:7d:93:48:a5:44:83:5e:e6:f3:
                    2d:48:d6:10:cb:18:63:64:5e:a4:90:14:73:8e:79:
                    1a:53:ce:ea:8e:b6:2e:f8:34:19:2c:ab:b4:db:0b:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:52:42:C0:34:9C:2B:A4:5F:4C:52:05:F2:74:98:04:8F:54:56:E0
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/m1JCwDScK6RfTFIF8nSYBI9UVuA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:69:f7:95:63:10:4d:c2:2b:e4:7d:5a:71:a4:84:04:1b:82:
         83:1d:41:8d:4f:7b:e7:2b:1d:3b:a0:5b:31:96:46:27:f6:60:
         c2:85:f9:a5:87:1f:4b:08:91:cc:fc:cf:99:ee:d6:84:8c:1b:
         f5:54:79:ef:7e:93:c7:ab:30:10:b7:6c:85:1f:23:5f:e9:89:
         f2:44:3b:a7:c7:00:10:31:3d:f5:fb:83:26:a2:de:e5:e9:16:
         80:f9:76:12:2b:72:d1:71:8b:37:8d:9e:c4:d3:d4:dc:87:c7:
         a4:53:d7:4e:0b:e7:22:a7:05:9d:40:0d:5a:61:94:0b:87:d3:
         67:4f:fa:23:a8:71:9c:ea:4c:3c:ba:e1:5a:e8:e5:ab:db:6d:
         0f:47:77:b7:64:fb:94:79:97:f5:26:6c:56:0b:99:e5:b3:64:
         6f:16:47:e3:d5:02:1e:a6:c9:75:2c:67:ce:31:f7:77:8f:0c:
         5a:0b:7c:e4:b1:4a:f5:79:1a:f8:13:c3:60:01:31:c6:ad:3e:
         c5:b4:b0:23:a0:c8:bf:51:42:29:2a:dd:f4:60:27:9f:7f:44:
         07:dc:48:ea:f4:5b:73:ca:9b:77:25:3b:f1:a0:7b:80:7a:20:
         77:ea:30:51:32:46:ed:d0:b9:3b:1f:ec:8a:6f:ec:df:50:1a:
         d9:bb:64:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 8 13:22:44 2025 by rpki-client