Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gd83jwjEtaMkLBS28dX5mb_MSVo.roa
File:                     Gd83jwjEtaMkLBS28dX5mb_MSVo.roa (raw, json)
Hash identifier:          NqXO+ry9f/9rqmSlY1eqa2sz74PAYtqHqS1P1i4wUDk=
Subject key identifier:   19:DF:37:8F:08:C4:B5:A3:24:2C:14:B6:F1:D5:F9:99:BF:CC:49:5A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03E4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gd83jwjEtaMkLBS28dX5mb_MSVo.roa
Signing time:             Mon 01 Sep 2025 01:30:56 +0000
ROA not before:           Mon 01 Sep 2025 01:30:56 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        202.138.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:56 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=19DF378F08C4B5A3242C14B6F1D5F999BFCC495A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:16:89:cf:3b:6c:dc:02:60:45:c0:9a:da:
                    64:1a:5e:50:20:a5:16:11:3e:3c:b6:eb:b0:61:43:
                    a4:6b:28:d3:5b:88:ba:7c:fc:09:d9:c7:77:3d:c0:
                    4e:96:4e:2d:ff:c1:dc:5f:fc:25:a7:b2:c1:07:59:
                    2e:e1:9e:ca:05:e8:24:59:fd:7d:7a:29:ce:83:84:
                    10:8f:47:2b:71:dd:e2:76:5b:77:6c:60:c9:0a:df:
                    24:51:aa:06:f8:9c:00:c1:9c:e6:47:d6:c2:94:9d:
                    fc:a2:f9:db:b7:f2:1e:ea:fc:00:94:fa:68:df:15:
                    91:d6:21:76:c6:c4:b6:6c:c2:54:f6:56:89:d4:ca:
                    59:3f:b2:18:20:1b:4b:41:b2:8c:45:52:3e:12:45:
                    42:df:6e:9b:ab:ec:54:6b:e1:7a:37:e6:17:89:81:
                    12:17:01:49:5d:4e:33:4a:f6:af:d9:54:bd:2a:13:
                    5d:a9:b2:89:f0:7f:f1:88:ae:4d:f2:cf:91:d4:26:
                    1c:f2:19:ee:86:c6:90:3a:21:4e:5c:fc:eb:86:d5:
                    1d:2c:9c:4f:ee:22:4c:36:c1:00:e7:ee:4d:ad:16:
                    91:ea:dd:44:92:ca:a6:07:9b:65:a9:0c:f0:ca:24:
                    be:a2:a7:e3:d5:19:78:f0:13:78:9b:60:0f:58:c7:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:37:8F:08:C4:B5:A3:24:2C:14:B6:F1:D5:F9:99:BF:CC:49:5A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Gd83jwjEtaMkLBS28dX5mb_MSVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.138.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:79:9d:74:2c:1c:75:b3:b2:60:aa:76:1b:98:c0:bc:05:d0:
         68:1e:41:59:c8:af:6b:4f:e8:58:b0:15:63:d0:43:9b:a5:39:
         01:a0:ea:37:13:c3:59:ff:a5:40:c0:6c:b1:75:6c:08:5f:85:
         1c:2a:26:96:74:ec:4c:88:86:78:2c:69:ff:2c:fe:db:bc:44:
         1f:c4:08:46:8a:27:45:b3:92:5f:52:98:28:13:f3:d2:00:d7:
         b1:10:23:c0:e1:3d:bb:d4:7e:10:9e:b0:48:39:98:ca:82:45:
         ce:40:06:97:d6:b1:e1:91:9b:e3:5c:1f:66:65:b5:38:7c:70:
         4f:9c:b3:97:01:e9:b2:53:64:61:3f:8b:ea:7b:91:ec:8d:31:
         ae:a9:5d:96:58:54:55:16:7d:93:a3:a6:f6:22:c1:a6:c4:f0:
         b1:bf:4c:56:fb:e9:a5:87:05:55:4e:a5:10:b5:c5:26:2a:4e:
         c9:f3:a6:81:49:02:7b:4c:46:c9:26:29:f3:e9:03:4e:73:8d:
         e5:64:b2:7f:87:2a:d2:c4:3a:9b:9e:32:a9:de:c5:25:10:16:
         53:96:c4:92:9b:c7:b8:40:01:5d:c5:5a:6a:4b:93:c8:c5:a0:
         35:12:42:d7:f5:cf:c7:9d:62:58:6f:f0:38:96:7e:db:70:82:
         96:d5:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:45 2025 by rpki-client