Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/T609lX92-kQlLpAVIV0IgVn92n8.roa
File:                     T609lX92-kQlLpAVIV0IgVn92n8.roa (raw, json)
Hash identifier:          6dV7iNv8Jto3fOYFStmazTr6QvG1OCRUimv838riXPM=
Subject key identifier:   4F:AD:3D:95:7F:76:FA:44:25:2E:90:15:21:5D:08:81:59:FD:DA:7F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       03E3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T609lX92-kQlLpAVIV0IgVn92n8.roa
Signing time:             Mon 01 Sep 2025 01:30:55 +0000
ROA not before:           Mon 01 Sep 2025 01:30:55 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        125.62.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:55 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=4FAD3D957F76FA44252E9015215D088159FDDA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:b2:f7:7d:89:f2:ec:99:bc:1e:24:a7:06:
                    49:0c:dc:74:5c:0f:a9:7a:42:05:b9:6b:db:57:3b:
                    7b:f1:69:6d:ee:a3:16:ea:64:35:bb:e4:9b:60:1c:
                    15:be:77:df:89:7d:ff:3c:2a:e3:2f:ff:c1:5e:e6:
                    07:8b:7c:d6:f9:95:43:cb:d7:e8:35:89:0d:30:b0:
                    85:62:69:11:41:50:45:6c:1f:3c:4b:66:00:ff:65:
                    75:37:a4:8b:eb:9e:ee:45:a7:10:e1:cb:83:ac:06:
                    e4:54:6d:e4:db:b8:6e:50:f1:fc:f1:80:31:02:c8:
                    db:fd:85:02:45:b1:56:07:d2:2f:23:fe:95:17:24:
                    a0:45:cd:87:ee:21:bf:a6:37:3e:bf:36:b2:e9:e7:
                    fe:0c:01:f3:37:d3:bb:d1:41:8e:cb:f6:40:1f:af:
                    b5:a6:67:8e:8b:88:33:36:a8:2b:a8:2c:9a:a9:9a:
                    96:88:d0:9c:f4:7a:94:4f:a2:6f:cf:69:7f:24:ff:
                    3d:9e:8d:08:d4:b1:d8:05:40:8f:e6:02:27:12:a0:
                    0f:83:1b:a7:73:fa:57:43:e4:75:c2:24:90:27:b1:
                    43:ba:4e:4d:09:d5:7d:a8:44:35:ed:0f:1b:52:69:
                    f8:a4:db:57:a0:3f:01:ca:93:28:6d:81:86:a2:54:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:3D:95:7F:76:FA:44:25:2E:90:15:21:5D:08:81:59:FD:DA:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/T609lX92-kQlLpAVIV0IgVn92n8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:18:9c:7b:ec:7e:1c:88:3f:7c:4f:f9:0a:b3:10:a0:10:
         38:cb:d6:24:13:77:d6:9f:09:5c:8e:64:d6:83:1f:be:d8:1f:
         a4:66:62:4c:d4:7f:57:90:9f:fe:85:37:a6:24:94:a9:22:a0:
         19:03:53:c8:67:fd:cb:2b:a3:00:60:f5:a5:94:b7:4d:17:c2:
         54:80:64:b6:34:f0:56:a2:9a:d5:19:61:4f:eb:2b:08:9d:5c:
         64:15:67:0d:c3:ff:9e:01:59:dc:da:0e:2f:cb:41:6e:f2:ed:
         eb:09:e6:48:fc:4a:41:a1:65:fc:ae:d8:64:fa:ef:7f:97:b0:
         88:2c:0d:15:fa:43:07:13:c8:cf:17:eb:34:95:ed:16:e2:68:
         e0:bd:90:81:07:a2:70:8c:bc:56:89:db:33:52:20:36:f2:a0:
         49:c1:76:46:bd:58:03:c9:a9:02:fe:50:28:02:68:a1:85:e8:
         f3:4a:59:27:a8:63:65:47:be:ac:a4:57:ea:f6:fb:55:0e:7a:
         39:23:cc:52:f4:cc:76:11:57:83:f7:67:bc:28:d0:a0:1a:0a:
         58:d9:08:8f:91:78:df:c4:e2:e7:00:65:e2:6e:29:83:1e:19:
         20:80:79:a8:4a:aa:f5:a8:f8:db:e4:67:8c:48:98:24:cc:7b:
         56:ba:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:43 2025 by rpki-client