Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/xbO_XIPbSdmVF8yiDl7TPZqUYa4.roa
File:                     xbO_XIPbSdmVF8yiDl7TPZqUYa4.roa (raw, json)
Hash identifier:          SbgCnSweFmgztFFcCkdaopfIwdM11zZB3pdSgbRqgTs=
Subject key identifier:   C5:B3:BF:5C:83:DB:49:D9:95:17:CC:A2:0E:5E:D3:3D:9A:94:61:AE
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       8A
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/xbO_XIPbSdmVF8yiDl7TPZqUYa4.roa
Signing time:             Wed 01 Oct 2025 01:33:18 +0000
ROA not before:           Wed 01 Oct 2025 01:33:18 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     146984
IP address blocks:        115.69.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Oct  1 01:33:18 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C5B3BF5C83DB49D99517CCA20E5ED33D9A9461AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:6f:26:cb:0b:fb:7e:92:0f:5d:42:35:5c:
                    4b:3e:0c:f8:35:32:aa:1c:d0:fa:72:88:be:a2:33:
                    41:9d:f5:a7:41:ce:d0:76:48:36:e6:c7:af:8b:da:
                    2a:d2:6f:de:27:84:48:78:50:dd:c9:f0:1a:6f:25:
                    1a:84:79:8c:de:cb:e8:79:5f:89:44:e0:18:c4:61:
                    8d:2b:27:17:33:a6:b9:26:eb:49:6a:7c:96:fb:76:
                    95:4d:18:b8:c0:43:f6:3d:6d:d5:d3:6e:9a:63:4b:
                    9e:45:4b:c8:1c:f8:13:53:83:e3:ac:5a:aa:af:7d:
                    de:76:f0:cd:8e:23:8d:f6:22:ad:78:28:cd:d5:65:
                    2b:18:f5:f6:22:49:c6:5a:e0:05:4b:b8:e2:d0:ce:
                    c9:2f:71:31:18:88:f8:75:79:42:d6:17:40:c6:22:
                    4b:cf:40:33:6a:32:97:84:e4:97:f3:34:bc:9c:bc:
                    48:4a:98:35:d1:a7:d4:12:d8:71:94:39:78:e7:81:
                    3b:ff:8b:fc:26:41:f7:53:8b:53:e7:a0:d4:71:d9:
                    43:0f:74:d5:df:01:33:0c:e5:1d:5d:f8:b1:57:5c:
                    01:e0:8a:b5:d0:79:eb:8a:91:9c:40:ad:4a:d9:bf:
                    b3:f9:f6:75:06:d6:93:2e:8c:d9:98:3a:fa:dd:ae:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B3:BF:5C:83:DB:49:D9:95:17:CC:A2:0E:5E:D3:3D:9A:94:61:AE
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/xbO_XIPbSdmVF8yiDl7TPZqUYa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:5c:5f:6f:7b:96:ca:06:b4:62:8f:25:7c:e6:98:e5:c4:
         44:14:66:59:ef:94:c2:1d:d6:78:2e:4c:fc:2f:37:24:5a:3b:
         b2:61:4a:45:cc:0e:8e:c9:30:18:07:3d:a5:18:c6:b6:a9:5f:
         3b:f8:99:c0:a2:bc:ee:e5:9f:e2:5b:d2:08:e0:b4:33:21:34:
         ce:82:0d:8a:3c:6b:eb:e7:16:45:52:66:7d:4e:b3:1f:84:28:
         53:50:8f:db:a2:e5:a8:e2:9d:f9:24:ee:ee:cd:43:9e:a1:cb:
         dc:f4:55:99:91:f3:a4:cd:43:7b:f9:6c:d6:7d:1f:d4:8f:84:
         20:4e:3c:22:c2:55:dd:69:14:12:21:b6:22:e6:c4:b9:6b:56:
         b4:f1:5b:b4:e8:9a:ba:bd:7a:8e:b5:b3:82:74:2a:7f:47:6b:
         a6:6f:90:a8:d7:85:db:05:43:7c:93:e1:94:b9:77:3e:39:16:
         5b:db:ce:48:52:af:4a:bf:a1:77:3b:66:c4:cb:8e:73:55:7b:
         1d:30:8c:4d:45:18:4a:48:63:06:6d:ee:1b:46:f2:a0:ef:9f:
         53:4b:af:c9:71:9e:b4:02:cb:f6:70:57:cc:1b:13:0d:5a:86:
         36:01:83:29:04:ac:63:1a:12:08:75:44:2a:20:d1:c2:fd:cc:
         22:77:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:29 2025 by rpki-client