Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/JMh1vEg7LlQzU4NFrbiHdShf21c.roa
File:                     JMh1vEg7LlQzU4NFrbiHdShf21c.roa (raw, json)
Hash identifier:          WM3Odz6dO6uFhjhSivq+Cvgiwaq5JoPaGtu/dJGknho=
Subject key identifier:   24:C8:75:BC:48:3B:2E:54:33:53:83:45:AD:B8:87:75:28:5F:DB:57
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       51
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/JMh1vEg7LlQzU4NFrbiHdShf21c.roa
Signing time:             Wed 01 Oct 2025 01:31:38 +0000
ROA not before:           Wed 01 Oct 2025 01:31:38 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        210.237.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct  1 01:31:38 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=24C875BC483B2E5433538345ADB88775285FDB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:c4:8f:eb:06:32:14:08:14:6b:35:a4:70:
                    9b:f3:cb:d4:8f:dd:ce:b5:5e:99:5d:a3:c8:ef:90:
                    6b:6a:ef:dc:74:cf:5a:ba:79:12:0e:7b:12:77:d3:
                    7f:2d:d3:34:00:6e:37:99:d8:93:a4:be:8c:09:2d:
                    85:10:3a:75:c4:df:30:a4:15:45:93:1c:11:19:a2:
                    63:4b:1d:ab:63:56:8f:2f:b3:7d:a4:c3:33:c4:b2:
                    ba:4e:71:e7:58:f3:66:98:e5:d0:11:2a:0d:95:2b:
                    9d:f8:41:41:02:b7:21:4e:5a:66:ed:a1:3b:be:6f:
                    7f:79:17:4a:5f:95:97:ec:73:5a:9e:12:56:25:d4:
                    9a:0c:54:1e:94:3b:ee:ef:11:38:51:16:8a:4d:6b:
                    71:0f:8d:98:83:8b:c7:a9:21:3c:b4:dc:e6:bc:59:
                    f1:bb:c8:d6:ab:5a:e8:0a:e6:27:8f:a4:94:08:79:
                    b2:36:6d:56:68:81:fb:ed:6d:be:2b:8d:34:37:bf:
                    1c:0b:d1:3d:65:1d:ad:84:5f:35:6a:c4:f3:dc:24:
                    20:c6:12:9d:7c:f1:0b:7e:28:9c:d0:6a:80:a4:1b:
                    1d:f4:17:28:71:52:32:fd:f8:9c:59:0f:5f:05:2e:
                    d3:21:a4:ec:9f:e5:18:0e:cc:4a:78:39:25:eb:b2:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:75:BC:48:3B:2E:54:33:53:83:45:AD:B8:87:75:28:5F:DB:57
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/JMh1vEg7LlQzU4NFrbiHdShf21c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.237.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:07:b2:66:17:ce:08:e4:e4:0c:f1:02:c4:3a:df:ca:b7:10:
         5c:15:8b:fd:62:fc:93:6d:4f:05:d0:cd:ad:70:94:07:bc:01:
         4c:44:8d:98:c0:07:2a:b3:54:a4:6c:09:9e:d3:ba:94:a2:b0:
         af:b1:fb:25:24:84:26:82:4e:7a:53:9c:dc:dd:87:41:ff:87:
         fa:b0:8f:36:78:91:26:fa:53:42:1e:9f:f3:29:5b:e4:db:fa:
         0d:9c:37:57:01:08:24:f4:9e:ad:98:39:57:83:d5:b4:75:d0:
         7f:ea:69:ff:63:77:93:15:e5:03:c9:37:67:ca:2b:b9:f5:6c:
         98:be:ed:f7:fa:9e:4f:be:89:71:95:93:67:2e:78:da:48:bf:
         d7:96:51:1f:0c:de:3c:bd:ee:12:9c:86:50:47:5f:ac:bb:57:
         30:07:bd:1f:f3:55:87:86:6a:11:2e:3a:1c:5b:83:4f:7a:c1:
         54:82:dd:b8:90:5d:c0:0f:54:54:e0:87:1c:ff:d9:fb:33:43:
         84:d9:48:c5:3f:7f:0c:de:59:31:9e:d8:df:f3:d0:f7:c9:74:
         97:4e:a7:7e:b6:9f:3a:08:6d:46:c5:08:49:84:d2:e8:eb:aa:
         0b:7c:76:61:e7:42:c0:9a:b1:56:06:4f:e0:1b:b9:3d:6a:52:
         54:be:3d:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:40:02 2025 by rpki-client