Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/k2H8sVUoN80b3T3MTqHPyqmBdBQ.roa
File:                     k2H8sVUoN80b3T3MTqHPyqmBdBQ.roa (raw, json)
Hash identifier:          fMveZzRrBIt1WAPChCv67pdFifgxNiHeev5fU9KLUJ4=
Subject key identifier:   93:61:FC:B1:55:28:37:CD:1B:DD:3D:CC:4E:A1:CF:CA:A9:81:74:14
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       52
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/k2H8sVUoN80b3T3MTqHPyqmBdBQ.roa
Signing time:             Wed 01 Oct 2025 01:31:38 +0000
ROA not before:           Wed 01 Oct 2025 01:31:38 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        219.100.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct  1 01:31:38 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9361FCB1552837CD1BDD3DCC4EA1CFCAA9817414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:70:25:01:e8:4b:16:70:2d:05:e9:94:bb:
                    38:f1:b9:e5:a6:3f:ab:fc:dc:eb:de:bd:7a:54:4f:
                    fb:60:aa:a6:a1:f1:47:b4:7f:1a:9b:c3:5a:da:1e:
                    cb:77:09:84:cd:cf:f3:fb:c8:3c:a2:b0:3f:88:06:
                    66:d1:c1:4a:be:6f:a2:5a:c4:48:2c:38:67:a6:90:
                    bf:8e:56:bc:5b:b0:03:60:c5:31:4e:17:c5:5c:f9:
                    34:02:1e:40:74:82:82:c5:d9:e0:0e:cc:f3:3c:cf:
                    f8:99:0b:3f:fe:ba:74:3c:7f:dd:0c:cb:0f:08:7d:
                    32:af:2c:7e:95:93:e5:01:a8:b7:47:3d:7a:c7:af:
                    0b:4c:47:9b:b9:59:29:91:e6:5e:0b:4a:05:84:63:
                    c5:80:f5:76:1a:d0:41:b8:97:65:96:f1:e9:fa:b4:
                    90:dc:82:20:ab:2f:f7:f5:3d:bb:f0:5d:6b:d3:b2:
                    d5:3d:c9:df:71:77:15:02:79:e6:45:5f:89:a2:85:
                    70:30:e4:8e:06:f3:57:db:8a:9a:c0:ea:0d:8a:e6:
                    d6:56:b5:49:d4:92:cf:2b:f4:30:99:f8:3d:05:cb:
                    23:11:68:79:ea:73:f8:b7:5f:76:ef:81:8f:d9:77:
                    15:07:09:af:ce:b2:27:6d:53:53:df:9e:bc:5e:10:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:FC:B1:55:28:37:CD:1B:DD:3D:CC:4E:A1:CF:CA:A9:81:74:14
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/k2H8sVUoN80b3T3MTqHPyqmBdBQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:d7:0f:8f:c9:dd:ac:dc:c9:7c:36:59:e2:41:e8:2f:3a:
         21:3d:ee:37:8c:72:27:84:37:02:8f:bd:c7:f5:9c:db:96:a7:
         17:85:ce:12:16:79:da:a1:c7:cc:ec:a9:3d:89:29:63:2a:6e:
         cc:5e:33:a2:d0:5c:19:6d:07:bc:e6:95:ea:ef:d5:06:02:fa:
         14:a7:d6:30:a3:c4:40:ac:13:48:c8:35:84:ea:52:af:b5:61:
         75:50:fa:dd:19:94:ac:a0:69:88:00:c5:64:b1:7d:f1:63:db:
         80:5f:1b:83:43:e5:e8:e4:0c:26:ab:3a:f2:4c:c2:43:ae:04:
         60:14:21:38:db:41:7e:32:99:f8:fd:e7:07:a2:bc:dc:cf:0a:
         08:7d:5a:ee:f0:c4:31:cf:71:d0:23:00:40:8c:4e:ad:64:79:
         e8:c6:ac:8f:a7:60:82:c1:87:5c:ab:d8:a0:1b:cc:27:b7:e5:
         92:cc:91:3d:c2:5f:60:71:b5:e7:69:62:3c:19:5c:e9:0a:e0:
         7e:65:da:54:36:6a:2f:44:9b:21:f6:b0:67:a7:54:f3:29:a7:
         9c:12:7f:d1:79:4a:2d:33:bd:66:2d:f1:1b:b7:12:57:dd:c8:
         5a:55:83:88:31:bd:7f:ec:c7:85:ca:be:7c:8d:ad:48:20:98:
         f6:b9:27:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:25 2025 by rpki-client