Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/yX92oCoZot88NEzEdBk4FHY90UI.roa
File:                     yX92oCoZot88NEzEdBk4FHY90UI.roa (raw, json)
Hash identifier:          0sL5oKg7OohdcVgnwvBZTVy7umywLyA4FyuxbE3T9so=
Subject key identifier:   C9:7F:76:A0:2A:19:A2:DF:3C:34:4C:C4:74:19:38:14:76:3D:D1:42
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       48
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/yX92oCoZot88NEzEdBk4FHY90UI.roa
Signing time:             Wed 01 Oct 2025 01:31:31 +0000
ROA not before:           Wed 01 Oct 2025 01:31:31 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        124.146.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct  1 01:31:31 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C97F76A02A19A2DF3C344CC474193814763DD142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:dc:3f:ae:b2:71:6a:90:35:56:cb:89:f7:
                    81:69:9c:e5:ba:b5:07:37:55:d1:73:4a:56:b5:7d:
                    6a:cf:61:76:5f:62:d4:80:25:d2:8c:57:76:2f:76:
                    ea:19:11:fb:8e:11:39:c5:a9:a3:5a:c4:aa:d4:94:
                    5f:51:bc:f8:09:26:37:ad:46:d9:b4:00:a8:de:54:
                    c7:64:9e:00:18:ae:44:96:0c:fb:e4:ec:35:3f:53:
                    09:34:68:35:8c:c0:5c:c3:59:47:e3:59:fd:35:b5:
                    d2:61:c7:ac:de:03:23:37:f7:54:c7:c7:2b:12:3d:
                    f0:a8:b5:2b:ba:ff:54:42:98:e2:7a:e6:e3:47:f9:
                    32:fa:31:7f:6e:b9:d4:06:27:ff:59:79:32:7f:5c:
                    ab:0c:fd:8d:7b:9c:9e:81:92:f4:33:e1:10:13:74:
                    da:19:05:0c:39:0d:4e:33:e4:3c:35:b6:8b:6d:42:
                    71:be:69:52:eb:cf:10:13:12:78:85:a5:02:4f:db:
                    99:04:4d:9d:f9:46:63:c6:43:e7:3a:1a:08:9b:26:
                    91:19:8c:35:9d:7b:9a:3c:c0:0a:b1:45:bc:50:9b:
                    91:43:1f:ad:60:48:bd:33:c6:53:2b:ff:f1:c5:f0:
                    38:03:8b:f7:92:1e:4a:78:5f:7f:30:10:4b:f4:a3:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:76:A0:2A:19:A2:DF:3C:34:4C:C4:74:19:38:14:76:3D:D1:42
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/yX92oCoZot88NEzEdBk4FHY90UI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:c2:c4:6c:fa:7e:db:a1:05:64:20:bf:6c:0f:e0:c6:5e:
         ab:79:fa:91:f5:c3:3d:8c:94:07:80:b3:93:19:80:79:aa:b2:
         22:6a:c7:c5:52:10:8c:08:1a:90:b1:84:81:75:6d:4e:9e:22:
         62:a9:f6:67:3b:d2:3d:7d:83:bf:d8:b2:56:f4:2e:34:69:4c:
         de:84:8e:9d:85:3f:49:5d:04:19:14:c7:d9:0d:50:22:59:e4:
         e3:49:59:e1:a6:4e:4e:40:91:e2:65:cb:ff:55:e5:60:df:76:
         c6:9d:6c:98:f6:89:06:86:ed:06:6e:b8:0f:77:63:26:38:9d:
         fb:31:da:e0:a9:18:dd:a1:1f:35:18:38:7d:1b:7e:fa:a9:11:
         af:68:8b:9c:10:9b:9e:bb:c6:68:02:8b:28:d2:db:ca:5d:e0:
         67:e0:ae:c5:f7:89:3c:9a:ea:04:1f:fa:75:be:8f:6c:46:af:
         72:fe:53:51:4b:ec:81:19:cb:58:70:d3:ae:26:38:fe:85:31:
         3c:b2:0c:04:65:5a:76:2c:8f:a9:c2:15:9f:34:07:d5:31:89:
         2c:47:42:73:aa:46:a4:a6:f3:ca:ac:c2:db:f5:5c:29:6b:9c:
         c3:b0:05:9d:a0:92:60:42:8f:a5:39:ad:7b:4c:ee:10:1e:67:
         2d:9f:74:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:26 2025 by rpki-client