Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/tAUGK1TAon_asx91aF8JeLNO0pE.roa
File:                     tAUGK1TAon_asx91aF8JeLNO0pE.roa (raw, json)
Hash identifier:          clQfjrd9M8AAQfKiNxraWpTFPLXqPpI1Bpa2Q33LUAk=
Subject key identifier:   B4:05:06:2B:54:C0:A2:7F:DA:B3:1F:75:68:5F:09:78:B3:4E:D2:91
Certificate issuer:       /CN=35892143C493B9B2CC1E79133F5231C72E152685
Certificate serial:       4A
Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/tAUGK1TAon_asx91aF8JeLNO0pE.roa
Signing time:             Wed 01 Oct 2025 01:30:35 +0000
ROA not before:           Wed 01 Oct 2025 01:30:35 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     396982
IP address blocks:        202.250.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685
        Validity
            Not Before: Oct  1 01:30:35 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=B405062B54C0A27FDAB31F75685F0978B34ED291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:5e:63:3b:10:b6:7d:7f:a7:fb:eb:7a:48:
                    f2:39:63:84:d8:66:e8:a6:4d:c7:53:85:78:32:8d:
                    11:05:93:52:b1:52:80:28:56:41:1c:08:1c:cb:88:
                    07:6c:3e:d7:b9:19:3b:17:0d:26:0e:6f:fb:c8:1b:
                    40:77:b7:c6:6c:4f:8a:69:94:3e:60:38:0c:75:61:
                    29:5e:de:b7:e9:50:a0:00:f5:62:63:d7:17:06:65:
                    22:e9:0d:1c:83:7c:09:13:2e:77:21:ce:74:df:62:
                    ec:c1:ea:f5:3d:92:fa:95:ad:c7:eb:14:81:a6:4a:
                    16:bc:90:bf:84:d8:28:0e:c9:53:a7:d9:37:25:a9:
                    9e:b5:60:d6:37:c0:7c:6d:09:26:52:f4:c9:42:0f:
                    63:df:fc:55:bf:5c:dc:0c:1c:12:7d:21:ee:b6:92:
                    be:33:62:5d:6c:f5:94:c9:41:06:13:b3:73:94:57:
                    23:2a:6b:6c:b7:16:34:b6:17:a0:e9:c7:44:7d:88:
                    18:9a:17:11:5a:2b:d3:1f:82:d5:d7:12:3f:81:80:
                    2c:0f:6d:f2:b1:b8:50:7b:f4:ef:5a:f3:83:0f:11:
                    f5:ea:49:75:33:f5:39:23:64:d0:66:0f:47:27:d0:
                    78:7f:d1:ad:aa:ae:df:a1:0d:c6:ad:b9:c1:5d:03:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:06:2B:54:C0:A2:7F:DA:B3:1F:75:68:5F:09:78:B3:4E:D2:91
            X509v3 Authority Key Identifier:
                keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/tAUGK1TAon_asx91aF8JeLNO0pE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.250.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:48:a7:22:7d:1c:b1:93:02:92:76:1b:ce:9f:f0:cd:9d:e3:
         c0:07:04:65:08:58:7f:c6:22:92:42:e5:78:15:85:8f:00:10:
         6f:bc:b7:e6:ce:e9:fe:e9:7e:57:9b:f9:0a:bc:1b:b4:aa:b8:
         b0:7c:5f:9f:d1:a9:bf:a3:52:bc:28:bb:43:6e:ee:e4:c9:51:
         dd:db:5a:ed:f8:65:09:6f:c0:73:2b:8f:ea:da:f9:de:4c:71:
         1d:9e:ed:d1:57:86:1d:53:1b:db:8e:ff:2a:93:6f:e2:20:30:
         9e:f1:32:0a:1e:67:ce:ec:11:5b:af:74:4a:5b:e1:9f:2d:a1:
         97:48:de:59:91:89:8e:85:39:de:41:5b:2e:0e:6c:8f:a5:3d:
         1d:e3:4c:e8:6b:31:5c:b1:5c:73:0e:01:9d:bf:82:d1:95:0c:
         99:9a:b6:45:b2:0b:e5:fc:94:ab:f4:84:2a:78:fc:62:ab:94:
         a4:35:1d:18:6d:b6:21:6d:f9:e9:97:9f:06:a3:61:75:1e:81:
         5a:7b:42:b1:25:63:a0:68:6c:38:2e:d6:f8:54:3a:25:8d:43:
         49:6d:49:fa:0c:99:48:b7:e1:77:d4:1d:5d:ea:f9:b8:a8:81:
         4e:63:7b:25:e1:45:ec:d9:a9:41:8a:6f:0c:f5:44:27:37:e8:
         b5:51:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:31 2025 by rpki-client