Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
File:                     tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa (raw, json)
Hash identifier:          GhAaPEG/2cFDEhuE3hcsyBAwA7J82m48rmpOcH2NMJA=
Subject key identifier:   B6:64:57:0C:13:4B:09:2B:2B:74:93:4B:59:D0:25:18:B4:E9:42:92
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       82
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
Signing time:             Mon 01 Sep 2025 01:30:30 +0000
ROA not before:           Mon 01 Sep 2025 01:30:30 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:30:30 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=B664570C134B092B2B74934B59D02518B4E94292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:75:85:24:be:43:27:40:34:83:74:c7:f6:
                    9f:cd:46:3d:84:2d:fc:63:82:a5:e0:fa:b9:0c:77:
                    78:5d:56:68:2e:04:5a:6e:84:6b:c3:ed:7e:f0:6a:
                    56:d3:a1:fe:67:91:23:3a:c8:cb:52:1d:23:16:f0:
                    ae:2c:20:98:c2:64:b6:a4:ab:47:b4:52:c9:a7:11:
                    cf:4e:62:36:80:90:16:46:a3:4e:ad:bf:fc:6a:71:
                    6f:c4:97:3b:51:c6:47:5d:93:dd:77:7d:e3:a7:81:
                    c3:b8:b2:ec:db:a6:7e:ea:7e:f9:38:be:d5:63:bd:
                    aa:d9:8e:c0:28:96:5f:b6:fe:9d:e8:c5:7d:74:4b:
                    af:c8:9e:bb:4c:50:cc:c3:9a:37:d6:56:5d:b8:7a:
                    b9:45:65:3d:a9:10:a6:0c:39:36:02:74:59:41:41:
                    bc:d5:1d:60:e1:be:b8:a5:28:7a:ea:96:cc:68:c7:
                    d1:e7:7c:e7:38:0d:89:cd:ed:9d:13:f9:e3:0b:67:
                    f6:e0:34:18:49:ea:0e:22:c4:e8:95:82:64:cf:73:
                    9e:8c:52:b3:ab:fc:33:35:5e:83:a6:1f:b9:50:82:
                    30:47:42:d4:ab:81:f3:ed:ed:56:22:92:e6:46:2a:
                    68:fc:2e:39:56:c1:55:9b:44:52:55:7a:b1:e9:5c:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:64:57:0C:13:4B:09:2B:2B:74:93:4B:59:D0:25:18:B4:E9:42:92
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tmRXDBNLCSsrdJNLWdAlGLTpQpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:4b:f9:b0:ac:12:e9:ab:bc:84:27:ab:7c:a0:af:d4:c7:
         e2:b6:5c:ec:64:c4:c9:9c:90:74:0a:d7:4e:fc:80:16:d5:fd:
         8a:43:87:4a:53:da:23:67:9c:3a:55:0f:39:03:a7:4c:62:74:
         e5:e7:68:e3:6a:e2:ab:c0:25:83:93:bf:0b:7c:fc:7d:a7:e3:
         40:41:86:09:6c:a6:bc:98:ce:e3:1f:19:93:71:ae:1b:59:86:
         c3:4b:94:9f:ef:e7:d3:e2:5c:3e:66:03:ff:41:ee:7f:e4:d7:
         11:ea:08:9f:b3:82:ed:24:7a:6d:58:18:56:1a:0b:28:33:42:
         a4:85:05:8d:3a:59:e0:d5:b0:9c:79:86:2f:3c:05:d2:6e:98:
         80:ed:f0:08:2c:10:3a:8f:86:e9:64:3d:0c:10:09:19:b0:a0:
         71:f7:be:72:b3:90:44:bc:5a:ad:d8:64:94:54:6a:e1:fe:11:
         16:88:5a:a2:4f:9d:1a:a5:6d:c6:58:78:83:f4:24:37:d1:2e:
         bf:0b:39:f0:ec:61:c0:61:ac:b5:86:f8:5e:99:f5:22:aa:a8:
         ec:cb:5e:c2:32:b7:91:6e:dc:7e:70:ea:f0:15:6a:ec:03:03:
         17:13:eb:94:71:c2:56:7b:4e:49:2d:fc:96:98:c4:c6:18:5e:
         4f:aa:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:17 2025 by rpki-client