Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa
File:                     bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa (raw, json)
Hash identifier:          zROVlTzYIV5/EhGrHWV74jzTaz1X6aH1nTdCp0EEwxA=
Subject key identifier:   6E:69:6F:35:86:7E:EA:57:B4:CE:A4:71:C6:7E:9C:E0:A5:6F:C5:C0
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       39
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa
Signing time:             Wed 01 Oct 2025 01:31:58 +0000
ROA not before:           Wed 01 Oct 2025 01:31:58 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18278
IP address blocks:        202.231.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct  1 01:31:58 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=6E696F35867EEA57B4CEA471C67E9CE0A56FC5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:b0:50:6f:96:82:8a:a1:f1:c5:cc:69:0f:
                    f2:5b:bf:72:5b:fb:a3:ef:b2:a1:b6:03:a4:0e:15:
                    b4:87:59:db:a4:fd:1c:b6:b8:24:c6:f8:72:44:a8:
                    b4:37:01:e5:dd:52:1b:8c:48:4d:bb:6c:2b:95:9e:
                    a5:7c:0f:b6:1b:97:13:cc:bc:fe:53:d9:00:43:e6:
                    f8:38:1a:f6:c8:fc:54:47:0e:41:65:3e:07:c3:e7:
                    a6:c8:a3:66:41:ea:05:c6:22:f4:ee:d1:c0:ab:95:
                    63:47:b7:6f:f4:73:d2:18:8d:03:78:4e:4d:70:fb:
                    0f:47:2b:17:7b:0f:8b:82:40:6d:85:da:28:03:7a:
                    fa:e6:63:bf:0f:dd:f0:72:2f:a7:9a:98:d6:47:12:
                    af:d3:c1:11:32:98:3c:dc:36:f6:00:e0:13:2e:b0:
                    e5:62:cb:cb:d8:f0:b8:d7:f9:e5:8f:f6:05:86:58:
                    a9:b2:9d:fb:33:bb:63:21:54:27:2f:fb:b4:f0:9b:
                    8f:4d:a2:27:86:d2:bd:66:1c:80:9a:27:6b:ed:31:
                    c1:64:86:20:04:19:e5:69:fc:92:86:80:1f:37:ca:
                    d9:89:6d:a0:5c:d2:e8:24:87:ac:25:00:72:c8:82:
                    e5:21:71:7a:80:ee:6a:cc:06:5b:7d:22:6b:43:6e:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:69:6F:35:86:7E:EA:57:B4:CE:A4:71:C6:7E:9C:E0:A5:6F:C5:C0
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:43:34:bf:23:32:b4:a9:3c:4c:79:7a:62:07:1b:45:b2:
         cc:cc:b3:e5:da:65:64:c3:08:a5:d2:12:75:26:89:58:f1:b6:
         9e:61:58:3a:bd:21:d3:9a:57:56:64:27:da:f2:21:3f:22:14:
         18:80:76:a5:9b:83:e6:56:37:a1:6e:ce:0c:e5:91:4d:16:57:
         8a:00:38:60:bd:66:ed:f9:a6:36:4e:88:43:2c:e9:96:26:cf:
         72:f1:74:a1:dd:8f:f6:3c:a2:94:a0:46:7a:e5:08:06:e6:6f:
         9c:db:fa:50:e4:2d:5d:23:8d:fd:0c:92:81:05:98:a3:55:63:
         0f:e0:c6:a3:15:75:d7:44:13:22:84:19:8f:a1:bb:dc:c5:17:
         ef:3e:8a:f0:3f:35:1b:06:df:f0:5d:ce:80:94:3a:ee:60:76:
         bf:70:f1:c1:71:df:b7:83:e9:ee:82:a1:7e:35:b6:55:fa:99:
         20:3b:1a:9c:a4:9f:cf:31:de:b2:91:55:95:42:db:23:66:72:
         6a:7f:ea:bb:79:fb:01:0e:c8:a7:85:f2:8a:84:16:5b:5f:be:
         8e:81:ec:d8:5c:0e:7c:e8:47:1f:a3:8d:39:f8:7a:99:07:1d:
         98:b2:2f:db:39:87:60:6b:ca:d9:84:5c:77:3b:bb:c1:c6:13:
         45:16:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:16 2025 by rpki-client