Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/lIL8e2GiT6EFULhyNV9IIz6Pfk0.roa
File:                     lIL8e2GiT6EFULhyNV9IIz6Pfk0.roa (raw, json)
Hash identifier:          VhJyacVWOeIrbuDLmqFrbrKKIqwNEQtL3xb3cGAznoA=
Subject key identifier:   94:82:FC:7B:61:A2:4F:A1:05:50:B8:72:35:5F:48:23:3E:8F:7E:4D
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       38
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/lIL8e2GiT6EFULhyNV9IIz6Pfk0.roa
Signing time:             Wed 01 Oct 2025 01:31:58 +0000
ROA not before:           Wed 01 Oct 2025 01:31:58 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18278
IP address blocks:        202.151.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct  1 01:31:58 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9482FC7B61A24FA10550B872355F48233E8F7E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:77:9a:1a:74:9c:d6:e3:25:98:15:2d:2b:e6:
                    78:39:c2:f9:5b:b4:31:d9:ba:22:a5:57:46:c3:8e:
                    b6:5b:45:cf:af:9b:7d:d8:96:5b:ba:e2:36:53:40:
                    e3:d8:18:64:53:be:ff:73:3d:d0:62:aa:ca:05:2f:
                    10:3f:10:54:75:75:b5:8b:cf:42:c0:e7:c2:31:8d:
                    5c:1e:a7:3b:8f:18:c1:5e:64:00:0e:10:1a:94:c3:
                    4f:fa:ef:bd:63:84:26:82:dd:b8:39:ec:a8:ce:07:
                    1c:6b:b2:e7:a6:72:3e:ab:75:73:60:93:53:6c:f9:
                    2f:b6:7b:35:95:6c:1d:34:0e:7e:b5:70:1d:58:a8:
                    58:a0:d0:7a:88:34:81:36:1e:29:8b:f9:af:80:10:
                    06:80:48:e4:23:5b:3a:ec:9e:08:35:a8:c4:96:e3:
                    8d:b5:5d:2a:37:ae:b8:17:5b:6a:64:b0:65:36:19:
                    92:c8:18:9d:3b:a5:5a:4f:bd:51:b6:d7:55:31:97:
                    56:82:3b:d0:89:16:a7:b6:82:86:6d:74:2b:ef:af:
                    37:97:97:b7:a6:cf:31:b5:84:d3:0f:48:cf:b9:1b:
                    47:5f:c8:19:59:64:5c:99:87:6f:d1:38:ae:eb:61:
                    8e:4c:bc:23:bf:ee:7c:63:00:ac:0d:11:d1:b0:18:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:82:FC:7B:61:A2:4F:A1:05:50:B8:72:35:5F:48:23:3E:8F:7E:4D
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/lIL8e2GiT6EFULhyNV9IIz6Pfk0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.151.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:c9:1f:44:e7:6a:e3:69:1b:bd:70:96:c1:8b:fd:fb:99:
         6d:61:dd:5a:f3:bd:c8:55:8b:cf:08:a4:56:54:7f:af:f1:81:
         b7:de:7d:3d:ca:86:f8:b7:79:7e:fd:7f:fa:f0:bb:8f:5a:0b:
         6e:8d:99:9e:6e:20:84:ad:7e:24:b6:fb:0a:8b:80:98:87:58:
         5c:c9:1b:a5:59:ee:3f:5d:d8:04:1d:d6:a6:a7:c4:fe:90:3d:
         36:12:cd:1e:14:f7:57:1b:92:66:58:76:5d:00:ce:8d:7e:29:
         d6:55:a3:cf:31:bb:47:b1:4b:24:f1:30:d2:b4:a2:da:8a:98:
         25:5b:03:27:fd:41:47:15:8c:4d:c4:0f:52:2f:9f:94:59:0d:
         49:de:f5:f2:1e:13:e2:9a:60:5f:ab:4f:5b:52:00:60:f3:20:
         02:1a:a8:fb:ed:a1:dd:7c:85:27:0a:25:68:7d:83:73:11:d5:
         b4:19:0c:a0:e3:c9:21:ae:b3:12:f9:4f:99:c7:36:81:28:c8:
         f7:3a:bc:9f:b3:da:07:27:4f:a9:8e:d1:44:d7:d0:03:0d:a7:
         bb:1b:d9:d7:5c:92:28:ab:4b:bd:4b:84:fe:a8:78:00:bb:c7:
         69:ca:12:65:46:53:dd:3b:28:76:c1:1c:ca:7f:c3:74:b0:f6:
         fa:f7:00:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:17 2025 by rpki-client