Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-7wXLQ7t0iQLPrHnfDabnj4CesY.roa
File:                     -7wXLQ7t0iQLPrHnfDabnj4CesY.roa (raw, json)
Hash identifier:          Dq6mdOPPx7ZSFI/UMrv4o7JAg2olVqgCtzlF2+dZbOg=
Subject key identifier:   FB:BC:17:2D:0E:ED:D2:24:0B:3E:B1:E7:7C:36:9B:9E:3E:02:7A:C6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0275
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-7wXLQ7t0iQLPrHnfDabnj4CesY.roa
Signing time:             Mon 01 Sep 2025 01:35:23 +0000
ROA not before:           Mon 01 Sep 2025 01:35:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        210.224.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=FBBC172D0EEDD2240B3EB1E77C369B9E3E027AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:4f:c0:14:95:ba:e6:1c:12:8d:ae:03:55:
                    16:1a:26:b5:a3:6a:41:48:07:16:22:ff:68:8a:8b:
                    3c:57:77:42:80:9b:fa:59:3e:e4:de:9e:96:58:4f:
                    88:16:e4:dd:bc:16:21:d5:35:5d:2b:db:0b:36:62:
                    c8:82:b6:92:ef:15:1a:33:7d:2b:04:69:56:3e:88:
                    49:a7:97:75:81:99:39:12:8d:34:b3:e8:54:b0:a0:
                    d2:dd:a2:9e:6c:08:31:11:e7:80:05:b0:c0:96:39:
                    ab:68:e1:42:b9:54:68:fc:18:0b:38:1a:9c:60:e5:
                    3d:a5:15:3c:b3:2b:00:59:15:20:ef:14:e8:f7:fe:
                    50:0b:da:e7:0e:55:7f:f1:e2:82:f6:4a:e0:9e:90:
                    18:7a:b1:8b:dc:82:9d:be:8d:de:26:50:19:85:f9:
                    f5:52:b3:d4:a7:b7:97:a4:58:f6:64:82:52:42:9c:
                    bd:fd:0c:6c:d7:dc:0b:f1:88:7a:7e:ff:f9:1a:ff:
                    f7:5e:6b:67:8d:7a:f9:a2:37:a3:61:a6:6d:76:ea:
                    ec:35:1d:3f:c9:94:81:63:04:0f:d2:4d:1d:b6:ba:
                    50:19:10:df:20:e3:84:4a:4f:96:d1:25:9b:13:2d:
                    06:e8:c3:78:17:08:9d:f6:dc:03:8f:ad:0c:7a:16:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BC:17:2D:0E:ED:D2:24:0B:3E:B1:E7:7C:36:9B:9E:3E:02:7A:C6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-7wXLQ7t0iQLPrHnfDabnj4CesY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:ed:f9:b2:fb:3a:e5:fb:e7:e0:16:80:71:2e:53:7f:cb:c5:
         dd:e9:d3:4f:16:a2:69:b2:79:88:a8:fa:5f:28:b8:c0:f8:7f:
         70:e1:4e:14:e5:9a:6f:a6:27:67:69:56:11:69:95:5c:d9:6e:
         82:95:23:70:b3:0f:fe:32:cd:da:31:98:ba:00:96:d3:33:f6:
         20:7e:9c:e0:db:98:1c:a0:24:d9:55:be:76:51:60:19:d2:96:
         23:c4:d3:a1:55:2a:0d:40:d7:80:c3:10:70:0d:6b:14:ac:a6:
         61:b0:55:a7:ec:1b:7e:df:c7:9b:4a:c2:4c:da:11:7c:0a:16:
         66:34:34:0a:38:12:5f:aa:cc:0c:fe:19:fd:7a:1b:d3:22:52:
         52:93:59:ef:e3:2e:6c:9a:82:0e:65:19:23:ae:29:ff:f8:95:
         f8:c4:5d:09:d8:8d:0f:d3:c3:f8:9e:4a:65:0f:85:ab:84:c0:
         be:66:53:27:1f:75:d8:3b:51:c9:ca:c2:e4:bb:f1:e2:6b:65:
         d4:ac:92:d1:47:af:9a:f9:8e:ae:61:08:78:58:c8:b1:d3:4a:
         65:77:b5:15:70:1c:52:ac:82:52:23:d7:59:0f:29:91:d3:f2:
         df:b6:42:4d:62:a7:0e:17:ce:f0:df:f9:d6:c8:91:da:44:8f:
         dd:68:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:11 2025 by rpki-client