Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2qZVTNM9nLv4_lyWHPXhUW5G2xI.roa
File:                     2qZVTNM9nLv4_lyWHPXhUW5G2xI.roa (raw, json)
Hash identifier:          p0nM2hPTAXsu6/z6PxICN8E/PFKUc+lIXnglXEeJXsA=
Subject key identifier:   DA:A6:55:4C:D3:3D:9C:BB:F8:FE:5C:96:1C:F5:E1:51:6E:46:DB:12
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       025A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2qZVTNM9nLv4_lyWHPXhUW5G2xI.roa
Signing time:             Mon 01 Sep 2025 01:29:08 +0000
ROA not before:           Mon 01 Sep 2025 01:29:08 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:08 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=DAA6554CD33D9CBBF8FE5C961CF5E1516E46DB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:c1:a6:3b:ae:02:60:d2:3c:88:f4:d6:21:
                    ae:c9:68:6e:69:24:98:47:72:73:74:e5:de:c4:4d:
                    4b:00:1e:d9:1a:eb:71:42:ce:02:e4:03:7a:f5:ed:
                    f7:2d:e9:b3:53:a3:39:cb:84:3b:0b:a5:15:b8:7f:
                    2d:27:74:82:fb:67:08:e5:84:08:57:47:15:d9:a3:
                    e8:da:a5:d4:83:ac:ab:e0:85:0f:e4:ac:c8:fe:a7:
                    84:47:a5:9c:93:d0:22:a8:77:b0:9c:80:2a:d2:fc:
                    6d:ce:3c:f4:2a:46:e3:10:e8:62:b2:c0:b0:10:a9:
                    85:82:8b:72:80:81:99:c4:8d:4f:49:82:19:b2:59:
                    b1:da:40:13:87:ae:f6:81:ad:fc:42:a2:6b:97:aa:
                    03:62:50:1c:a6:36:88:13:6c:e5:b5:12:76:5a:4f:
                    de:74:29:45:e2:da:f4:8e:85:02:f4:1b:49:8c:ac:
                    5b:49:a7:42:7a:4b:19:bf:6b:78:ee:6e:f3:78:e5:
                    93:c3:2e:12:42:00:15:c5:c8:f6:b3:5a:af:cb:13:
                    11:2a:fb:6b:de:8a:70:a0:16:8d:d3:4e:4c:14:8c:
                    d9:80:65:b9:77:cb:0f:60:5e:69:d2:23:8e:4d:31:
                    40:04:73:0c:d7:9f:55:81:0f:0c:22:48:65:2b:d5:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A6:55:4C:D3:3D:9C:BB:F8:FE:5C:96:1C:F5:E1:51:6E:46:DB:12
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2qZVTNM9nLv4_lyWHPXhUW5G2xI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:19:38:00:24:12:13:c7:77:ed:c5:88:4c:a3:92:56:18:
         87:3e:88:a2:d4:8e:de:a0:c4:6f:51:3b:6e:52:43:88:4a:14:
         e9:b7:64:5a:6b:9b:bc:33:f2:28:bc:1d:85:85:14:09:a9:77:
         71:61:96:b6:74:f7:5f:13:85:7f:fd:3b:7d:c2:5c:04:e6:59:
         08:74:06:8a:1e:77:59:3c:64:7f:37:b0:1e:2c:19:16:1c:13:
         20:82:23:d9:1a:99:ef:ce:85:a6:99:3c:e1:34:63:6e:2b:91:
         a4:a8:e0:ae:68:0e:86:e7:ca:04:99:98:23:87:b5:6c:ce:4e:
         95:1a:e4:6e:3a:e9:fc:f5:14:f2:ae:44:29:75:c9:5e:ad:9a:
         3f:12:29:0e:42:a5:5d:f6:3c:a4:82:b8:0b:a5:79:d0:eb:c7:
         ae:3b:e3:73:8d:67:1f:00:b4:a7:3f:c9:65:b7:04:13:59:34:
         60:0a:4a:7c:49:05:07:ec:d7:d8:81:44:94:76:54:bc:a5:a3:
         01:44:ff:3b:28:a1:66:6d:25:14:a4:6b:5d:e5:40:99:1a:3d:
         61:40:ed:fa:f1:ff:54:31:5a:63:ee:4e:73:bd:29:52:89:20:
         b2:b2:50:c0:af:cc:6f:4e:47:0f:c1:65:b1:91:80:2f:f4:a4:
         20:86:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:44:59 2025 by rpki-client