Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/64l7yVAgELT7nNsl4XxSDFnE9q4.roa
File:                     64l7yVAgELT7nNsl4XxSDFnE9q4.roa (raw, json)
Hash identifier:          lkMWbUMQ6DHnmNzWaW9vtE4tJsHt8gYPghkVAWOSBcw=
Subject key identifier:   EB:89:7B:C9:50:20:10:B4:FB:9C:DB:25:E1:7C:52:0C:59:C4:F6:AE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       025F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/64l7yVAgELT7nNsl4XxSDFnE9q4.roa
Signing time:             Mon 01 Sep 2025 01:29:11 +0000
ROA not before:           Mon 01 Sep 2025 01:29:11 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:11 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=EB897BC9502010B4FB9CDB25E17C520C59C4F6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:c9:ff:28:70:ef:dd:36:04:05:43:53:28:
                    df:17:1a:35:81:47:34:eb:b4:e7:5c:72:7b:85:bb:
                    82:32:4d:dc:00:54:f0:d3:cd:3d:c1:1e:c0:9d:2a:
                    d6:d6:3b:31:7e:24:03:f2:5e:32:67:d2:f1:47:3f:
                    0f:f2:02:67:b8:15:e4:9c:d8:55:e8:82:1b:58:f8:
                    8d:1d:4e:ac:2d:38:59:db:d7:b1:cc:0c:a3:c4:ca:
                    12:15:39:0a:32:eb:bf:fd:0c:b3:06:7f:28:b7:21:
                    ed:0e:b4:fa:08:51:9a:d8:a2:44:4d:4a:77:30:0c:
                    15:6a:d1:7d:e3:44:2a:bb:37:e9:97:75:ac:05:37:
                    39:68:d6:bb:88:68:9f:13:ed:d9:0b:7a:c7:8c:58:
                    82:7b:f0:0f:90:39:c6:36:5c:69:b7:01:4b:8d:d3:
                    7d:67:aa:0a:04:4f:b6:24:49:58:ae:ac:9a:ad:9c:
                    4d:a1:cb:3e:6f:14:78:24:a9:b6:dc:d7:ef:81:be:
                    66:e4:3f:60:e6:26:09:b7:77:7d:2e:b7:3b:0e:d5:
                    79:3e:e3:dd:bb:15:f2:22:c4:6f:cc:84:8a:a3:67:
                    48:65:09:4c:e7:dd:25:01:b8:06:74:9f:8f:44:5e:
                    cc:3f:70:3f:f5:ec:2e:32:e8:f4:af:52:9d:32:41:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:7B:C9:50:20:10:B4:FB:9C:DB:25:E1:7C:52:0C:59:C4:F6:AE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/64l7yVAgELT7nNsl4XxSDFnE9q4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:83:19:87:ed:12:ec:ba:fc:50:f9:31:59:6e:d9:fe:7e:
         7f:d0:0b:36:db:89:ed:57:21:f6:b6:45:c4:b7:d6:62:d4:cf:
         54:28:0b:af:60:53:14:75:7a:7a:0b:74:13:aa:c2:09:70:c6:
         9a:35:3c:b9:07:c3:f9:58:c6:b3:92:60:89:23:77:55:a1:fa:
         8c:b1:04:ad:eb:41:80:85:84:37:3a:f3:fb:14:6f:d8:ee:e7:
         03:3e:fd:2d:8a:c9:62:bb:05:2e:a5:7e:7e:3b:b3:02:8a:22:
         1b:e2:a3:b3:b4:e0:63:cd:65:8f:fd:7d:46:c4:93:29:21:43:
         68:e0:f7:01:fc:57:d5:a8:68:e1:f3:24:9d:96:33:e2:3c:b1:
         32:08:8a:43:b2:98:46:e4:df:3f:df:d5:94:bd:94:e7:c5:31:
         14:45:0c:a5:1d:03:96:16:19:83:6a:2e:6f:24:47:a8:ba:7c:
         c7:4a:97:de:a2:5c:ee:50:b4:a4:67:a3:01:99:66:22:b6:a1:
         3e:82:94:0c:00:8c:e7:12:16:b0:d7:cb:48:2c:d8:71:2e:24:
         ae:be:9e:a9:59:3a:2e:61:eb:10:90:79:f0:e9:06:c8:23:bd:
         2f:f1:3f:1f:56:da:fd:d0:41:5d:ac:7b:81:7d:78:95:5e:d8:
         b4:5a:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:08 2025 by rpki-client