Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/92-De5NUA3zeC4LjKzwDibg75bQ.roa
File:                     92-De5NUA3zeC4LjKzwDibg75bQ.roa (raw, json)
Hash identifier:          Xj4nTU6g9U5YmB4tnJpfbbD/OGxDqU/lVAF+N4vllxE=
Subject key identifier:   F7:6F:83:7B:93:54:03:7C:DE:0B:82:E3:2B:3C:03:89:B8:3B:E5:B4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0262
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/92-De5NUA3zeC4LjKzwDibg75bQ.roa
Signing time:             Mon 01 Sep 2025 01:29:13 +0000
ROA not before:           Mon 01 Sep 2025 01:29:13 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:13 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=F76F837B9354037CDE0B82E32B3C0389B83BE5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:79:1e:58:3f:84:10:94:d5:60:a8:78:ca:
                    0d:f2:54:f2:8e:a0:a6:d3:94:e2:55:20:12:56:1a:
                    21:89:80:a1:a5:95:da:73:65:62:cd:b7:a6:a0:7d:
                    4b:fc:ca:dd:22:38:a3:35:6a:5f:b6:ce:57:ee:f4:
                    a0:46:2e:92:16:af:47:2c:41:45:ed:ab:b7:b9:86:
                    81:32:18:23:9b:7d:d6:d3:40:fe:a5:64:5c:ca:0a:
                    ed:4f:97:59:5f:fd:55:cf:c4:78:a4:99:e5:71:4c:
                    11:67:e8:9d:63:83:6b:ff:cc:44:42:81:1a:53:ac:
                    89:09:50:a9:74:77:71:c0:47:3c:0f:90:5a:48:b1:
                    fd:fd:ae:5c:f0:18:f3:9e:dc:9c:32:f2:20:4b:1c:
                    d7:c4:11:c5:5b:87:9e:2e:48:e9:71:0b:cc:c1:1d:
                    d8:e3:90:e8:dd:5a:23:a4:07:a9:ea:66:84:ed:c1:
                    04:d5:e4:1a:f1:aa:15:d8:c0:72:a0:46:ea:9a:a0:
                    4f:96:2f:7b:60:ae:bd:26:e4:b6:67:f9:61:59:ba:
                    4f:33:7e:c9:15:dc:c4:22:76:2c:b8:b3:19:a2:5c:
                    5a:f5:42:04:cd:66:ca:91:65:b7:50:24:0c:9f:81:
                    19:39:1c:0d:79:d7:19:79:85:6e:ce:9f:f2:85:10:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:83:7B:93:54:03:7C:DE:0B:82:E3:2B:3C:03:89:B8:3B:E5:B4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/92-De5NUA3zeC4LjKzwDibg75bQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:6a:61:73:ae:53:11:79:34:ab:21:1b:92:07:e2:f6:59:c8:
         29:8c:ca:2f:c3:fb:f0:32:7c:68:85:7f:0c:74:29:15:47:a4:
         77:8d:48:50:90:e6:36:8f:87:27:1a:d7:e5:f1:fc:9a:f6:56:
         e6:91:bb:ad:46:a6:61:44:4d:a8:50:b9:7c:5b:1c:0a:8c:ef:
         48:a6:5f:76:85:d9:d9:a3:77:c5:71:3e:97:38:18:d9:0a:61:
         94:83:81:3c:a3:96:72:1f:61:8a:f7:2e:f9:0e:ec:2e:f2:43:
         ad:4b:78:20:5b:f2:9e:de:fc:79:64:1f:ea:17:be:f1:1a:a2:
         4e:79:fc:7f:3f:4f:ff:07:01:39:89:17:51:b4:c5:dd:44:57:
         97:da:65:02:4a:48:9f:16:2c:44:bc:fb:9c:a3:37:1f:14:a6:
         a6:46:4e:84:5e:e8:4a:94:71:25:3f:95:f6:eb:9b:2e:eb:ae:
         5d:95:62:97:45:a9:09:4f:c0:da:92:f0:73:88:c9:4e:67:94:
         23:b6:30:84:a1:25:cc:56:ce:97:6a:08:ca:e5:7e:89:6b:5d:
         8e:df:09:58:b2:cb:21:77:d2:c4:26:74:4a:84:01:be:00:0a:
         d8:bf:60:aa:e1:8d:ae:37:95:eb:20:5c:e6:73:38:7d:83:86:
         11:c0:80:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw
MTI5MTNaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY3NkY4MzdCOTM1NDAz
N0NERTBCODJFMzJCM0MwMzg5QjgzQkU1QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz4nkeWD+EEJTVYKh4yg3yVPKOoKbTlOJVIBJWGiGJgKGlldpz
ZWLNt6agfUv8yt0iOKM1al+2zlfu9KBGLpIWr0csQUXtq7e5hoEyGCObfdbTQP6l
ZFzKCu1Pl1lf/VXPxHikmeVxTBFn6J1jg2v/zERCgRpTrIkJUKl0d3HARzwPkFpI
sf39rlzwGPOe3Jwy8iBLHNfEEcVbh54uSOlxC8zBHdjjkOjdWiOkB6nqZoTtwQTV
5BrxqhXYwHKgRuqaoE+WL3tgrr0m5LZn+WFZuk8zfskV3MQidiy4sxmiXFr1QgTN
ZsqRZbdQJAyfgRk5HA151xl5hW7On/KFEHGjAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU92+De5NUA3zeC4LjKzwDibg75bQwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny85Mi1EZTVOVUEzemVDNExqS3p3RGliZzc1YlEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdROMA0GCSqGSIb3DQEBCwUAA4IBAQDUamFzrlMReTSrIRuSB+L2
WcgpjMovw/vwMnxohX8MdCkVR6R3jUhQkOY2j4cnGtfl8fya9lbmkbutRqZhRE2o
ULl8WxwKjO9Ipl92hdnZo3fFcT6XOBjZCmGUg4E8o5ZyH2GK9y75Duwu8kOtS3gg
W/Ke3vx5ZB/qF77xGqJOefx/P0//BwE5iRdRtMXdRFeX2mUCSkifFixEvPucozcf
FKamRk6EXuhKlHElP5X265su665dlWKXRakJT8DakvBziMlOZ5QjtjCEoSXMVs6X
agjK5X6Ja12O3wlYssshd9LEJnRKhAG+AArYv2Cq4Y2uN5XrIFzmczh9g4YRwIDX
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:44:51 2025 by rpki-client