Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DP4l_BYqrScbQ_Nu2J5-O35U1XA.roa
File:                     DP4l_BYqrScbQ_Nu2J5-O35U1XA.roa (raw, json)
Hash identifier:          cAsmOIUBvbkSSVeg1sTntDFE0AjWHkGR6U309X3vnTc=
Subject key identifier:   0C:FE:25:FC:16:2A:AD:27:1B:43:F3:6E:D8:9E:7E:3B:7E:54:D5:70
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0278
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DP4l_BYqrScbQ_Nu2J5-O35U1XA.roa
Signing time:             Mon 01 Sep 2025 01:35:24 +0000
ROA not before:           Mon 01 Sep 2025 01:35:24 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:24 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=0CFE25FC162AAD271B43F36ED89E7E3B7E54D570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:42:60:1c:bd:73:c7:f2:15:11:d1:1f:ec:
                    2c:1d:ac:17:3b:8b:1b:8e:1c:1c:12:91:34:a7:1f:
                    d3:1f:43:04:74:ae:dd:63:7b:02:20:db:68:3e:d9:
                    94:ce:c4:5b:38:9d:b0:5a:80:32:72:9b:12:c3:21:
                    a7:0a:d6:0b:10:83:4a:f5:b3:3f:b0:49:02:c9:07:
                    a4:20:aa:1b:88:86:bd:f4:4c:72:94:fc:a8:60:8a:
                    5a:f3:6f:af:f1:28:7a:50:ab:b4:f8:f6:ab:eb:28:
                    23:67:22:57:2b:9d:18:87:d7:ef:a0:51:c8:bb:fd:
                    10:52:dc:84:28:7c:0e:1f:70:c6:3f:95:ad:97:ad:
                    59:c8:d6:ec:2f:e8:6f:a9:bd:00:1d:80:fc:35:86:
                    b9:7b:2a:99:f9:f6:07:30:3f:f3:75:df:d8:d3:d2:
                    98:cb:6a:27:9c:a8:a8:fc:54:87:06:3c:a7:c1:9e:
                    f5:66:4d:9b:60:9b:bb:5e:12:cc:37:23:df:40:6c:
                    c1:4f:d4:1f:6a:7f:0d:17:71:34:ba:d1:23:27:5b:
                    ed:6a:a8:74:cb:d3:18:56:ef:b7:fe:1e:7a:73:c0:
                    19:6b:56:d6:c2:6f:7b:b9:7a:ed:de:d9:47:35:01:
                    87:fc:3c:92:ab:e6:ab:c8:2c:9d:d6:9d:c3:fe:7d:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:25:FC:16:2A:AD:27:1B:43:F3:6E:D8:9E:7E:3B:7E:54:D5:70
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DP4l_BYqrScbQ_Nu2J5-O35U1XA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:37:de:1c:86:fa:4d:d7:3e:69:0a:c3:84:29:e9:c6:07:d4:
         ac:e1:4d:d4:60:55:b2:8e:28:9e:1b:3a:69:bf:0e:ca:8e:52:
         f1:d8:b5:6d:05:38:76:3b:20:d3:81:6c:84:61:09:25:e8:b8:
         e4:13:c1:58:26:2f:64:04:02:c6:6c:31:98:06:8f:92:a2:cf:
         a7:82:c3:0b:a1:28:14:98:b3:3d:71:f8:68:68:89:16:3e:e1:
         fa:d6:92:70:0e:ae:e8:11:d1:e2:d9:3a:26:f5:4a:b0:c6:99:
         88:9a:b7:40:b4:a8:4f:1d:36:e1:65:d7:d5:97:2a:9d:f8:fe:
         10:74:20:ff:75:dc:e9:94:46:49:0b:dd:d9:d0:48:9d:0a:0d:
         e6:7d:56:6e:ff:da:70:0a:30:b2:e4:a8:21:ae:98:5b:b1:1a:
         9d:be:2a:19:2b:1f:2a:35:32:b3:6a:1e:d1:f3:58:da:c0:c3:
         ea:fd:e7:47:94:6a:7e:5d:99:76:6d:5d:29:5a:92:33:bf:ab:
         24:dc:57:c0:62:74:5f:c1:5f:f1:b5:8b:3d:13:7c:19:15:16:
         e6:a2:ac:0f:0e:1e:c4:ae:68:dd:bb:c9:1a:d5:58:5a:ac:01:
         54:c4:47:d3:ca:1b:c4:87:7d:d9:b5:d8:7f:20:20:3c:5f:71:
         61:3a:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:16 2025 by rpki-client