Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FDM_nhW5pj1kVEIvbkJ0e4rlIcc.roa
File:                     FDM_nhW5pj1kVEIvbkJ0e4rlIcc.roa (raw, json)
Hash identifier:          2x0VzzQCrZDBdSE0h1vycK1wYEjniWxfWWvODLN1p9Y=
Subject key identifier:   14:33:3F:9E:15:B9:A6:3D:64:54:42:2F:6E:42:74:7B:8A:E5:21:C7
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       027A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FDM_nhW5pj1kVEIvbkJ0e4rlIcc.roa
Signing time:             Mon 01 Sep 2025 01:35:26 +0000
ROA not before:           Mon 01 Sep 2025 01:35:26 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        110.74.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:26 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=14333F9E15B9A63D6454422F6E42747B8AE521C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:d9:f3:37:f8:14:ea:c0:ca:9c:0b:9c:1d:
                    66:4b:17:37:d6:1a:b2:47:c8:14:ff:e6:04:dc:18:
                    95:1c:a5:64:fd:e0:d7:1a:8b:35:9c:8c:fa:b5:95:
                    c5:93:8d:50:2a:bd:c3:e7:5b:65:35:c4:65:78:df:
                    c4:e1:fc:27:33:30:bf:89:ee:ce:71:2d:77:34:cc:
                    e4:c5:b4:4f:63:09:6b:23:37:91:c7:7d:09:93:77:
                    9c:79:67:bd:6d:c3:51:c6:5e:4c:bd:d4:cc:4d:cb:
                    da:c5:31:34:d8:01:61:5e:71:02:61:b4:cf:c1:3d:
                    39:ee:01:9a:c8:36:30:95:ac:eb:68:eb:08:db:27:
                    af:a5:0d:84:fe:88:2d:c3:04:d1:94:61:53:b5:1f:
                    58:42:0e:5b:9c:8f:f6:a6:1f:52:5b:a2:a6:ba:64:
                    20:f2:4a:df:2f:21:13:2f:f2:48:8d:55:fc:e3:e8:
                    eb:ab:8e:7b:28:8c:03:d9:b9:93:f2:c3:e6:95:ef:
                    d3:1f:bf:82:e5:ac:ec:8b:cf:34:34:c3:05:5c:77:
                    28:ed:88:6f:1b:b6:18:a4:b4:db:6d:c9:0a:b4:92:
                    68:57:1a:01:15:c5:35:98:c1:58:d7:1c:6e:92:84:
                    19:e9:9f:a2:6e:b4:45:d0:50:58:cb:61:be:96:5d:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:33:3F:9E:15:B9:A6:3D:64:54:42:2F:6E:42:74:7B:8A:E5:21:C7
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FDM_nhW5pj1kVEIvbkJ0e4rlIcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:09:f5:c3:41:d3:32:0a:06:9a:ac:2a:48:96:84:51:c2:fc:
         a7:9a:9d:a2:9b:63:84:21:1f:cb:e3:93:eb:07:48:1b:4a:9c:
         56:e0:6b:9b:a6:fc:75:91:32:9f:2d:2c:c8:66:91:2b:44:0e:
         f8:e6:7e:7d:2d:1d:57:ae:cd:f6:54:3d:aa:5b:b8:56:4f:a1:
         b6:70:a1:bb:0e:54:7f:3a:8d:20:1b:a1:45:86:98:07:46:e8:
         c7:5a:67:17:28:53:13:86:55:86:48:39:f0:06:6f:e4:13:0d:
         72:fd:04:8d:85:a5:91:d2:6d:1b:c0:81:81:26:4b:95:3d:7d:
         b5:24:17:cc:32:9f:75:61:42:10:b3:a8:af:27:22:44:2c:aa:
         40:e3:48:93:f0:5f:53:c9:c7:62:c5:52:5a:bd:4d:38:1a:83:
         f6:17:4a:40:62:d1:f0:f7:53:c1:a6:07:66:3c:e5:44:b3:dd:
         cf:d1:bb:a6:5b:4b:9a:a3:cf:4c:a9:66:de:5b:49:e9:0e:4a:
         fd:04:7b:01:44:54:2c:86:33:c6:97:85:81:a6:a0:b6:76:9d:
         93:d2:92:3d:7a:29:34:d3:5d:c4:51:b8:37:3a:0a:50:e9:71:
         0b:94:8e:97:fe:4b:6d:7f:b1:2f:ee:5a:fc:5f:ed:95:3c:4f:
         e0:78:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:08 2025 by rpki-client