Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FxbTIhmYGATwdE9HVoGfngSf3K8.roa
File:                     FxbTIhmYGATwdE9HVoGfngSf3K8.roa (raw, json)
Hash identifier:          LgstkZnKl4UnZbTcT0VsxetZCrgufIoWbyMg+U06x/8=
Subject key identifier:   17:16:D3:22:19:98:18:04:F0:74:4F:47:56:81:9F:9E:04:9F:DC:AF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0261
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FxbTIhmYGATwdE9HVoGfngSf3K8.roa
Signing time:             Mon 01 Sep 2025 01:29:12 +0000
ROA not before:           Mon 01 Sep 2025 01:29:12 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        210.188.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:12 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1716D32219981804F0744F4756819F9E049FDCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:9e:81:e2:44:37:62:db:4c:5c:06:6d:ed:
                    e9:1e:1c:f9:ea:b5:bd:25:1e:25:b7:33:14:8f:8c:
                    c2:d7:50:b5:66:c4:ff:9a:0a:95:81:0a:30:de:eb:
                    2f:77:f8:46:34:59:66:32:e6:65:91:13:b9:df:a1:
                    f4:b3:87:2f:2f:b2:b3:07:3f:71:61:b1:b1:d1:5f:
                    6b:91:e5:1a:f6:ed:94:6b:f4:7f:a8:06:6c:80:9d:
                    79:72:fe:1f:e5:98:b6:1e:94:86:ad:37:52:87:e1:
                    83:de:bc:c1:14:77:96:d8:fc:d4:c3:5d:d0:56:c7:
                    05:ba:2f:2d:53:a9:42:31:10:15:2d:57:15:64:a9:
                    0b:3a:f4:b6:56:43:93:a3:02:1d:71:e7:33:7a:94:
                    70:f6:0d:5a:4e:71:43:70:a7:68:d7:83:d5:77:80:
                    f5:ae:0a:cc:ff:d0:22:4f:d1:6b:57:3f:71:b1:39:
                    fd:19:cc:79:cd:8e:e6:ce:a7:a2:a6:3b:02:4a:29:
                    89:cc:c9:86:0b:e8:a4:71:8b:c4:2e:41:46:13:e2:
                    57:95:94:d0:13:17:cd:a5:06:11:ed:78:f8:8d:44:
                    ba:71:de:91:da:ba:43:6a:3a:cc:0d:b5:90:3b:86:
                    d6:ad:a5:24:55:2b:25:72:ca:10:3d:a6:c1:32:8d:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:16:D3:22:19:98:18:04:F0:74:4F:47:56:81:9F:9E:04:9F:DC:AF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/FxbTIhmYGATwdE9HVoGfngSf3K8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:7e:12:b1:80:ba:01:1d:bb:e0:c8:83:82:94:fa:dd:a6:92:
         f2:a1:eb:40:49:69:6d:cd:e6:9d:de:46:42:f0:63:4c:20:a4:
         c9:83:14:84:69:7c:26:cd:5a:7a:ed:fb:2f:05:cb:53:16:ba:
         36:e3:02:fc:e7:0b:60:ad:3a:e7:ed:a6:d9:4f:dd:f5:b9:19:
         53:48:f4:19:ba:39:fc:c6:d5:6c:72:35:b4:7a:3d:67:6d:38:
         96:f1:e9:38:46:ea:13:d0:a9:71:ef:d8:2a:7a:20:e3:53:5e:
         c4:22:27:b3:d8:40:88:11:0f:d6:40:15:14:85:25:d6:dc:99:
         ee:a5:fc:4e:dd:53:9b:b3:45:bf:d8:1c:3b:ae:a8:34:50:11:
         13:45:e6:4d:5f:b3:b9:a2:e6:0a:ea:d6:34:9e:eb:14:51:90:
         d5:7b:f0:f6:66:2d:88:37:39:2c:16:85:a3:c0:bf:ca:1c:a8:
         57:7f:9d:39:38:a3:d1:aa:27:a5:18:14:b6:9a:e3:ee:ef:90:
         bb:c8:e5:76:13:eb:50:01:6b:74:6a:c1:97:46:77:80:a5:32:
         5d:79:2a:64:2e:65:d2:46:58:7a:7c:98:e6:48:4e:7e:3b:b8:
         00:f7:cd:75:44:f5:57:2e:3e:3c:19:b0:e7:7b:49:f0:2f:a0:
         91:57:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:14 2025 by rpki-client