Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JvZl_EGbL-zEVZ89ntS6lgQVSEY.roa
File:                     JvZl_EGbL-zEVZ89ntS6lgQVSEY.roa (raw, json)
Hash identifier:          7nhwNenmoEnczQooUQT/HRN4r+EBVvvKlBEHdGh2bOo=
Subject key identifier:   26:F6:65:FC:41:9B:2F:EC:C4:55:9F:3D:9E:D4:BA:96:04:15:48:46
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0274
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JvZl_EGbL-zEVZ89ntS6lgQVSEY.roa
Signing time:             Mon 01 Sep 2025 01:35:22 +0000
ROA not before:           Mon 01 Sep 2025 01:35:22 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:22 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=26F665FC419B2FECC4559F3D9ED4BA9604154846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:1f:63:e9:27:02:09:eb:b6:cc:9c:b7:82:
                    05:31:6d:ca:dc:32:5a:dc:6a:6b:d7:6a:f4:4e:a2:
                    bf:34:4d:fd:fd:89:df:2f:be:d8:01:77:74:e2:f1:
                    a0:97:a5:2d:7d:de:4d:d6:29:3d:27:7b:ba:dd:8e:
                    60:6e:52:ec:7b:28:44:07:e1:a9:89:e5:5d:09:57:
                    21:71:11:d2:27:06:85:21:0a:30:a3:da:fb:b1:e5:
                    55:dd:bb:8c:a9:ab:54:94:52:d2:08:b0:e7:c1:e5:
                    77:e7:7a:89:25:c0:d6:64:b8:a0:4a:db:74:9a:ff:
                    a2:fc:e8:0b:2e:c3:89:09:83:a7:b2:e6:4d:9a:5e:
                    14:70:7f:6f:b9:74:65:6e:53:67:66:8c:51:c3:09:
                    f0:df:22:13:88:49:66:55:9b:32:81:48:2e:11:23:
                    c8:bc:0b:e6:02:b0:95:e3:c2:5b:d2:18:fa:4d:1e:
                    37:30:63:9e:01:0c:2f:51:2a:29:53:19:71:ad:34:
                    83:93:7d:d7:7b:bf:0a:4d:16:2e:c1:4d:b1:a5:55:
                    57:87:dc:d0:89:06:74:de:2a:c6:e4:17:a7:39:05:
                    c3:70:62:70:4f:93:37:c1:e2:ed:a3:8b:dd:92:08:
                    05:ca:98:c6:e0:7d:be:86:1c:e2:83:b6:63:c9:39:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F6:65:FC:41:9B:2F:EC:C4:55:9F:3D:9E:D4:BA:96:04:15:48:46
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/JvZl_EGbL-zEVZ89ntS6lgQVSEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:8f:a1:d9:f3:c1:dc:dd:fc:38:db:80:35:7c:ff:20:07:84:
         39:ac:04:62:d1:9a:cd:10:e5:53:23:e6:90:ae:49:9c:ba:db:
         93:ae:26:b8:d4:bd:79:ca:05:cf:91:74:ad:c5:96:7f:17:25:
         a4:51:3a:6f:74:a5:04:a8:db:05:a5:22:e6:46:ea:53:0b:d1:
         ad:cb:a9:90:a3:ef:2b:fa:3c:40:3d:92:20:b1:f4:51:48:6e:
         48:1f:d7:aa:c6:f3:f3:17:fa:c2:53:c7:74:ee:28:3e:0a:15:
         f3:37:4b:39:7b:11:f5:4d:97:6e:1d:64:5f:e5:d6:c1:1a:49:
         e8:7b:9d:c6:96:1b:07:27:93:64:49:24:62:c2:6e:56:cc:2b:
         f2:72:0c:0d:d2:5e:5c:ee:69:3c:91:f2:c8:a8:13:5d:02:f0:
         b1:5a:e2:3b:f3:71:f0:5e:6d:b6:09:e7:96:96:93:07:70:0e:
         c7:65:0a:0d:1c:dc:8b:07:91:5c:90:fe:72:36:d1:ad:cb:39:
         a4:f9:7c:9e:60:d9:61:a4:10:d0:c4:21:2d:43:b1:bb:ce:64:
         f8:5a:21:0f:ed:df:5d:fd:64:d8:06:1d:ee:9c:68:41:53:15:
         aa:92:20:60:d1:fb:19:e9:a0:ac:ac:f2:88:c9:ee:1e:c4:69:
         d1:82:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:17 2025 by rpki-client