Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/K-WOuXHN7F9wt38jpGEbBBa5QL8.roa
File:                     K-WOuXHN7F9wt38jpGEbBBa5QL8.roa (raw, json)
Hash identifier:          rEFhN1l8XHtFjFrfYaZEwqLIgpHmz2XcX7fl7EnGKS8=
Subject key identifier:   2B:E5:8E:B9:71:CD:EC:5F:70:B7:7F:23:A4:61:1B:04:16:B9:40:BF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       027C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/K-WOuXHN7F9wt38jpGEbBBa5QL8.roa
Signing time:             Mon 01 Sep 2025 01:35:27 +0000
ROA not before:           Mon 01 Sep 2025 01:35:27 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        112.78.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:27 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=2BE58EB971CDEC5F70B77F23A4611B0416B940BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:56:dd:af:cf:6f:94:84:f5:65:94:ed:69:94:
                    94:a2:d6:8b:c9:e1:2b:64:2e:e3:7e:ae:b5:a2:df:
                    92:a2:fb:26:9b:f2:af:91:52:40:9d:41:58:2f:94:
                    5d:a5:5b:11:f9:78:b0:55:9a:17:7e:02:1f:af:6c:
                    25:18:3c:0a:78:64:b3:4d:ca:b3:f7:71:82:08:cd:
                    20:df:2f:ce:42:c7:ac:f4:14:22:28:1e:46:64:d9:
                    f2:ae:59:8d:f0:36:4d:39:64:b9:80:1d:03:e8:4a:
                    95:a6:b2:7c:4f:f3:fd:d6:1d:16:be:9e:2e:9b:4f:
                    bd:ce:9c:1c:eb:a8:07:1f:88:5f:31:ad:89:16:69:
                    33:f5:c0:59:c3:27:02:56:8a:f2:10:dd:3f:fa:5e:
                    28:af:ca:fb:7b:a3:e8:86:6d:34:8b:64:79:d3:5a:
                    68:b8:37:0c:a1:c2:a7:c9:95:af:6f:f3:bf:50:4d:
                    ce:69:60:5e:06:51:78:cb:39:75:34:fb:a1:77:c0:
                    f2:6a:14:05:cc:10:6a:59:f5:bb:d4:92:8e:04:6f:
                    27:22:9b:9f:25:38:3d:1f:eb:b5:9a:1e:3e:9c:09:
                    6e:33:02:a3:fb:e9:d4:a4:35:25:5e:20:16:55:71:
                    f5:68:7d:f4:1c:8e:87:cb:c7:d7:9d:76:5d:de:e8:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:8E:B9:71:CD:EC:5F:70:B7:7F:23:A4:61:1B:04:16:B9:40:BF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/K-WOuXHN7F9wt38jpGEbBBa5QL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:41:d3:91:f3:80:ba:ec:ed:60:83:6a:13:54:9d:f9:5b:
         1b:de:12:b5:ae:2b:a5:5e:f0:09:98:0c:b2:0d:07:73:3d:cd:
         c6:6b:3e:cc:57:ee:16:4f:55:58:a0:12:cd:fc:66:1a:88:3d:
         98:24:06:75:7e:74:17:c0:80:d7:3f:0a:e4:da:f0:09:bc:63:
         e0:70:50:d1:3e:71:2c:94:6c:2a:10:2b:3a:f9:18:1e:af:e4:
         81:bf:cf:88:e7:ae:85:39:5a:10:1d:85:d2:da:ed:4a:ab:a6:
         02:71:89:38:97:fa:bd:2f:02:a7:0b:14:fb:5d:8f:af:2d:43:
         73:89:69:0a:0f:b9:bd:0c:c5:85:db:f0:85:1e:1c:06:91:c5:
         56:ed:ca:80:a1:11:dd:1c:c5:d6:da:7f:25:e3:cf:bc:40:95:
         82:0f:28:b6:65:20:4a:cd:1b:7f:57:66:53:fa:b1:2f:1f:37:
         33:b4:ff:15:dc:3c:38:87:7c:19:83:13:f3:c6:6d:74:aa:0c:
         95:4d:0d:86:2b:81:a7:fa:b0:c9:ff:93:1f:a2:5e:52:7c:4a:
         90:c6:4d:78:ce:03:de:a0:47:ce:12:00:3d:2f:54:14:38:57:
         56:4e:0e:04:d4:96:64:4f:d3:d7:88:cf:3c:34:ae:70:bd:89:
         42:cc:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:17 2025 by rpki-client