Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LN_a8Lo-8AE5hKJVN-JHCRzTllw.roa
File:                     LN_a8Lo-8AE5hKJVN-JHCRzTllw.roa (raw, json)
Hash identifier:          kko3Rv7tBs9EuythB5lzrEyVZYZIta61jIEnwskQ6gk=
Subject key identifier:   2C:DF:DA:F0:BA:3E:F0:01:39:84:A2:55:37:E2:47:09:1C:D3:96:5C
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0268
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LN_a8Lo-8AE5hKJVN-JHCRzTllw.roa
Signing time:             Mon 01 Sep 2025 01:35:16 +0000
ROA not before:           Mon 01 Sep 2025 01:35:16 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:16 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=2CDFDAF0BA3EF0013984A25537E247091CD3965C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:ff:5e:98:f5:ed:74:3d:9e:e0:e1:7d:60:
                    aa:62:ea:27:06:07:50:db:5c:26:e7:73:7a:87:af:
                    13:50:52:19:4a:3b:f3:42:41:ee:7a:71:8c:11:87:
                    d3:b4:32:3a:ab:6b:ae:74:ca:ef:f4:d7:f6:18:a2:
                    19:8d:9c:af:04:56:dc:24:4f:9c:36:06:af:49:b4:
                    cb:4e:30:f6:92:f9:2d:fd:50:6d:0b:fd:62:0f:a9:
                    38:1e:58:15:71:64:36:d3:0e:1c:05:bd:c6:de:c8:
                    a8:06:e0:10:de:37:8b:1a:a2:00:d4:b2:dc:54:db:
                    54:17:b1:18:44:fe:7d:f0:20:ed:94:c8:37:c4:b1:
                    95:c0:e3:2a:31:a9:f7:dc:1c:a3:b1:92:50:0f:9f:
                    ab:56:1d:5f:cd:66:75:12:7f:07:26:77:24:c9:4a:
                    2f:f4:03:18:6a:b1:80:d7:f5:53:1e:c2:9e:a5:5f:
                    d4:e7:24:0c:65:a5:d0:6c:0e:35:8c:02:48:ca:ca:
                    84:89:f6:76:38:db:af:b7:4f:ec:38:aa:d5:21:32:
                    a2:7e:a9:28:2c:38:1e:c6:9e:0e:e0:85:07:26:d4:
                    58:19:2e:fd:83:d8:34:14:56:83:25:25:c1:f6:e2:
                    15:83:e8:18:9f:bc:e3:29:13:f4:b0:75:ed:4b:0b:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DF:DA:F0:BA:3E:F0:01:39:84:A2:55:37:E2:47:09:1C:D3:96:5C
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LN_a8Lo-8AE5hKJVN-JHCRzTllw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:01:4c:05:ce:33:7c:78:ab:29:e9:59:e4:6a:0c:b8:73:
         e4:c5:f7:dd:19:23:8b:11:6d:fa:ea:e3:fd:a2:13:34:bc:33:
         66:65:c2:a7:03:a2:5b:a8:a7:40:22:fd:f2:19:13:55:b9:f6:
         8d:02:c8:57:11:84:3a:e8:99:93:d3:ae:2d:a6:4f:68:18:e1:
         17:fb:f5:d0:4a:68:cf:a2:d7:ce:55:95:67:73:fe:b0:b9:33:
         ec:b2:f7:19:0e:dd:52:c8:5f:49:b6:08:5c:0d:4c:91:04:af:
         00:91:2f:4f:19:88:23:85:2e:f1:b0:9b:be:3f:cb:05:86:7f:
         42:07:95:c0:0f:76:fc:e5:d8:31:6f:5d:15:b9:1f:5f:40:71:
         72:1d:46:93:c1:f1:67:6e:6d:12:9c:37:24:d9:9f:4e:e8:6e:
         48:86:5b:62:9a:96:46:7a:c6:16:61:96:7b:73:5e:06:5f:e1:
         d0:94:e5:5c:f6:48:2b:af:c7:17:3e:67:15:6d:bc:c7:b6:60:
         06:17:34:1d:bd:e7:12:7c:78:e1:c6:4a:1d:37:f7:ea:68:dd:
         a8:81:8f:1f:e4:1d:4f:19:52:a3:94:ea:55:65:c2:4b:12:db:
         e3:b7:68:28:0f:e3:9d:21:0e:99:07:81:26:6d:cd:da:4c:8e:
         ea:34:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:15 2025 by rpki-client