Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SYU00yh6fAkVwkXVQBKxq4rlc_4.roa
File:                     SYU00yh6fAkVwkXVQBKxq4rlc_4.roa (raw, json)
Hash identifier:          ZWt0zkDMykqF7qHvJMmTj3E1LNEUwM9JgyG5QJPEeRk=
Subject key identifier:   49:85:34:D3:28:7A:7C:09:15:C2:45:D5:40:12:B1:AB:8A:E5:73:FE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       026E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SYU00yh6fAkVwkXVQBKxq4rlc_4.roa
Signing time:             Mon 01 Sep 2025 01:35:19 +0000
ROA not before:           Mon 01 Sep 2025 01:35:19 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:19 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=498534D3287A7C0915C245D54012B1AB8AE573FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:b5:4e:fb:72:d3:5e:d2:a8:08:c4:21:8c:
                    fe:76:4f:ab:68:01:8d:4b:28:4b:e1:26:64:d7:7f:
                    97:ef:c8:fc:e9:9f:07:6f:3a:10:35:21:60:0c:22:
                    ce:0e:bb:14:b8:c9:73:e8:d6:a7:f1:b3:44:a6:7f:
                    a6:b0:da:3f:c8:90:6b:6b:aa:10:00:f5:db:40:60:
                    6e:36:8b:0d:47:84:68:c9:35:f7:49:28:c3:4c:5a:
                    c0:c5:19:3b:5b:e2:bc:e6:93:e6:2a:62:dc:4f:97:
                    33:12:ea:0a:d6:21:da:e9:67:be:30:05:ed:ee:fd:
                    08:84:05:9a:72:ac:6f:ef:ae:e6:20:f8:c0:d6:33:
                    f9:93:b2:7b:c4:4d:64:4f:c3:a7:53:a1:4e:d2:fb:
                    5e:5a:6d:8a:d0:30:b4:a0:60:f4:6b:c7:2e:b8:72:
                    a4:ca:89:32:67:eb:5f:ed:fc:99:4e:4d:5a:98:21:
                    02:2f:9e:87:5b:2a:39:0b:99:35:98:9b:b4:80:7c:
                    66:8a:fb:b9:d3:5a:0a:33:10:38:dd:d8:d1:e1:c3:
                    18:0b:63:34:37:8d:fa:45:24:fb:8b:72:9f:a1:3f:
                    2f:3a:90:92:32:5c:e4:4c:b8:14:4a:38:38:6f:ec:
                    d6:9f:6a:ef:41:85:e7:36:ba:a4:cc:4a:a8:2c:1d:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:34:D3:28:7A:7C:09:15:C2:45:D5:40:12:B1:AB:8A:E5:73:FE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SYU00yh6fAkVwkXVQBKxq4rlc_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:59:fe:e7:27:cf:40:77:74:af:07:3c:86:a0:e7:b1:cf:45:
         de:14:dc:50:13:1d:84:7d:30:d2:35:3f:50:8e:97:d9:77:62:
         b7:5f:85:c5:f3:20:9d:7c:00:dd:0c:ee:3a:93:64:94:bd:f9:
         7e:bf:d4:53:56:dc:f8:54:6d:f7:01:10:f1:22:aa:03:2e:21:
         1f:e7:34:75:b8:fc:f7:3a:8c:71:0a:08:a0:9f:88:79:c6:34:
         68:21:ef:ea:3c:82:f6:28:5e:79:fd:63:3e:bd:42:ea:a1:11:
         2c:4a:a3:39:54:b7:d9:4e:e1:4d:9d:61:4e:e7:af:85:0a:60:
         50:9f:c6:b7:51:24:b2:a7:21:8f:5f:53:2f:22:f4:1b:45:44:
         7d:eb:30:fd:73:58:3e:a5:47:6f:41:29:ba:15:f8:c5:80:c5:
         9d:3a:01:ed:4f:40:48:c5:eb:0d:86:d7:a1:ed:ff:94:ee:b7:
         25:99:21:eb:72:db:1d:aa:b9:e1:6b:0c:0e:6f:56:fd:06:65:
         37:44:9c:6e:5e:26:a2:34:05:33:9a:2d:b6:49:9f:46:1b:c3:
         78:89:84:ec:d3:d9:61:aa:03:f9:74:56:1f:b7:33:4d:a0:b7:
         0c:fb:71:8b:53:25:10:49:2f:57:43:97:13:8b:2c:e6:ce:5a:
         ea:6b:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:10 2025 by rpki-client