Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
File:                     TflUPaOjDeofxXc5WBtf5ttCr4Q.roa (raw, json)
Hash identifier:          5kwjdPjsBUgtVaDLb63t3UBbcKdaaCtKaNry3y9IqRA=
Subject key identifier:   4D:F9:54:3D:A3:A3:0D:EA:1F:C5:77:39:58:1B:5F:E6:DB:42:AF:84
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0273
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
Signing time:             Mon 01 Sep 2025 01:35:22 +0000
ROA not before:           Mon 01 Sep 2025 01:35:22 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:22 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=4DF9543DA3A30DEA1FC57739581B5FE6DB42AF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6d:08:dd:e3:13:18:b6:11:89:15:25:26:bd:
                    e3:20:8d:fe:e5:3b:75:57:92:62:62:dc:33:eb:ab:
                    50:25:42:8c:9e:7a:a4:3a:63:7d:aa:64:59:1f:bb:
                    10:0a:e2:17:c5:b8:28:f5:d2:40:5f:e8:02:4b:0b:
                    cd:db:55:33:a5:ed:af:b7:a4:03:14:4b:fb:2f:ff:
                    eb:db:ad:ac:97:e1:3e:30:2a:30:f0:11:a9:25:b0:
                    e3:f8:8b:30:05:25:8e:bf:b7:cd:8b:96:09:7b:76:
                    a9:ce:93:ac:55:72:05:7d:f2:98:f9:7f:c3:fc:c1:
                    97:9c:ac:84:b1:7f:31:48:a5:60:2f:a8:fc:de:10:
                    00:67:b8:d3:9b:8f:a3:7f:79:1a:4f:0a:bf:7a:4f:
                    10:ea:31:c4:b7:b3:af:28:4b:97:8f:15:1c:23:c1:
                    44:dd:ba:7d:db:01:df:04:1d:12:90:a0:6e:1b:04:
                    92:40:83:7c:d3:6d:22:ca:11:a2:ac:06:f0:62:6c:
                    e2:4d:63:8f:8a:9f:1f:fd:c9:b4:5e:56:4b:e6:73:
                    70:db:c4:d7:5f:5b:f1:0b:99:8c:cb:ce:95:16:ba:
                    b5:48:37:29:f8:62:cc:e7:b1:49:45:e1:f0:f3:1c:
                    8e:89:03:fb:0e:cd:5e:c6:75:af:1f:55:d5:db:dd:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:54:3D:A3:A3:0D:EA:1F:C5:77:39:58:1B:5F:E6:DB:42:AF:84
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/TflUPaOjDeofxXc5WBtf5ttCr4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:86:1d:d6:8d:ac:20:ea:88:db:ec:3d:18:55:52:ab:6e:
         6d:55:fc:9e:13:4d:21:c9:9e:e4:0b:d0:c3:5c:07:98:c1:9a:
         64:76:8b:86:00:ed:3c:57:05:bd:68:04:54:73:be:14:47:a5:
         bb:bb:f0:e4:6b:fa:16:60:af:fe:56:27:b1:e9:f0:19:85:ab:
         4e:c4:ac:d7:32:e8:cd:14:0d:d7:36:b4:82:fc:53:c4:3d:32:
         1c:b1:fb:dc:c1:fc:29:4c:95:27:0f:8d:c0:8e:7e:bd:80:d1:
         77:40:33:52:9e:6b:a5:67:63:cc:dc:8a:67:e8:db:77:73:b5:
         2d:a6:e8:ca:4c:0c:20:92:21:8b:21:93:63:15:5a:0a:4f:65:
         6b:7a:d4:2e:a6:d5:fe:0f:95:e3:9e:02:fb:92:02:e6:bc:18:
         95:b7:aa:cf:ce:db:35:52:6c:79:c7:5c:f9:b0:85:02:3e:54:
         2b:ed:21:5b:29:d7:3c:69:d3:ed:4c:0b:cb:7f:c7:67:15:4e:
         7e:25:ab:7b:5d:31:68:54:3e:f8:2c:af:d1:69:02:e8:df:c4:
         1c:95:e8:08:12:f7:b9:7c:a8:7d:3e:6e:1e:ce:b2:16:8a:34:
         17:f7:15:f1:ae:cb:8c:f7:8b:99:bf:e5:cf:a6:8d:7b:1a:71:
         49:1b:56:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw
MTM1MjJaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRERjk1NDNEQTNBMzBE
RUExRkM1NzczOTU4MUI1RkU2REI0MkFGODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvbQjd4xMYthGJFSUmveMgjf7lO3VXkmJi3DPrq1AlQoyeeqQ6
Y32qZFkfuxAK4hfFuCj10kBf6AJLC83bVTOl7a+3pAMUS/sv/+vbrayX4T4wKjDw
EaklsOP4izAFJY6/t82Llgl7dqnOk6xVcgV98pj5f8P8wZecrISxfzFIpWAvqPze
EABnuNObj6N/eRpPCr96TxDqMcS3s68oS5ePFRwjwUTdun3bAd8EHRKQoG4bBJJA
g3zTbSLKEaKsBvBibOJNY4+Knx/9ybReVkvmc3DbxNdfW/ELmYzLzpUWurVINyn4
YsznsUlF4fDzHI6JA/sOzV7Gda8fVdXb3bJ1AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUTflUPaOjDeofxXc5WBtf5ttCr4QwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9UZmxVUGFPakRlb2Z4WGM1V0J0ZjV0dENyNFEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdTXMA0GCSqGSIb3DQEBCwUAA4IBAQCwwIYd1o2sIOqI2+w9GFVS
q25tVfyeE00hyZ7kC9DDXAeYwZpkdouGAO08VwW9aARUc74UR6W7u/Dka/oWYK/+
Viex6fAZhatOxKzXMujNFA3XNrSC/FPEPTIcsfvcwfwpTJUnD43Ajn69gNF3QDNS
nmulZ2PM3Ipn6Nt3c7UtpujKTAwgkiGLIZNjFVoKT2VretQuptX+D5XjngL7kgLm
vBiVt6rPzts1Umx5x1z5sIUCPlQr7SFbKdc8adPtTAvLf8dnFU5+Jat7XTFoVD74
LK/RaQLo38QclegIEve5fKh9Pm4ezrIWijQX9xXxrsuM94uZv+XPpo17GnFJG1Yo
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:44:54 2025 by rpki-client