Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WhjRdqLNw9aP3ecsFvxv-Ehkw5w.roa
File:                     WhjRdqLNw9aP3ecsFvxv-Ehkw5w.roa (raw, json)
Hash identifier:          NOUMZeuq/0EJzdZLcQUIUzFEvwDxBrRrx16fOTnygaY=
Subject key identifier:   5A:18:D1:76:A2:CD:C3:D6:8F:DD:E7:2C:16:FC:6F:F8:48:64:C3:9C
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0260
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WhjRdqLNw9aP3ecsFvxv-Ehkw5w.roa
Signing time:             Mon 01 Sep 2025 01:29:12 +0000
ROA not before:           Mon 01 Sep 2025 01:29:12 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:12 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=5A18D176A2CDC3D68FDDE72C16FC6FF84864C39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cb:92:ec:d8:ff:55:51:12:97:5e:33:0b:1a:
                    75:0b:e3:f8:4c:d3:fc:c8:85:95:09:5b:50:2d:c9:
                    ee:ee:a9:56:62:f3:06:e8:1a:63:8e:f4:1a:05:e0:
                    d2:7c:66:19:05:41:fc:e8:fe:20:75:80:a1:ec:99:
                    87:41:cc:80:5c:92:d1:bb:6c:f6:b6:36:4b:11:44:
                    8e:41:66:a3:fb:0c:83:ce:2e:21:02:27:c9:71:43:
                    cb:7d:63:f4:69:66:ba:53:18:e7:f6:26:77:51:18:
                    d5:d0:a0:33:70:49:72:4a:6d:a0:6d:82:db:35:87:
                    ed:41:ea:84:1d:18:c1:10:ce:67:2b:db:67:96:0f:
                    e9:9a:12:8b:ae:93:c6:71:bf:d4:15:16:17:d9:20:
                    c8:2e:ed:76:33:db:a5:a0:b9:1b:6c:c4:f9:69:7c:
                    14:29:68:38:46:0c:4c:e9:b4:85:5e:dc:1f:a8:e0:
                    7a:f3:d7:40:9a:19:26:27:38:f6:b8:ae:eb:0b:89:
                    32:3c:c4:f2:17:d9:46:b4:73:4f:30:b1:4a:5a:84:
                    1d:7e:d2:c8:79:cd:b1:a7:9b:bc:98:3f:f0:15:84:
                    7f:97:98:c7:cb:b2:2a:83:1e:73:8e:27:c5:af:79:
                    d1:3e:b9:4e:b1:8f:7a:23:09:ae:46:92:62:03:16:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:18:D1:76:A2:CD:C3:D6:8F:DD:E7:2C:16:FC:6F:F8:48:64:C3:9C
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WhjRdqLNw9aP3ecsFvxv-Ehkw5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:9f:f9:6a:c7:db:b1:45:85:fb:e6:92:07:b7:51:fb:0b:c6:
         89:11:13:21:20:a9:9d:42:6e:dc:1a:fa:cf:4b:be:5e:b0:b8:
         f9:34:f7:35:39:cd:41:7a:3f:52:0f:04:08:a4:f0:83:ae:a2:
         eb:02:83:25:04:6a:41:c7:76:a3:25:5f:e5:d1:00:9a:d9:d7:
         aa:63:84:87:a2:42:e2:cb:f1:d7:c1:6d:58:d8:f6:cd:84:a9:
         12:36:6c:3f:3d:fc:35:fd:b1:86:8e:77:72:9e:77:51:cf:cf:
         51:e6:13:82:eb:ce:08:64:1c:87:b4:be:7b:72:d1:fa:f9:4e:
         d7:d8:cf:7b:e4:1d:95:cb:27:6a:f6:05:9f:78:ae:7e:25:8c:
         70:6c:de:78:f9:85:c3:8a:57:56:21:c8:8d:b0:44:83:25:b0:
         72:b1:cd:e5:8e:77:6e:28:81:69:d6:7d:dd:cd:b3:2c:8d:57:
         f9:27:f2:cf:28:85:70:b5:1d:7e:f9:2d:1b:d0:52:8c:d0:89:
         2c:f4:be:b8:4a:50:85:b5:be:62:08:81:82:c1:65:76:9a:0c:
         57:4c:3d:46:a9:d2:62:39:c7:af:5f:e8:e5:b8:f5:87:d1:fc:
         56:15:6c:3b:08:3c:eb:2c:39:d2:3e:c7:10:a1:d2:3c:5a:77:
         3f:61:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:07 2025 by rpki-client