Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZKKPezxnvcQ5IAa5zAlLIrrXvJw.roa
File:                     ZKKPezxnvcQ5IAa5zAlLIrrXvJw.roa (raw, json)
Hash identifier:          a41tXcTjqbrk4dwO9K48yGos4iZxe2kNXK4QBoqOSaE=
Subject key identifier:   64:A2:8F:7B:3C:67:BD:C4:39:20:06:B9:CC:09:4B:22:BA:D7:BC:9C
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0280
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZKKPezxnvcQ5IAa5zAlLIrrXvJw.roa
Signing time:             Mon 01 Sep 2025 01:35:29 +0000
ROA not before:           Mon 01 Sep 2025 01:35:29 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:29 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=64A28F7B3C67BDC4392006B9CC094B22BAD7BC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:57:bc:95:5d:7e:76:57:c5:30:a3:ac:0d:
                    97:16:57:a8:ac:f0:69:3f:1c:72:23:92:f6:a3:b1:
                    7e:02:b2:a1:ac:d0:dd:30:3f:f0:8b:9f:86:b4:28:
                    a6:30:7c:a0:21:f8:90:26:a4:d3:a2:ce:c1:ef:dc:
                    83:48:73:66:02:c9:99:75:d3:85:58:cd:bf:62:8c:
                    72:e1:48:59:d8:92:4f:ef:0e:42:35:db:4a:eb:32:
                    62:a9:4a:10:ab:62:25:c3:ce:94:33:eb:00:83:ab:
                    5e:ae:b5:1d:22:e6:3c:f7:9c:c8:2a:db:6c:c3:59:
                    90:e5:04:fa:86:39:72:f9:c5:43:16:d3:b6:e8:73:
                    c4:79:69:1d:22:c9:6a:4d:22:5c:ef:2f:d9:55:cd:
                    8c:73:10:4d:7d:3d:8d:7d:6f:9b:86:31:c9:a6:7a:
                    75:8c:c8:e0:8e:89:b4:c8:1a:f4:26:21:1c:44:a1:
                    93:f3:f1:40:f9:55:4a:1b:81:13:d6:2f:20:c2:4a:
                    d9:c0:df:4f:36:64:e0:3f:28:cc:f7:fc:75:17:19:
                    62:d7:ac:65:7a:1f:c3:8d:bd:79:7c:48:36:ee:23:
                    ff:49:e9:ae:47:bb:72:93:47:c5:d4:a9:15:23:83:
                    5f:9d:0d:c7:4b:5e:31:90:a9:3e:13:c9:50:92:7b:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:8F:7B:3C:67:BD:C4:39:20:06:B9:CC:09:4B:22:BA:D7:BC:9C
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZKKPezxnvcQ5IAa5zAlLIrrXvJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:f6:a9:5f:9e:68:58:9e:ce:1a:dd:fa:09:75:10:64:a2:
         9e:53:7b:77:f7:6c:9e:b0:a4:f5:a2:55:7c:8f:be:7c:b0:9f:
         bd:1e:3b:21:a9:38:b9:09:c8:a3:03:45:22:8b:74:84:3e:a8:
         d5:4f:8f:29:c2:ba:db:c9:58:54:40:20:e5:b2:59:b1:d8:ce:
         17:31:86:4e:5f:3b:84:fc:c1:6b:85:12:da:54:98:a0:b9:2a:
         ca:cc:84:46:3e:08:79:50:16:43:a1:ab:fe:de:28:45:04:bc:
         31:39:48:9e:7e:6f:e0:64:98:c9:06:88:07:58:23:12:95:ba:
         eb:b2:50:da:23:36:e1:2b:a7:be:4a:e6:0d:d1:e7:1c:09:5b:
         dd:e8:cf:21:bb:3c:9a:4a:3c:d1:f6:fb:5d:5d:59:aa:ff:61:
         1a:81:89:32:38:a6:d3:13:47:df:d8:a8:6b:f2:2a:b4:c4:72:
         93:c1:b6:b4:cb:a4:76:f3:29:ba:48:34:62:db:bd:33:b1:aa:
         59:eb:4e:89:81:8f:de:da:dc:b1:b9:f8:2d:10:cf:90:08:e9:
         35:6d:eb:52:3b:03:2d:94:a6:9b:4d:7d:b0:04:fd:52:aa:e6:
         bf:56:46:b8:73:11:06:ca:62:69:e3:25:70:74:45:6f:81:f2:
         41:3b:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:13 2025 by rpki-client