Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/cQTXiO_UGzangGX1SelEbIIENxI.roa
File:                     cQTXiO_UGzangGX1SelEbIIENxI.roa (raw, json)
Hash identifier:          4x4eiWZ0VpbSDm6uiMo6UMWSGtY8AYU7YxHgeQdFAlo=
Subject key identifier:   71:04:D7:88:EF:D4:1B:36:A7:80:65:F5:49:E9:44:6C:82:04:37:12
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0283
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/cQTXiO_UGzangGX1SelEbIIENxI.roa
Signing time:             Mon 01 Sep 2025 01:39:55 +0000
ROA not before:           Mon 01 Sep 2025 01:39:55 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:39:55 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=7104D788EFD41B36A78065F549E9446C82043712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:fa:04:b2:a8:15:fb:a7:15:3a:26:62:5b:
                    bf:8e:1b:64:a9:ea:4d:60:f5:f5:45:f7:a3:02:60:
                    bb:37:00:ee:bb:a3:21:db:12:4a:92:23:44:dc:be:
                    9d:d0:7b:18:e7:fe:b5:39:76:aa:9c:1e:c0:64:95:
                    fd:9a:e3:5b:f2:15:ab:77:cb:3b:a8:63:75:6c:00:
                    07:1d:b1:64:bc:86:c0:04:ab:f1:91:5c:dd:e0:d1:
                    e8:01:41:c0:4a:19:ad:fe:07:d2:93:c6:15:95:7d:
                    6a:b6:31:27:77:c2:29:f3:bb:a0:a0:9c:97:8c:aa:
                    ec:49:ea:84:bb:33:df:13:1e:2e:b1:3c:52:a2:4b:
                    c7:39:c4:19:f4:68:d2:c5:f1:00:61:46:f2:8c:2c:
                    8e:0c:68:14:22:a9:5f:4b:de:9c:12:76:72:e3:54:
                    0d:64:ef:ff:b1:0d:11:70:d4:45:ea:a5:0f:7e:6b:
                    79:e5:78:6e:7c:48:b9:ac:94:82:f3:e8:41:99:fd:
                    f3:01:a0:59:6c:e3:ab:90:97:a2:cb:03:f0:24:58:
                    20:fe:2a:d7:54:54:ee:4a:48:2b:2b:ae:7f:0f:ce:
                    a4:61:e5:a5:96:61:c0:30:08:91:80:50:6c:93:35:
                    a2:04:6b:b0:c0:c3:90:3e:20:13:c4:ec:26:c8:9f:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:D7:88:EF:D4:1B:36:A7:80:65:F5:49:E9:44:6C:82:04:37:12
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/cQTXiO_UGzangGX1SelEbIIENxI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:bb:84:e3:ae:1b:52:30:bc:c9:3e:23:be:5f:a8:92:f8:52:
         59:97:e6:44:cf:e0:b7:17:9d:27:71:ea:8c:10:88:bf:0d:01:
         01:9b:62:99:9c:4a:95:f4:5e:06:08:28:ff:b3:5e:39:c4:b1:
         c9:49:21:d6:68:58:56:57:00:d5:78:ed:6c:27:eb:6d:ab:e1:
         e7:36:26:49:95:db:c2:34:df:47:be:1d:8e:44:dc:21:b6:36:
         04:92:db:15:24:2b:41:f3:d5:b0:a5:32:66:61:19:d5:82:f0:
         eb:d9:14:9f:14:65:cd:77:cd:73:76:42:5d:2b:b3:38:13:1d:
         e3:15:5f:4a:af:9f:0e:27:01:91:77:2b:91:b7:8d:23:76:58:
         73:a5:81:9d:fc:43:aa:6d:5a:47:5d:28:a8:41:8a:57:a4:0b:
         09:48:31:05:5b:b2:4b:9f:8e:17:58:aa:f3:36:9b:c5:e1:cf:
         40:88:3f:27:b2:9e:af:07:2a:d8:71:63:ae:bc:fb:c3:70:28:
         36:fe:69:b1:8d:73:57:96:9d:b1:23:c8:3a:ec:72:36:fd:a9:
         e3:f4:58:08:c2:43:68:41:92:4d:8f:43:6c:ce:29:86:40:ee:
         10:61:d9:05:8d:a1:ff:6b:c7:65:08:1f:f0:a6:96:b8:84:68:
         bd:1b:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:12 2025 by rpki-client