Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/drOUE77bYjKUgrT35IzXnJJa4A8.roa
File:                     drOUE77bYjKUgrT35IzXnJJa4A8.roa (raw, json)
Hash identifier:          mYNAey81Jk61mWTC+0N/x6rmlY9qCTDnqcBRs9Jgwpo=
Subject key identifier:   76:B3:94:13:BE:DB:62:32:94:82:B4:F7:E4:8C:D7:9C:92:5A:E0:0F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0281
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/drOUE77bYjKUgrT35IzXnJJa4A8.roa
Signing time:             Mon 01 Sep 2025 01:35:29 +0000
ROA not before:           Mon 01 Sep 2025 01:35:29 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:29 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=76B39413BEDB62329482B4F7E48CD79C925AE00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:13:9f:c6:aa:ae:af:f7:0c:ef:ea:42:70:
                    eb:5b:75:ae:d3:6a:6f:a4:cd:15:ee:55:fa:16:ef:
                    f5:64:60:9f:24:7b:14:e1:58:e7:f4:fd:be:18:c6:
                    53:80:3b:72:0e:e8:31:a3:25:65:17:cf:24:d9:d0:
                    67:ac:0c:96:c5:28:c4:86:06:ee:d9:fd:40:ff:9c:
                    c8:eb:9f:8c:d7:d1:62:1b:78:af:27:59:8c:2e:88:
                    ed:6d:9b:7a:db:e7:2b:5e:6a:4d:3a:44:19:1c:f5:
                    08:b1:47:83:24:1e:6a:54:be:93:0a:74:5c:9a:55:
                    bf:a3:a5:e8:f0:cd:0c:36:17:54:5c:a7:a6:50:c5:
                    e3:59:5a:e9:de:64:a7:12:77:b6:0f:db:c4:75:06:
                    2d:17:65:72:fd:d1:4b:26:e6:8b:d2:b8:c3:5d:4f:
                    7f:6f:b6:ad:cd:01:e5:c1:6a:37:a4:f9:b2:11:0d:
                    4e:6a:04:1a:9e:ed:c0:c7:4c:9c:de:b7:25:be:cd:
                    d5:7f:ea:53:7d:02:82:c4:25:62:ac:4a:0c:15:72:
                    a8:c4:91:4a:9e:6c:79:0b:1c:56:cb:d5:6e:c8:65:
                    06:41:f0:b1:29:ca:6a:b9:ad:d5:34:7b:94:fa:dc:
                    32:5f:f9:88:7e:03:03:38:8b:99:2c:ca:c8:2a:ec:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:94:13:BE:DB:62:32:94:82:B4:F7:E4:8C:D7:9C:92:5A:E0:0F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/drOUE77bYjKUgrT35IzXnJJa4A8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:1d:5f:ca:34:76:cf:72:8a:df:d7:ae:aa:b9:cb:03:ee:
         d8:48:2f:9f:c0:e4:d5:c1:62:5f:dc:a8:09:cc:0e:e3:5f:74:
         50:65:f0:27:49:b3:6a:de:26:95:d7:e6:2e:c6:a2:9e:da:a0:
         29:2a:68:dd:b3:98:31:6b:da:27:32:08:df:d3:99:4b:fb:31:
         96:45:8b:54:00:4a:a3:03:68:4b:2c:52:2a:d0:91:3e:c7:57:
         38:d9:b3:1d:4d:b1:79:8c:09:32:de:a7:e3:7d:80:fc:16:46:
         15:ff:7c:e7:c7:72:e6:ff:79:ea:fd:82:7e:42:42:d0:b5:e7:
         10:87:cb:f2:2d:7c:10:0e:63:0d:ce:0e:bc:2f:cf:c0:9e:f5:
         ca:ca:c2:83:6a:6d:a0:0d:7b:52:fb:04:8a:c2:d6:1f:9f:33:
         da:f2:6a:d4:0b:e1:a1:79:26:4a:cc:09:7b:82:0f:8d:a5:08:
         66:e0:b7:e9:8a:f0:f1:a6:99:eb:f6:ee:37:2e:11:37:e4:e5:
         4f:18:fb:40:68:af:4e:6d:1c:61:37:51:1f:c6:14:7c:f8:63:
         96:19:9d:67:5a:45:89:6e:8b:75:32:73:80:19:1b:11:b5:08:
         b2:2f:48:de:47:2e:f0:22:bd:18:26:3d:d4:39:26:6b:1a:78:
         73:82:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:17 2025 by rpki-client