Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jpFzlL-VU0BvE9f0HNjbDFNVFPk.roa
File:                     jpFzlL-VU0BvE9f0HNjbDFNVFPk.roa (raw, json)
Hash identifier:          K1jk9o7MwMY27yoBpUv0MKl/YElhaNlBtv+eP8GEchY=
Subject key identifier:   8E:91:73:94:BF:95:53:40:6F:13:D7:F4:1C:D8:DB:0C:53:55:14:F9
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       026D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jpFzlL-VU0BvE9f0HNjbDFNVFPk.roa
Signing time:             Mon 01 Sep 2025 01:35:19 +0000
ROA not before:           Mon 01 Sep 2025 01:35:19 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:19 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=8E917394BF9553406F13D7F41CD8DB0C535514F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:64:ab:79:81:65:bd:45:8e:2a:66:19:93:
                    ae:9b:d1:9c:f0:b5:34:a8:81:21:71:c8:d3:6a:fb:
                    48:f7:a2:c7:4e:6e:da:83:05:82:a2:bd:18:f4:d4:
                    18:3a:d4:fe:d3:08:7a:5e:12:0d:f7:4f:5b:ac:93:
                    03:2d:ca:f3:57:85:09:70:18:0a:b1:e0:e2:68:cf:
                    30:27:91:8f:31:54:a0:71:8f:48:5c:af:a8:5d:ef:
                    b3:d2:e3:9c:69:e5:f5:74:f7:37:2e:73:b9:04:a9:
                    c2:bb:ab:e0:c6:32:6c:01:12:9a:41:b6:b7:8f:50:
                    80:ed:e6:43:60:ea:4d:56:f4:77:30:55:b8:17:c6:
                    15:95:64:09:dd:45:c1:17:f5:2f:72:e9:86:9a:ed:
                    70:17:eb:ee:97:e7:13:4e:46:ce:88:f7:ef:89:00:
                    22:32:60:fa:b4:89:56:a3:ea:74:c0:30:2c:48:27:
                    4e:69:14:3e:4d:ca:05:7e:ed:a6:c0:32:b3:74:dc:
                    bb:0c:65:ba:ed:44:58:de:45:ad:50:9c:4f:ee:aa:
                    a2:d1:01:e9:cc:65:42:13:5e:d0:7f:e2:dc:56:5a:
                    82:3c:96:f2:3b:7a:4f:ff:d2:0a:85:55:26:3a:5b:
                    69:2f:67:db:98:3f:55:82:79:b8:2e:31:36:a7:5c:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:73:94:BF:95:53:40:6F:13:D7:F4:1C:D8:DB:0C:53:55:14:F9
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/jpFzlL-VU0BvE9f0HNjbDFNVFPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:e2:7a:68:02:a9:1f:14:bd:4c:70:07:b8:71:bd:f0:9c:
         a0:83:90:d7:80:82:ce:d8:0f:ac:f7:ae:46:81:0d:37:fa:49:
         8b:23:c1:6f:db:83:42:a3:59:34:99:c2:5c:ee:5f:53:cc:37:
         71:18:50:cf:43:08:1b:a4:ab:36:37:48:16:1d:f8:50:22:fc:
         e4:9a:60:de:bf:a6:79:37:8d:88:4f:2d:e0:5d:ef:b0:94:6a:
         b3:9d:9a:e5:f8:55:40:d5:35:7e:fc:9c:ab:3a:05:1b:20:86:
         06:2e:83:f0:4f:5a:5f:85:6b:c3:0c:f0:ad:5c:79:d5:85:eb:
         11:53:37:e1:03:73:67:89:1f:0f:c9:be:19:5d:1b:ff:b2:b0:
         e4:86:37:00:54:e6:77:ef:eb:45:50:08:21:b0:44:b5:18:21:
         e4:14:7c:2d:65:0d:05:a1:5a:6e:b0:07:4c:bf:96:44:61:93:
         26:d0:06:22:f4:59:32:2d:03:d4:f8:93:96:aa:47:fb:9f:71:
         26:cc:db:b6:39:17:a2:d3:de:b6:91:0d:e9:c0:6e:d3:3c:ea:
         5d:ce:3b:ee:ef:3f:d1:08:36:92:b9:55:c6:31:04:58:2e:35:
         ee:33:d5:91:75:a5:f7:91:57:88:1a:72:0a:94:2e:b8:b5:75:
         10:06:48:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw
MTM1MTlaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhFOTE3Mzk0QkY5NTUz
NDA2RjEzRDdGNDFDRDhEQjBDNTM1NTE0RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtGSreYFlvUWOKmYZk66b0ZzwtTSogSFxyNNq+0j3osdObtqD
BYKivRj01Bg61P7TCHpeEg33T1uskwMtyvNXhQlwGAqx4OJozzAnkY8xVKBxj0hc
r6hd77PS45xp5fV09zcuc7kEqcK7q+DGMmwBEppBtrePUIDt5kNg6k1W9HcwVbgX
xhWVZAndRcEX9S9y6Yaa7XAX6+6X5xNORs6I9++JACIyYPq0iVaj6nTAMCxIJ05p
FD5NygV+7abAMrN03LsMZbrtRFjeRa1QnE/uqqLRAenMZUITXtB/4txWWoI8lvI7
ek//0gqFVSY6W2kvZ9uYP1WCebguMTanXPzzAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUjpFzlL+VU0BvE9f0HNjbDFNVFPkwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9qcEZ6bEwtVlUwQnZFOWYwSE5qYkRGTlZGUGsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC0uCwMA0GCSqGSIb3DQEBCwUAA4IBAQCEKuJ6aAKpHxS9THAHuHG9
8Jygg5DXgILO2A+s965GgQ03+kmLI8Fv24NCo1k0mcJc7l9TzDdxGFDPQwgbpKs2
N0gWHfhQIvzkmmDev6Z5N42ITy3gXe+wlGqznZrl+FVA1TV+/JyrOgUbIIYGLoPw
T1pfhWvDDPCtXHnVhesRUzfhA3NniR8Pyb4ZXRv/srDkhjcAVOZ37+tFUAghsES1
GCHkFHwtZQ0FoVpusAdMv5ZEYZMm0AYi9FkyLQPU+JOWqkf7n3EmzNu2ORei0962
kQ3pwG7TPOpdzjvu7z/RCDaSuVXGMQRYLjXuM9WRdaX3kVeIGnIKlC64tXUQBkhe
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:01:07 2025 by rpki-client