Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nC7YxWug-iYl6MqA76cdDpwnTK4.roa
File:                     nC7YxWug-iYl6MqA76cdDpwnTK4.roa (raw, json)
Hash identifier:          mHmvjhDOrodHSXgfa3yNpyCkgB7DP7vOZdU0vaxvHIc=
Subject key identifier:   9C:2E:D8:C5:6B:A0:FA:26:25:E8:CA:80:EF:A7:1D:0E:9C:27:4C:AE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0258
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nC7YxWug-iYl6MqA76cdDpwnTK4.roa
Signing time:             Mon 01 Sep 2025 01:29:05 +0000
ROA not before:           Mon 01 Sep 2025 01:29:05 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:05 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=9C2ED8C56BA0FA2625E8CA80EFA71D0E9C274CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:ad:75:c9:aa:c1:b4:55:5f:45:fc:64:78:
                    b8:29:34:3c:b3:e4:6a:3f:08:db:e7:13:8a:ff:6c:
                    e6:79:fd:ab:cb:72:a8:19:f1:79:ee:f9:b5:a7:05:
                    12:58:94:13:17:62:f7:de:fa:eb:5d:8f:de:52:37:
                    30:0f:ea:68:58:f4:fd:84:4c:71:ca:8b:e2:7e:da:
                    52:2a:20:70:15:90:91:b7:ff:04:33:c3:a7:5d:93:
                    80:72:53:e5:e2:26:8a:a2:49:b1:7e:3d:af:94:ee:
                    67:0c:86:c4:1a:6e:67:27:e8:77:4b:99:0f:ae:90:
                    ae:56:be:88:92:f6:48:7b:ee:51:f6:0e:68:30:41:
                    db:0e:d8:d6:2d:fc:80:43:ca:74:5f:aa:41:8a:13:
                    76:8d:d4:32:30:07:c8:ee:23:9c:48:09:7d:c7:e2:
                    f8:79:1a:ed:43:fd:07:43:1e:4c:6b:29:ab:79:0c:
                    c7:90:6e:81:72:26:39:cc:55:ae:28:c1:63:65:9e:
                    af:43:bb:ee:83:5b:07:d9:44:f5:de:9c:ff:4c:71:
                    cc:62:24:48:5a:6e:be:af:ba:64:fa:29:af:aa:f5:
                    f0:cc:db:82:da:a1:ac:5e:c3:d1:f2:23:e8:2e:dc:
                    5f:93:f7:db:d4:3f:a4:89:51:16:79:0c:ba:cf:5a:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2E:D8:C5:6B:A0:FA:26:25:E8:CA:80:EF:A7:1D:0E:9C:27:4C:AE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nC7YxWug-iYl6MqA76cdDpwnTK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:02:d9:6c:1b:ce:42:4c:dd:0a:06:07:1f:bc:49:32:4f:8e:
         22:46:cc:7b:4b:14:5d:0c:ce:b1:9d:1d:e5:10:63:12:8f:84:
         d1:1b:dd:e2:39:e8:27:d7:2d:8d:db:92:81:89:c4:3f:db:e4:
         1d:d7:a1:c5:30:6c:fb:92:d7:ad:ee:ee:12:50:82:9d:0d:a3:
         d8:22:a6:90:ef:01:36:f4:8a:af:ce:c2:a2:70:8b:1b:1b:41:
         73:27:3d:97:2e:19:af:e0:c9:5f:f6:28:51:97:55:dc:92:b7:
         c5:fa:06:dd:af:28:1e:10:ee:9d:8e:a5:16:ec:c4:6a:be:90:
         81:0c:64:65:5a:53:78:e8:70:63:c8:64:b9:99:d5:48:06:36:
         11:df:53:3f:9e:40:36:2c:3a:84:cc:2f:95:43:e9:14:2d:28:
         e1:93:9c:a8:36:43:b0:d5:34:f9:71:99:09:b4:4d:b4:98:df:
         20:5e:22:da:bd:05:11:ad:97:c5:c4:1b:40:9c:ff:66:90:0d:
         84:0f:5d:54:03:24:7b:60:30:b5:75:c2:4a:d8:b7:8b:d8:a9:
         cd:de:87:11:b3:6b:ed:79:2d:bb:31:ee:cc:f0:e1:ce:0f:20:
         d3:a0:a8:01:81:7d:ed:13:35:a9:7c:81:7b:b7:e3:f7:5e:e9:
         b9:63:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:03:00 2025 by rpki-client