Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nndPxI6iF2sFK1o0ZX8YTNpwRME.roa
File:                     nndPxI6iF2sFK1o0ZX8YTNpwRME.roa (raw, json)
Hash identifier:          pS56IkmYs4f3DW16hzLlfn50t1Mzymmf3ZvBPzwy+Lk=
Subject key identifier:   9E:77:4F:C4:8E:A2:17:6B:05:2B:5A:34:65:7F:18:4C:DA:70:44:C1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0276
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nndPxI6iF2sFK1o0ZX8YTNpwRME.roa
Signing time:             Mon 01 Sep 2025 01:35:23 +0000
ROA not before:           Mon 01 Sep 2025 01:35:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=9E774FC48EA2176B052B5A34657F184CDA7044C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:47:8d:ac:a9:10:34:b4:65:13:c7:0b:fc:
                    0f:2b:09:c4:56:de:a8:29:84:d4:86:43:2e:c5:03:
                    16:bf:6c:f4:8c:0d:c3:d4:a3:f4:61:09:6f:bf:0e:
                    42:e9:8d:d9:36:04:26:56:f5:64:8d:c3:0e:a2:37:
                    99:44:94:2f:e3:66:56:1f:bb:31:de:9f:58:ac:c6:
                    9a:72:8f:b2:82:41:c7:4c:03:9f:6b:6d:58:11:d8:
                    b2:a4:ca:fb:67:8b:05:ec:f4:a3:c2:2a:c6:f0:5c:
                    0f:50:bd:15:aa:b9:e5:40:e6:ab:a4:c7:28:aa:b2:
                    61:2f:df:c6:c5:39:0b:7c:ee:b4:e3:c7:d0:7e:b9:
                    23:4b:53:08:11:31:c8:bb:e7:25:3e:a6:66:93:ad:
                    ee:ad:1b:c1:37:10:99:ba:31:78:66:4d:94:bb:eb:
                    9f:92:66:85:da:5e:dc:dd:5c:ac:96:6d:97:dc:e0:
                    d0:c3:b0:7a:b4:65:50:48:f8:29:92:e2:c4:eb:87:
                    37:25:38:ef:60:0e:93:a2:a8:62:a6:06:67:7a:a6:
                    72:38:93:f8:88:96:d3:ca:a8:2c:2b:91:77:57:52:
                    92:71:09:eb:95:8d:b1:0a:69:57:ef:7e:cd:1a:85:
                    7f:42:3a:78:b0:b2:5d:a1:06:60:84:f9:7d:d1:3c:
                    e3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:77:4F:C4:8E:A2:17:6B:05:2B:5A:34:65:7F:18:4C:DA:70:44:C1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nndPxI6iF2sFK1o0ZX8YTNpwRME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:23:73:98:28:ed:f6:db:06:62:64:3a:17:8f:46:c6:ee:
         45:bd:fc:d4:7c:7f:78:04:34:e1:12:f6:86:4e:a3:03:30:9d:
         a3:f0:a7:b1:fd:29:c4:9a:02:61:35:c5:f1:0f:f2:de:0f:be:
         73:1f:b1:2c:8e:19:5d:50:96:f8:72:5f:70:ca:e0:00:b8:62:
         25:ea:f3:7b:6b:01:63:11:c1:d7:2d:82:88:8d:3b:f4:96:b1:
         72:a0:9d:ca:6a:df:68:e9:0f:a6:49:53:1f:e4:e5:94:f8:78:
         0b:04:26:48:e5:13:0f:60:50:a2:70:59:d3:f8:78:d7:ec:03:
         27:2d:c3:c4:43:fc:2f:86:59:75:1c:4d:e7:a3:ba:ac:a1:29:
         8c:49:a4:7e:82:68:9a:f2:9f:d5:9b:7b:c9:58:40:33:86:31:
         e8:e8:d0:63:84:23:ca:62:d6:cf:c8:13:9a:10:f9:db:08:86:
         c3:69:e5:12:30:48:1d:6a:a3:3e:9d:13:76:47:49:11:d5:e9:
         40:b9:ec:0f:47:b6:ef:e7:64:e2:4c:43:97:7e:81:37:8a:fb:
         da:77:83:68:e4:38:90:8a:ae:72:cf:b8:3c:62:73:a0:9b:f5:
         54:b2:37:11:74:94:d4:70:e3:8c:d0:8e:bc:4c:4c:04:f9:8a:
         73:22:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:17 2025 by rpki-client