Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
File:                     sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa (raw, json)
Hash identifier:          m1SZB8N4ZitFNBvFeE8RK7a4im3ForkIl0ZyY/yxSNI=
Subject key identifier:   B1:22:69:AF:75:FB:E3:17:CF:80:24:BF:41:43:DC:81:36:EB:01:64
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0270
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
Signing time:             Mon 01 Sep 2025 01:35:20 +0000
ROA not before:           Mon 01 Sep 2025 01:35:20 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9371
IP address blocks:        110.74.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 20:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:35:20 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=B12269AF75FBE317CF8024BF4143DC8136EB0164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:27:a7:e6:0d:29:77:ae:63:25:1d:ed:3f:
                    94:27:41:80:2a:10:b5:9a:ba:dc:02:d0:46:b4:17:
                    ff:ce:60:ac:90:ea:7e:59:57:8c:4e:90:34:20:97:
                    5c:13:fa:78:8f:3b:a1:98:56:19:9d:51:31:7b:55:
                    8a:17:52:a9:10:15:84:42:66:6b:22:c4:f4:19:97:
                    e6:ca:8e:2a:9b:2d:c0:ff:9a:53:da:cd:42:86:ef:
                    ee:50:93:db:93:ec:f6:8e:4d:94:47:34:0e:1e:44:
                    0c:40:7a:29:d9:56:a0:9c:98:ec:8f:07:a7:ec:5a:
                    35:38:ee:09:e4:c0:78:75:b7:8e:66:4a:e9:d6:f4:
                    60:fe:76:03:d6:6f:05:ca:03:85:6f:d7:bb:fa:72:
                    28:e0:f0:2a:45:21:71:d8:dd:ca:5a:a6:bd:2a:71:
                    6b:39:4f:77:57:36:2f:a2:fa:06:13:72:76:c9:a4:
                    ff:6e:c7:f6:a8:0d:77:c7:59:85:40:eb:0e:de:5a:
                    f3:20:01:5d:71:b3:bd:4e:ed:c8:ac:d1:58:8e:ca:
                    ce:72:57:60:d0:e8:ea:f8:c9:40:3f:6f:63:9d:45:
                    93:78:f2:0b:7d:6c:e6:ea:17:e8:4b:50:0a:5a:85:
                    1a:e1:33:0e:0f:2c:08:bb:2b:46:6b:eb:4f:1b:f2:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:69:AF:75:FB:E3:17:CF:80:24:BF:41:43:DC:81:36:EB:01:64
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSJpr3X74xfPgCS_QUPcgTbrAWQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:2c:79:78:c6:ee:db:5a:c4:63:eb:34:55:6e:83:6a:af:46:
         58:a6:17:02:f5:cf:a9:ab:39:b2:25:42:82:2d:01:6f:ff:e8:
         2e:33:89:a0:91:26:71:ab:b2:f2:09:04:70:d5:bd:48:f8:5e:
         52:56:44:94:72:9b:5e:26:67:d3:b2:ba:4a:e1:c7:97:f3:58:
         46:67:bb:a2:3b:65:fa:00:e5:85:5f:3f:aa:e5:d1:dd:ba:04:
         87:2b:5d:ad:e7:0b:f3:7a:68:14:ac:29:94:86:6b:f9:fc:de:
         4e:b1:cf:dc:44:dd:b9:f5:b2:0b:96:12:ed:94:21:9b:14:35:
         c5:0d:b1:fc:43:8d:30:d1:a1:64:04:3e:e2:24:91:d4:51:f2:
         f3:ea:ba:ef:35:65:78:f8:44:e9:4a:66:f2:f5:24:4f:7c:a3:
         41:b4:4e:27:e4:88:16:f8:9d:18:c6:94:6f:3e:8b:19:35:20:
         30:33:93:5e:b2:7c:10:c5:66:b7:db:37:96:4e:de:3d:c0:c6:
         72:0e:d6:bd:28:2c:cd:e9:11:d9:7d:db:0e:8d:b6:35:67:01:
         a3:4e:f2:2d:d4:b7:35:1b:fd:e6:2c:6c:c0:8a:8e:37:8a:9e:
         95:5b:ca:0b:bc:69:ff:97:e5:11:80:51:57:d3:46:a7:54:7a:
         e7:6e:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:04:17 2025 by rpki-client