Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xjx8QeooDC6C9INlB6hkB_xn85g.roa
File:                     xjx8QeooDC6C9INlB6hkB_xn85g.roa (raw, json)
Hash identifier:          a2rxcJZny7EM6CDqApZSbJvo9usB0eWNSVC7BSBvfKQ=
Subject key identifier:   C6:3C:7C:41:EA:28:0C:2E:82:F4:83:65:07:A8:64:07:FC:67:F3:98
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0256
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xjx8QeooDC6C9INlB6hkB_xn85g.roa
Signing time:             Mon 01 Sep 2025 01:29:04 +0000
ROA not before:           Mon 01 Sep 2025 01:29:04 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:29:04 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=C63C7C41EA280C2E82F4836507A86407FC67F398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:c5:80:36:fc:b6:03:73:e7:36:77:71:a5:
                    e3:82:fb:4a:5f:09:e5:94:57:11:52:63:7a:5b:07:
                    b6:32:ef:0e:21:77:b6:f4:aa:76:88:5d:a0:63:ae:
                    11:38:ab:b7:32:d4:d0:46:21:a5:62:4b:57:3a:3f:
                    06:be:ec:11:d6:96:97:31:59:e7:70:f0:6a:8f:60:
                    45:52:17:ed:a0:4c:2b:79:03:33:17:87:d5:dd:7c:
                    ec:6e:2a:83:42:c0:7d:70:10:3f:4d:69:95:76:ab:
                    1a:98:f7:af:c1:68:31:41:4d:42:f5:41:aa:d3:52:
                    1e:9f:57:00:24:cc:9a:f8:54:8b:68:56:64:f7:21:
                    7d:79:95:86:e4:c1:e2:9e:f6:86:be:38:7e:1a:15:
                    b2:ae:fe:9e:56:9d:55:a5:fc:8c:39:4d:f0:7d:19:
                    b1:05:4f:56:0c:ab:64:0d:66:3c:b2:6c:cd:e0:84:
                    df:e3:b0:f8:f9:3a:18:54:51:75:7d:38:ac:f6:e7:
                    a2:d5:5e:cb:88:fc:45:f8:b5:21:75:5b:c2:6f:94:
                    5e:48:a8:0c:e8:ad:54:69:45:dd:00:1a:83:fa:fc:
                    e8:6b:75:5b:a9:49:ef:ee:86:a1:91:d6:57:66:d8:
                    36:ee:96:0f:d6:64:1c:ad:b6:af:ad:b6:7f:53:09:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:7C:41:EA:28:0C:2E:82:F4:83:65:07:A8:64:07:FC:67:F3:98
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xjx8QeooDC6C9INlB6hkB_xn85g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:02:d7:43:a8:1a:fb:6c:35:12:f9:0c:17:f3:81:aa:db:
         66:a5:5a:de:75:f5:ed:b3:3b:98:fa:f1:81:78:05:a9:29:75:
         45:7f:a5:1f:e7:b1:e2:b9:b5:95:e8:da:ed:e0:dd:6a:66:1d:
         26:a8:c7:87:e3:42:27:84:17:76:94:73:38:80:aa:31:f5:9b:
         a7:a5:2c:2e:f3:ae:a3:37:3c:a1:40:05:df:62:95:ce:76:23:
         19:f2:49:6a:47:05:9c:b9:bb:25:ae:b3:23:ee:c3:f4:57:1f:
         b6:34:81:60:a3:4b:d3:72:dd:7d:e8:9b:ba:49:57:e3:ec:17:
         3e:03:43:21:65:56:e5:3a:2a:3f:72:f8:33:23:fc:be:10:99:
         f0:30:7f:3e:31:f9:ba:3e:dd:f8:64:69:a5:f8:e5:1c:0c:f5:
         ec:62:dc:4b:bd:74:27:94:ae:87:de:06:08:e9:95:70:cd:eb:
         28:41:3f:c2:c6:7c:ec:16:e9:7e:43:94:ff:fb:31:ea:38:5b:
         92:24:f6:d0:19:02:f4:7b:c9:0b:49:07:8c:7e:32:db:2a:13:
         2e:e4:1a:ab:79:8c:77:bf:81:a4:40:66:48:eb:c4:23:88:ae:
         43:e3:8a:7c:a0:7b:64:e8:a3:e5:ce:a1:7e:ec:c5:4e:f8:a2:
         10:eb:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:44:51 2025 by rpki-client