Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
File:                     x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa (raw, json)
Hash identifier:          UYpsor/oQZoMGP7R8QDi3Int/Nyo6cjMTeSo7tPwVk0=
Subject key identifier:   C7:F0:93:E4:31:5B:F0:27:B7:65:85:AE:7B:E5:A0:1A:FB:72:3B:9F
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       23
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
Signing time:             Mon 01 Sep 2025 01:31:53 +0000
ROA not before:           Mon 01 Sep 2025 01:31:53 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        221.118.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep  1 01:31:53 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=C7F093E4315BF027B76585AE7BE5A01AFB723B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:38:b1:d1:9b:e0:4a:8e:24:f1:36:90:b3:
                    f6:8e:28:df:9c:23:07:33:df:c5:2e:de:78:b4:a1:
                    ac:1d:a5:90:16:40:ae:c8:58:24:3d:3d:cc:53:32:
                    5c:c5:a3:d9:2e:02:44:ec:0b:ff:2c:c4:64:90:04:
                    03:da:3d:ff:9d:cd:37:d9:8e:d0:f4:38:10:c0:13:
                    ce:7d:b4:e7:23:bd:f6:02:cb:4b:a6:b2:43:33:bf:
                    42:50:f4:f2:3c:cc:c7:ec:dd:0a:97:a1:fa:ff:85:
                    f5:6e:90:71:1c:7d:b5:40:88:94:66:02:21:68:95:
                    7d:d0:8b:f4:cd:f0:ce:e6:4b:7a:04:4d:ca:f6:6a:
                    87:5d:3e:32:4c:2b:51:e2:86:eb:2b:49:f7:9b:af:
                    47:4a:88:cc:12:2c:d0:5d:cf:b8:5e:70:44:d0:88:
                    9f:ca:46:0e:ec:84:09:d8:66:24:36:98:df:dc:42:
                    df:6d:4b:43:1b:9c:79:17:ac:93:65:8e:b8:70:7d:
                    e8:3f:8a:08:a2:01:f0:4f:70:4a:a1:ef:41:57:80:
                    0e:12:3d:c9:99:af:2e:d8:79:d0:10:1e:0f:f4:48:
                    85:c3:9f:75:2a:77:0a:ca:87:b7:58:1e:44:03:31:
                    9c:d5:aa:6d:69:27:1c:de:74:cb:ac:b2:de:d7:0d:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:93:E4:31:5B:F0:27:B7:65:85:AE:7B:E5:A0:1A:FB:72:3B:9F
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/x_CT5DFb8Ce3ZYWue-WgGvtyO58.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.118.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:61:98:84:e1:b6:e7:71:06:0c:50:f7:f4:42:ee:2f:1d:
         04:08:d2:6f:b6:43:63:b3:66:89:70:0e:2e:e7:17:b6:ff:f3:
         cc:82:43:a7:04:f5:f6:af:a3:53:5a:3b:4e:69:43:9e:84:69:
         48:16:8c:49:c3:c6:3f:bf:05:69:30:b9:cb:7e:5d:f5:c7:1f:
         83:ed:81:d7:4f:c6:b8:47:58:d7:5f:f3:9f:55:74:fa:d0:8f:
         29:bd:a4:34:5f:df:a3:b8:38:e3:69:68:2f:aa:c5:63:6e:ca:
         0c:35:14:57:fd:c5:1d:9a:29:f6:e9:e3:b3:28:71:86:35:dc:
         5a:13:72:53:a9:de:1b:58:61:6e:62:51:3b:cd:14:87:b7:f7:
         81:29:0f:64:4f:7e:a1:e3:e1:8f:34:e5:16:ae:a2:94:bf:12:
         ae:10:92:90:55:19:55:d6:9f:0e:e1:a6:b2:58:32:40:ab:81:
         c7:d6:99:f7:55:c9:3f:68:3c:a5:f8:98:ca:e5:06:a4:90:26:
         a5:13:95:b9:7e:66:1e:3c:bc:d2:73:dc:0f:03:10:6d:6f:b9:
         a5:57:8f:4e:60:1a:2b:98:fb:26:dd:6f:43:60:d2:d5:4f:71:
         42:40:9c:e7:2a:e6:74:45:59:fc:42:c0:87:24:00:5d:9a:21:
         96:ab:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:28:22 2025 by rpki-client