Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4PXVF_66juxxPgO4xEmO9aCcRP4.roa
File:                     4PXVF_66juxxPgO4xEmO9aCcRP4.roa (raw, json)
Hash identifier:          o1BHVT+DavFlLLNe1pXO6n3nMFp/eQRSfJCpetIJCl8=
Subject key identifier:   E0:F5:D5:17:FE:BA:8E:EC:71:3E:03:B8:C4:49:8E:F5:A0:9C:44:FE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0450
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4PXVF_66juxxPgO4xEmO9aCcRP4.roa
Signing time:             Mon 01 Sep 2025 01:33:59 +0000
ROA not before:           Mon 01 Sep 2025 01:33:59 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep  1 01:33:59 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=E0F5D517FEBA8EEC713E03B8C4498EF5A09C44FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:45:40:1f:a8:02:c8:04:b2:6b:9e:9b:ef:
                    c0:07:ac:83:b6:3c:89:ca:1d:d7:4e:d2:5a:23:f6:
                    c7:ce:42:e7:14:db:3d:b6:a9:aa:11:37:a3:3f:23:
                    25:e5:6c:61:6a:26:52:de:b8:2c:ac:a4:67:30:62:
                    8f:3c:5a:23:fa:fb:56:a3:af:e6:79:a3:41:53:f4:
                    08:f6:35:62:00:5e:0d:77:5c:dc:9e:d5:fa:e8:5b:
                    40:4e:0f:aa:7d:d7:eb:29:b4:62:cc:e3:f8:31:ae:
                    39:46:46:cb:3a:23:15:ff:ee:15:12:b8:3e:84:a2:
                    81:e3:2f:15:ec:ba:97:55:a1:7b:16:a9:16:7e:c8:
                    5f:78:fe:4e:cc:8c:69:c4:07:cb:a9:40:0f:4a:a8:
                    ae:9e:19:0b:32:a1:19:f6:68:f5:06:19:cf:37:05:
                    06:e6:df:fe:40:81:c0:cf:e5:40:df:b1:45:2b:67:
                    d0:4d:8e:84:4f:a6:f6:cb:27:ec:09:ac:c6:cd:6a:
                    ea:e1:28:e7:7d:8d:fd:c3:91:09:3b:09:1b:c4:6a:
                    6e:22:03:06:f9:f0:1b:97:ff:67:e7:8f:21:ea:1b:
                    a4:d0:03:e0:84:c3:67:07:d5:c9:a2:3d:73:27:85:
                    24:ab:a5:ba:c3:16:84:88:b7:02:74:80:ed:80:01:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:D5:17:FE:BA:8E:EC:71:3E:03:B8:C4:49:8E:F5:A0:9C:44:FE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4PXVF_66juxxPgO4xEmO9aCcRP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:db:35:60:33:6a:be:54:9d:d4:d7:8b:0e:53:6d:d0:93:
         e5:d8:1f:fa:aa:1b:2f:23:11:9d:93:82:21:c5:42:d9:01:57:
         83:05:e3:bc:dd:36:8e:00:a5:08:cc:a8:70:88:e2:f7:a9:6e:
         2d:27:c0:00:52:96:14:4c:b2:8e:70:92:68:24:72:e4:cc:2b:
         4a:8d:c0:09:b8:27:db:2e:77:4d:1a:f9:95:f7:06:44:aa:b2:
         7b:73:8e:13:ff:86:3c:eb:26:64:2b:5f:ef:c3:d8:32:e1:7d:
         35:95:8a:02:f6:eb:a2:66:cf:7d:45:0b:c2:bf:07:06:0b:4b:
         9b:64:a0:03:00:0d:65:53:2b:5b:12:dc:44:a1:66:f2:17:7b:
         68:d8:92:f5:ad:d7:7f:f4:15:2d:ef:16:d7:18:f5:6a:57:c5:
         a2:cb:4f:2f:6e:1d:c1:75:e2:76:b4:b8:a0:65:c8:df:99:93:
         ab:6f:bd:d1:0e:2a:ac:c3:ae:53:62:c9:ac:40:85:a7:d8:77:
         b3:a9:85:6f:a5:85:b7:05:91:88:35:bd:53:17:e5:32:f5:b1:
         06:81:d0:0c:09:d8:4c:92:f3:1c:32:5e:ed:a8:14:f9:c8:75:
         41:93:39:e8:b8:4a:34:b5:b3:d7:c7:a1:cc:14:c1:38:cc:98:
         a5:e2:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:14:46 2025 by rpki-client