Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyU6E95d-bb-RiTZnGxL8oGFUEo.roa
File:                     SyU6E95d-bb-RiTZnGxL8oGFUEo.roa (raw, json)
Hash identifier:          W5fEUUvRRbbS883llYAJ6zJgF4eoRJ62EK09lZz4o+0=
Subject key identifier:   4B:25:3A:13:DE:5D:F9:B6:FE:46:24:D9:9C:6C:4B:F2:81:85:50:4A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0463
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyU6E95d-bb-RiTZnGxL8oGFUEo.roa
Signing time:             Mon 01 Sep 2025 01:38:25 +0000
ROA not before:           Mon 01 Sep 2025 01:38:25 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.205.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 05:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Sep  1 01:38:25 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=4B253A13DE5DF9B6FE4624D99C6C4BF28185504A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:ef:9b:26:49:b9:b3:3a:36:11:9a:df:7e:
                    08:fb:2d:a3:56:1a:55:f1:33:38:67:43:e2:f5:89:
                    3f:7b:f4:06:ea:a0:6d:91:59:09:5c:7e:00:ac:61:
                    79:d8:e0:bf:d3:5e:13:80:27:1f:2d:bb:28:ec:7f:
                    ae:4b:d4:7d:90:1b:e2:04:f3:87:41:f0:df:ed:0d:
                    85:a2:f7:61:1c:59:a5:71:b9:6c:78:fc:79:80:0b:
                    63:22:32:f7:c6:9a:47:a9:45:f9:80:d7:63:f6:a4:
                    fa:9a:dc:9f:39:1b:01:54:b8:84:f3:6a:e5:ce:35:
                    9f:4a:41:47:df:93:29:be:bc:ec:0f:c0:df:a1:83:
                    1b:ea:7c:b6:71:d2:14:7c:07:25:e0:62:2c:42:d7:
                    60:bb:e2:ef:cc:a9:b2:a7:2f:ff:a3:e2:a2:c0:c1:
                    c6:b7:fa:f4:c8:20:ee:24:51:9f:e1:22:b1:27:06:
                    bf:d6:87:be:61:5a:e2:99:9d:44:35:b9:e0:fb:c0:
                    dd:49:f3:70:3b:62:15:66:be:be:4d:70:c6:f3:80:
                    6d:21:d2:bb:15:aa:aa:f7:f6:4f:bc:5d:5a:bf:94:
                    73:71:82:c0:b8:8c:07:60:77:e1:3e:4a:43:d3:43:
                    38:a5:b4:60:8c:0d:74:b7:4a:cb:f8:ca:f4:c9:85:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:25:3A:13:DE:5D:F9:B6:FE:46:24:D9:9C:6C:4B:F2:81:85:50:4A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SyU6E95d-bb-RiTZnGxL8oGFUEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:4d:4e:c4:14:5f:4a:d0:3c:6d:2c:32:a2:c8:d6:40:0b:
         50:a8:03:24:6f:37:41:93:b6:84:36:3c:6f:8a:51:54:71:58:
         5e:7e:a7:33:bf:58:b4:af:3c:b4:af:32:0d:29:d9:70:68:6c:
         c5:05:7c:b3:01:ac:3e:94:1e:53:25:a0:a7:4d:e8:8a:4a:f1:
         18:0d:ed:4e:0c:3d:e0:c0:06:0a:6d:92:0a:57:8c:2b:83:d1:
         16:e5:e0:30:c5:61:4b:bb:88:81:97:92:f7:da:0a:e5:0a:13:
         ad:42:a2:4c:17:dc:f6:0e:3d:25:eb:bb:17:ed:40:d7:c8:bd:
         e7:a2:92:6c:0c:04:a5:cd:6e:c6:03:f9:fa:6a:9c:1b:f6:7a:
         ba:c7:00:52:5a:63:49:2a:9d:cd:8b:21:cc:5b:5b:fc:69:53:
         13:66:5c:54:c0:d4:52:42:3c:b5:b6:3d:ad:24:12:a6:27:6a:
         f8:c0:dc:f0:3e:c1:b4:58:c9:ba:2c:d4:72:5f:a7:f6:f3:63:
         98:cd:94:eb:44:f1:13:a8:80:3e:38:46:57:ec:57:46:c1:61:
         14:f1:1e:3e:c9:01:94:47:24:c6:50:a3:e4:29:ec:2f:2b:06:
         3f:b1:fc:8b:7b:49:9a:08:c0:20:ed:30:94:91:4c:1f:13:ba:
         20:f7:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:11:01 2025 by rpki-client