Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/U8ZCRaN_OopJJF5g5-Lft-Y5D4o.roa
File:                     U8ZCRaN_OopJJF5g5-Lft-Y5D4o.roa (raw, json)
Hash identifier:          NdWcDvHGUYJf/m3hoCDPrjgKjaamhryHsJurZCDwU3E=
Subject key identifier:   53:C6:42:45:A3:7F:3A:8A:49:24:5E:60:E7:E2:DF:B7:E6:39:0F:8A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01F8
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/U8ZCRaN_OopJJF5g5-Lft-Y5D4o.roa
Signing time:             Mon 01 Sep 2025 01:29:23 +0000
ROA not before:           Mon 01 Sep 2025 01:29:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 22:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=53C64245A37F3A8A49245E60E7E2DFB7E6390F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:ab:00:41:50:1e:0d:20:b4:65:1c:63:ac:
                    42:4e:a5:3e:d2:c0:ca:48:74:ed:bb:6d:f1:d8:b3:
                    4e:44:12:52:e0:0f:ec:2d:be:5d:76:27:66:95:b3:
                    2f:08:7a:37:70:e8:c5:66:c1:b2:5b:b2:f5:58:08:
                    34:40:0b:f4:ac:5c:cb:72:f8:6b:81:79:b4:fc:18:
                    03:1e:a2:29:ac:bf:ad:6b:bc:b9:95:0b:5f:9e:36:
                    02:52:87:d2:3c:09:8a:94:71:96:5e:af:d8:3c:7b:
                    05:62:0b:e9:d7:d3:26:ad:7b:5c:fc:20:d0:d1:ee:
                    0c:04:65:ef:0b:c6:b3:b5:31:2e:22:55:2a:e9:c6:
                    e9:5a:a3:5c:13:b7:0a:13:62:ea:6a:7d:73:90:cb:
                    1f:75:93:81:79:5d:ec:17:d1:9e:6b:56:61:4f:ec:
                    d1:e7:6a:6b:52:ae:f6:29:52:fc:8f:46:a4:cc:3f:
                    d6:db:dd:a7:a5:86:8a:e7:af:9b:2d:55:62:45:a2:
                    d0:c0:b4:68:89:61:00:21:62:d7:7e:96:5b:9a:dc:
                    bb:f9:95:c9:b4:c5:af:54:9b:dc:52:df:05:4b:8b:
                    37:c8:af:bb:de:d9:ee:90:77:80:0a:c5:dc:7a:be:
                    06:42:8c:15:eb:64:4f:12:c5:1d:e5:bd:a2:14:6a:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:42:45:A3:7F:3A:8A:49:24:5E:60:E7:E2:DF:B7:E6:39:0F:8A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/U8ZCRaN_OopJJF5g5-Lft-Y5D4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:c8:26:47:54:f0:34:f1:34:e2:ea:87:d1:2c:0c:89:52:
         92:2e:0b:ba:fc:20:62:de:dd:ee:ae:13:8d:65:91:38:22:e2:
         47:44:a5:23:5a:49:97:ad:46:ce:4a:9a:43:7f:f5:67:79:3e:
         ba:ad:fa:43:db:9c:5a:89:45:25:cc:6c:58:3c:cf:a7:c2:97:
         7f:bf:63:1e:74:07:49:e7:73:e0:e2:a3:e4:cd:52:b5:93:2e:
         11:2a:24:26:d4:23:d0:1a:ba:65:0e:25:1b:a0:c3:52:d3:44:
         76:78:ac:0f:13:be:7b:70:f6:26:b2:73:01:9a:9b:1a:d8:10:
         1f:f3:23:5d:5e:17:74:b9:4c:59:0a:cb:85:4d:69:50:ff:c7:
         63:0e:5d:71:79:84:75:9a:6e:10:58:e7:04:29:a6:76:5f:f3:
         ae:5f:98:9d:3c:a4:97:63:0e:37:ac:a4:2e:e3:a3:9d:29:c8:
         18:22:28:7e:29:12:f2:0f:5b:03:74:6f:c0:af:e0:b1:96:a8:
         ef:6d:d3:e9:d9:4b:b2:6a:0c:a7:ae:aa:19:8a:1a:b8:f0:f7:
         0e:82:8a:9e:10:7e:bd:03:32:9c:b2:56:77:a5:85:03:c2:46:
         dd:53:48:f8:92:0b:65:f5:2a:9e:c2:1a:6a:e4:c7:41:f9:7f:
         73:b8:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:53:04 2025 by rpki-client