Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
File:                     ryU8g5LonAEuIKsNIEjYFfZe7h0.roa (raw, json)
Hash identifier:          As/EaBYCkr8s9gzSqfW64gFifN1DLsn35We7Lhw66Uw=
Subject key identifier:   AF:25:3C:83:92:E8:9C:01:2E:20:AB:0D:20:48:D8:15:F6:5E:EE:1D
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       83
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
Signing time:             Wed 01 Oct 2025 01:34:12 +0000
ROA not before:           Wed 01 Oct 2025 01:34:12 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7514
IP address blocks:        113.192.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct  1 01:34:12 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=AF253C8392E89C012E20AB0D2048D815F65EEE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:81:46:e8:34:c2:de:c6:7a:29:a2:fd:0c:
                    5f:e0:b0:e9:1b:7a:93:ea:9f:4c:96:d5:00:88:f5:
                    30:5b:b9:96:6e:7f:32:12:53:62:c7:d5:ef:c2:88:
                    f1:0b:9a:9c:a6:f6:3c:fb:dc:b6:f8:0c:84:f3:b2:
                    73:e0:38:ec:ca:aa:61:09:39:a5:c1:f7:d6:71:6f:
                    47:6e:12:ab:16:ae:15:67:83:91:37:3a:59:18:ce:
                    1d:b6:1c:ab:77:ff:1f:f0:ee:a4:29:e5:59:32:51:
                    35:1e:e3:9e:3f:b5:f9:85:c0:8a:2a:d9:50:f5:7e:
                    20:20:51:c0:3d:92:4d:21:8a:b9:6a:2c:a7:27:ed:
                    13:37:95:93:44:1e:39:9e:e7:8f:07:4d:2a:7c:1d:
                    70:3f:80:e9:ee:79:ca:a4:9f:8d:3b:20:fd:5d:d5:
                    73:03:cb:7b:cd:8c:8e:5a:8d:8a:3e:39:26:80:22:
                    3d:06:11:d0:b8:e7:ff:ee:b6:22:5b:83:8a:a4:d6:
                    01:a0:8b:e6:a4:25:70:33:b4:fd:cb:ff:e2:43:98:
                    8b:3c:98:84:7d:e0:99:cd:d2:a3:0d:69:35:e7:2a:
                    3d:0b:02:f2:7f:2d:62:ae:00:dc:02:0f:54:2a:5b:
                    c2:24:23:22:18:a4:27:76:12:59:b0:39:6a:a9:9d:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:3C:83:92:E8:9C:01:2E:20:AB:0D:20:48:D8:15:F6:5E:EE:1D
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/ryU8g5LonAEuIKsNIEjYFfZe7h0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:a2:a6:53:5a:16:ec:d2:18:e6:32:e9:e4:86:17:c5:db:
         ca:9e:f2:60:d9:7a:ce:e4:0e:27:ca:bc:9c:d4:67:45:24:ae:
         69:b1:fb:e0:50:aa:f4:30:c4:d5:4e:79:27:a4:bf:57:3a:d8:
         30:c6:8b:82:0b:68:fb:46:30:14:a5:b7:f1:29:37:c0:df:69:
         5a:e8:2a:c1:f5:96:6b:52:3e:a1:a2:d9:af:06:4e:b6:a4:7f:
         76:aa:70:d7:aa:fc:62:3a:05:f9:ba:a1:9a:2e:2b:6a:0d:f9:
         c7:06:d1:18:9e:6a:40:4c:f6:4c:47:d2:98:6c:01:0c:30:85:
         d6:c5:7f:c4:48:6a:c3:6f:db:dd:87:be:33:02:4f:f6:04:50:
         9f:f0:b4:cb:5a:fd:c2:85:88:b3:cb:c4:27:6f:ce:9f:5e:bd:
         ba:cb:08:a8:f1:cb:39:c7:c8:f4:75:c2:3c:e4:34:d3:f8:51:
         dc:c9:b8:ca:e6:d1:bc:1f:d7:8b:37:70:76:07:75:3c:4b:19:
         10:26:d2:85:29:18:cd:6a:da:9c:ef:ff:e7:36:58:32:25:29:
         e6:de:91:ef:17:87:14:e1:2d:fa:d5:45:0e:9c:f1:5a:4b:93:
         03:1a:08:c7:72:c7:e3:e9:25:dc:d6:80:85:c5:50:de:55:3e:
         64:ed:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:08 2025 by rpki-client