Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mqMymGfb8kK9q0vVPQPlv0Swg2c.roa
File:                     mqMymGfb8kK9q0vVPQPlv0Swg2c.roa (raw, json)
Hash identifier:          DD6HOIGSn1VBZqclE9BN+k6VN/NQgG0emQMlssE+oe4=
Subject key identifier:   9A:A3:32:98:67:DB:F2:42:BD:AB:4B:D5:3D:03:E5:BF:44:B0:83:67
Certificate issuer:       /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial:       1B
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mqMymGfb8kK9q0vVPQPlv0Swg2c.roa
Signing time:             Wed 01 Oct 2025 01:28:58 +0000
ROA not before:           Wed 01 Oct 2025 01:28:58 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     8220
IP address blocks:        202.255.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 05:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Validity
            Not Before: Oct  1 01:28:58 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9AA3329867DBF242BDAB4BD53D03E5BF44B08367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:22:6e:19:74:74:e1:af:eb:35:49:36:8c:d2:
                    8d:1d:0d:62:e8:de:93:71:eb:fd:2d:10:d2:7b:36:
                    0d:b9:97:bb:57:5d:62:b4:e1:ac:96:2f:6a:fd:c5:
                    c5:b5:46:02:5c:f0:e1:53:9c:88:08:70:1c:3a:b2:
                    63:e8:41:76:43:dc:ad:ca:94:3f:65:ec:53:7a:83:
                    73:dd:16:83:26:51:b6:92:be:5f:99:4e:2a:78:e1:
                    bc:b4:32:bc:6f:83:dc:28:3b:1c:39:a1:04:00:da:
                    7a:95:af:c3:d3:05:38:f6:c4:57:dc:56:c8:43:64:
                    6d:8a:15:b4:58:d1:1c:f1:0c:63:99:02:1d:48:b6:
                    24:7c:8e:e1:fb:52:47:ad:d8:7b:5b:4f:76:a4:6d:
                    b6:fd:fa:e0:52:70:0e:17:8b:73:d8:09:04:31:63:
                    4a:b9:53:7f:50:27:e1:78:41:2d:7d:4b:1a:b3:65:
                    74:9e:d6:59:28:53:72:5d:fa:2e:a4:de:7d:a1:48:
                    0a:23:6c:19:32:7a:f6:e7:9f:a8:f6:91:d8:3c:43:
                    8a:17:d3:c5:43:d4:31:bf:70:79:d0:b2:76:d6:6c:
                    3a:1f:1b:79:b8:b0:cb:fd:e0:28:29:6e:79:6b:0d:
                    26:07:be:61:c2:a3:ee:c1:60:04:74:b8:80:2a:d3:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:32:98:67:DB:F2:42:BD:AB:4B:D5:3D:03:E5:BF:44:B0:83:67
            X509v3 Authority Key Identifier:
                keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mqMymGfb8kK9q0vVPQPlv0Swg2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:36:4b:60:30:aa:54:b8:80:3e:0f:42:d6:11:f3:73:a2:
         09:2d:00:75:5e:99:2a:48:39:e5:c8:03:51:80:b4:2b:49:7d:
         5a:d1:64:d4:ee:cc:5d:0d:8a:2c:9e:fa:f7:2a:85:1e:9e:64:
         c5:7d:a1:7c:02:09:91:3a:10:1a:59:54:d8:ef:5f:aa:fd:9c:
         a4:4a:5b:fa:a0:f5:e8:d2:92:cb:68:ae:0f:2c:e0:1c:f0:72:
         8d:76:41:89:a4:ea:c1:fb:97:56:c4:a0:62:b6:88:4b:de:ff:
         57:9c:c6:f5:05:32:f4:2c:af:4d:e8:a7:48:bf:d5:5f:c3:84:
         92:59:a4:0f:7d:fa:7c:11:ab:61:71:1b:78:a9:0c:2d:7b:25:
         16:fa:93:ed:22:e6:cc:3f:c9:57:b2:3e:5a:d8:26:b2:62:be:
         86:8b:0d:32:c8:5b:c2:1a:80:f6:3f:1a:ea:26:c4:60:0f:f8:
         f5:10:1e:e7:9a:36:ff:fa:e3:30:da:88:13:e6:6d:49:11:0d:
         7c:1a:38:ef:11:b0:4f:64:f2:df:78:50:81:f0:2c:fd:51:a4:
         19:d1:ab:40:54:d7:cf:48:1a:fa:17:1e:42:ce:cd:1b:bc:1c:
         3d:3c:e2:3d:22:68:c7:88:96:c7:6f:a9:1e:e4:d6:b2:77:d4:
         4c:b6:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:34:19 2025 by rpki-client