Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/bySWuZw8jUsHvq0cVxzTGH3VXPk.roa
File:                     bySWuZw8jUsHvq0cVxzTGH3VXPk.roa (raw, json)
Hash identifier:          JGYFXkt/RJyex1ETzdBOGpQNR08hwpqgzU8wZ3Pm98o=
Subject key identifier:   6F:24:96:B9:9C:3C:8D:4B:07:BE:AD:1C:57:1C:D3:18:7D:D5:5C:F9
Certificate issuer:       /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial:       23
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/bySWuZw8jUsHvq0cVxzTGH3VXPk.roa
Signing time:             Fri 12 Sep 2025 07:31:36 +0000
ROA not before:           Fri 12 Sep 2025 07:31:36 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        192.58.10.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA30F686577D6576F647B295455535835130C3
        Validity
            Not Before: Sep 12 07:31:36 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=6F2496B99C3C8D4B07BEAD1C571CD3187DD55CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:48:a6:cb:f7:24:75:6d:8b:ac:66:08:d5:
                    03:26:c4:46:e3:f6:ab:f2:55:9a:26:65:b8:e5:67:
                    7a:de:90:2a:bc:41:2e:37:1a:13:f0:3d:c1:ba:5e:
                    4a:19:da:dd:9b:4c:de:7e:f5:89:f2:bb:dd:54:f8:
                    8b:ae:be:f9:49:60:d7:54:ab:65:19:fc:a9:28:59:
                    0f:22:af:a0:4d:dc:c2:89:3d:b2:c7:fa:20:14:28:
                    1d:f0:27:bd:f3:ff:ac:01:ef:51:12:72:68:aa:de:
                    ff:d2:2f:44:4a:c9:ab:06:34:f7:47:dd:02:31:58:
                    41:87:d8:7e:bc:75:79:87:30:72:e7:d3:07:b1:c2:
                    a9:a6:a8:7d:54:de:0c:ab:8e:39:4e:e6:00:48:4c:
                    b0:53:9c:33:c5:fb:0d:28:79:22:70:17:27:e0:55:
                    89:7a:75:8b:1e:48:88:9c:8a:ce:dc:17:00:98:dd:
                    16:c2:ce:19:c8:dc:5c:a6:bd:56:b6:7f:c6:f7:06:
                    4c:d1:0b:68:9d:a3:ce:25:c1:4d:00:ea:fb:b2:f3:
                    35:1b:1c:6a:95:0a:04:67:34:24:0e:49:73:43:b8:
                    db:3d:3d:03:b1:da:fe:37:75:0a:f1:9e:22:ce:3d:
                    72:11:6f:ce:3f:8a:36:47:bc:fc:51:7e:cb:0d:ef:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:96:B9:9C:3C:8D:4B:07:BE:AD:1C:57:1C:D3:18:7D:D5:5C:F9
            X509v3 Authority Key Identifier:
                keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/bySWuZw8jUsHvq0cVxzTGH3VXPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:c7:aa:9b:24:f0:35:1f:42:e4:84:84:fa:18:27:d7:38:
         a4:6e:a3:b2:20:d7:4e:7a:ea:ce:73:a7:4b:07:2e:61:40:a2:
         db:4a:d9:a4:2b:41:54:ba:67:73:d1:34:2d:f2:e7:5d:59:64:
         cc:79:5d:1d:11:25:39:c0:bc:3d:f3:25:c0:9c:86:70:1b:13:
         49:23:e7:c9:1b:2b:1f:c8:20:ef:54:1d:a1:84:e4:bb:be:02:
         58:fe:d1:9f:62:13:f0:47:e3:ac:dd:03:e0:82:5b:f0:49:4d:
         d3:b8:f6:c1:3a:f9:c0:f3:31:84:b3:0a:dc:6c:d1:2d:5d:14:
         e8:38:31:dd:ba:d0:85:68:e2:8a:a9:c2:35:92:d4:af:d4:b1:
         b0:25:3e:a5:f2:fc:6b:a1:3d:e6:bf:53:74:07:e9:19:b5:f2:
         ff:48:36:66:0d:61:9e:c8:4d:96:fe:34:1f:a4:04:c3:f5:a3:
         3c:33:e8:fc:d4:18:16:ae:af:e9:c9:ea:8d:d9:51:d1:5d:a2:
         f6:a3:38:c5:75:b7:ac:d8:35:e8:40:6a:01:dc:c2:34:8d:84:
         08:36:d8:fe:2e:06:e8:f1:95:fe:e4:6a:74:2a:cd:04:70:57:
         45:05:f8:9a:0d:4c:ab:f1:ef:7e:5a:06:d0:be:c0:83:c6:f8:
         99:01:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:43:56 2025 by rpki-client