Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/OD8q55TEmiOLmeZhFKmOuYQCODg.roa
File:                     OD8q55TEmiOLmeZhFKmOuYQCODg.roa (raw, json)
Hash identifier:          bWTX3NIV8ViqOgtudUzOTknWCUbVmZyqND4jvO9kw+8=
Subject key identifier:   38:3F:2A:E7:94:C4:9A:23:8B:99:E6:61:14:A9:8E:B9:84:02:38:38
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0137
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/OD8q55TEmiOLmeZhFKmOuYQCODg.roa
Signing time:             Wed 01 Oct 2025 01:33:25 +0000
ROA not before:           Wed 01 Oct 2025 01:33:25 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     59099
IP address blocks:        210.231.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Oct  1 01:33:25 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=383F2AE794C49A238B99E66114A98EB984023838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:ea:b9:54:c5:2a:0d:a7:0a:c7:8d:3d:23:
                    75:6e:87:e9:65:94:13:5e:32:4c:7b:21:37:d5:6f:
                    0f:a0:0e:1d:e8:c1:5b:86:56:2a:21:9c:72:27:c9:
                    00:17:b3:97:23:3d:76:61:d5:1a:55:24:0c:28:27:
                    d0:7c:48:90:6b:fd:86:13:8f:45:cf:54:6c:16:48:
                    3e:ef:c7:0c:ba:5f:92:3c:22:cb:8f:70:27:12:16:
                    98:ad:a2:53:10:aa:82:10:72:56:e4:73:cc:ed:cb:
                    aa:73:32:f6:d2:b1:b3:1a:40:be:23:db:7c:4d:e5:
                    15:e7:39:05:aa:10:80:a9:f5:7c:94:fb:76:ad:27:
                    0d:4c:96:bb:39:97:94:a3:cc:3b:1e:c1:b8:90:f9:
                    af:df:20:ae:c7:5f:0d:44:3d:93:d4:00:9e:37:ea:
                    f5:fa:9c:cb:94:04:85:76:ea:51:23:7c:f9:75:b7:
                    d8:77:3e:9a:93:5e:1e:93:1a:9f:f1:aa:99:dd:4f:
                    ed:f5:1c:cc:55:46:e1:90:ef:bb:18:a1:ad:be:08:
                    48:78:80:eb:1e:ca:0d:43:d3:32:b2:51:e3:a1:05:
                    32:98:ec:3a:0a:19:67:6f:d5:28:55:90:fc:f4:cc:
                    32:70:a9:7c:b6:71:4a:c9:f5:65:dc:3f:27:2b:3a:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3F:2A:E7:94:C4:9A:23:8B:99:E6:61:14:A9:8E:B9:84:02:38:38
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/OD8q55TEmiOLmeZhFKmOuYQCODg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:79:8d:a2:39:7e:41:b1:18:56:75:61:5b:54:5d:11:5f:
         5f:0f:88:06:44:7d:86:86:44:ce:ae:eb:4d:c9:82:a2:84:6f:
         6c:31:1a:68:58:e3:03:22:81:54:41:95:e6:8a:6d:c5:54:51:
         a5:b9:ae:5b:0b:f7:36:a1:04:9c:d9:41:1e:3e:eb:18:03:56:
         f3:d6:54:52:1d:1c:b6:28:ae:64:87:c4:4e:b3:5c:ce:16:39:
         a0:fb:5d:ce:2f:46:aa:ab:33:0a:c5:06:2c:5d:30:fb:79:ee:
         fe:f1:f1:b5:6d:9b:59:c7:05:51:aa:85:6b:0e:d7:7a:cb:b8:
         bf:6c:12:61:53:f1:84:97:07:9d:8d:7d:40:c6:e0:7f:26:13:
         27:d8:aa:75:f0:8c:62:e2:58:42:b1:86:88:f7:a9:36:ad:6f:
         fc:8b:5a:e9:9e:85:52:31:e5:34:62:79:53:82:7c:7d:a0:89:
         ac:17:6d:f5:08:2c:22:9e:f8:b6:30:77:1f:cf:73:bf:b2:dd:
         5b:d7:4d:6f:6d:b3:78:52:fa:04:7c:c9:a5:0e:fb:dc:a2:09:
         9c:54:5a:c2:5a:7b:da:95:73:99:49:c7:26:91:11:37:e9:f1:
         50:d7:b6:52:36:71:49:2f:80:17:67:cd:b8:28:1a:ec:0d:5e:
         fc:0d:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:04:36 2025 by rpki-client