Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-Cq6G0FRnIzGAUMcw6PLu3gGj9I.roa
File:                     -Cq6G0FRnIzGAUMcw6PLu3gGj9I.roa (raw, json)
Hash identifier:          02dUdw6nkmUwGxiEUh5CgLfCdEtSVBmbrBv/deBtNAY=
Subject key identifier:   F8:2A:BA:1B:41:51:9C:8C:C6:01:43:1C:C3:A3:CB:BB:78:06:8F:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       048D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-Cq6G0FRnIzGAUMcw6PLu3gGj9I.roa
Signing time:             Wed 01 Oct 2025 01:39:57 +0000
ROA not before:           Wed 01 Oct 2025 01:39:57 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:57 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=F82ABA1B41519C8CC601431CC3A3CBBB78068FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c2:94:d6:56:f8:f4:05:68:27:a0:89:2b:d1:
                    97:38:20:70:1f:ac:57:81:a1:3e:ca:6e:bd:31:f8:
                    35:96:f4:a8:e9:2c:b1:06:1b:3f:4a:fb:ba:b9:16:
                    a6:f4:8e:4f:7b:10:94:b1:5d:21:f9:b8:fd:30:ac:
                    a1:8c:1d:35:22:6a:0f:48:f9:19:04:ed:84:06:1b:
                    22:d7:6d:73:0e:b4:e8:0f:10:fc:7c:50:ba:13:73:
                    e7:35:2e:a4:21:86:9d:6f:b5:de:39:8d:f1:ec:91:
                    3f:6d:3c:82:86:fe:47:7e:2f:b9:4e:5c:17:1e:35:
                    83:8f:3e:c1:ae:24:1d:d2:38:32:ad:89:ed:b2:f5:
                    3b:b7:64:49:0e:60:9c:68:f8:20:9e:bc:14:e8:99:
                    1b:0e:28:85:39:e1:5a:61:3e:e1:18:2e:8c:1f:12:
                    ab:be:16:27:59:32:7f:48:10:d4:02:56:c8:4d:ae:
                    19:ce:cc:52:d5:2b:94:81:51:be:fa:4f:a8:5f:67:
                    18:b7:7a:0f:41:01:7e:56:88:a7:3d:9a:d0:16:20:
                    32:9d:db:26:3d:63:e1:19:49:eb:90:17:f0:33:22:
                    88:27:56:1b:32:c4:cb:62:8d:a7:54:d2:dc:3d:b5:
                    46:3e:53:0c:3d:c2:10:ab:c2:8d:c5:b8:76:15:6f:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2A:BA:1B:41:51:9C:8C:C6:01:43:1C:C3:A3:CB:BB:78:06:8F:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-Cq6G0FRnIzGAUMcw6PLu3gGj9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:6d:f2:d6:67:13:98:7e:82:ec:d8:d1:f7:e8:16:fa:05:
         86:03:b8:f6:fb:a2:7f:28:bd:cb:8f:7b:8a:29:70:d9:42:4a:
         54:e9:42:3a:99:73:fe:5f:66:d6:a1:1f:94:97:5e:a6:28:19:
         1c:4c:6c:fc:05:b5:ab:fe:2d:84:f8:d2:ee:84:86:bd:15:41:
         62:32:d6:b7:5c:c2:b1:9e:e7:cc:28:bf:cf:d0:88:a6:4b:e4:
         dc:50:d9:c9:02:37:ec:ad:a4:79:58:c0:64:1e:ef:36:f5:e3:
         02:a6:2e:5c:c2:51:ee:74:09:b8:b3:f3:4e:98:c5:77:7c:77:
         c2:67:34:92:69:43:cd:95:a9:df:28:95:0f:1f:98:88:a0:7f:
         86:fe:0e:e9:f0:d7:b5:9b:97:0f:d5:30:75:70:19:f7:51:f2:
         6b:56:09:2b:cc:5d:87:83:6a:15:16:ea:40:9e:af:b3:d7:43:
         44:7a:0b:ab:b2:66:8a:56:6f:47:45:b4:71:0f:be:d0:f6:d8:
         c9:54:a2:93:84:0a:71:f7:e1:5a:17:bc:3f:01:c1:71:a2:e0:
         e4:bb:9a:6b:7b:c5:bc:84:78:d0:bc:b4:87:20:9d:fe:d5:7b:
         76:9a:a4:fa:b8:df:27:6b:01:d1:10:11:ad:64:28:a7:ac:82:
         57:8d:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:17 2025 by rpki-client