Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa
File:                     1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa (raw, json)
Hash identifier:          p8m+xjyveG67SD9wwt5o2Q2Rcro1JqnLwgGqKXkzzWU=
Subject key identifier:   D4:AC:05:41:9F:2C:A4:50:DF:C4:19:A5:63:7C:29:34:6D:67:0C:29
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0487
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa
Signing time:             Wed 01 Oct 2025 01:39:54 +0000
ROA not before:           Wed 01 Oct 2025 01:39:54 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:54 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D4AC05419F2CA450DFC419A5637C29346D670C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:a8:de:18:67:ad:82:91:bf:e9:c1:97:8a:
                    49:86:5a:9e:06:d6:4d:75:0e:b8:f3:3c:4e:74:c8:
                    0b:83:6d:f8:b1:61:65:f9:d2:fc:11:f2:ad:ba:f0:
                    27:d8:2a:e1:93:db:bb:82:a8:a7:d6:6a:6c:3c:98:
                    19:2c:94:50:71:dd:19:88:83:95:9d:cd:b0:4c:82:
                    53:c2:3f:10:fe:ae:50:77:04:9d:db:e6:88:be:d2:
                    40:7c:ec:63:43:02:34:ba:cd:d1:9f:df:a2:8e:55:
                    10:0b:ec:21:78:48:dd:02:aa:a5:97:a1:30:cd:da:
                    3e:3a:f7:e7:fd:f7:aa:02:dc:56:7b:cd:1e:3b:93:
                    e2:08:96:11:65:30:46:78:b3:01:c5:21:8d:c0:2b:
                    20:ca:89:2a:ff:8e:ff:33:47:b8:5a:42:f0:7b:a4:
                    ab:dd:38:e4:87:6a:f3:94:41:6d:c3:36:77:a0:2e:
                    f7:6e:20:ce:81:66:2a:70:84:77:8f:a4:e3:93:95:
                    d1:22:3c:6c:a2:33:50:0b:4e:87:6a:09:b0:39:c6:
                    fe:f6:a5:e3:52:0c:bf:94:8a:e6:36:2a:ea:82:b0:
                    1d:4a:ce:38:31:ce:0e:95:72:81:43:e6:74:a7:c1:
                    67:14:a3:73:01:d0:e8:19:58:a0:7f:37:ae:1c:b6:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:05:41:9F:2C:A4:50:DF:C4:19:A5:63:7C:29:34:6D:67:0C:29
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:b3:3c:e8:e1:84:e6:33:e5:5f:ca:9a:b1:58:99:eb:e8:
         1d:ca:a3:b4:11:9d:65:3f:be:85:80:bb:1c:82:05:95:38:9c:
         ce:4d:6b:09:d7:98:95:79:26:7e:43:c3:6c:a4:f9:6f:f9:e1:
         b8:8d:86:1a:ee:c9:8a:20:f5:ee:26:cc:86:9f:71:65:d6:b5:
         a5:ee:dd:6f:aa:e2:03:48:d2:20:2f:44:84:99:71:1d:28:d9:
         b7:26:32:d4:82:fc:3e:0d:0c:93:85:f4:3a:24:ff:ac:39:18:
         3f:49:fd:73:fb:44:3b:48:7b:0c:77:c4:54:e2:54:3e:ec:78:
         07:e0:1e:6a:6b:25:da:66:92:bf:d0:80:5a:02:cf:52:5e:d3:
         26:28:4b:ee:6e:bd:1c:af:95:33:5d:df:35:32:4e:72:a6:dc:
         70:15:48:7f:ce:80:4e:83:2d:21:0a:95:66:f6:2e:d2:9c:35:
         04:31:ca:53:db:f5:81:de:92:d9:22:fd:08:f0:b7:55:19:ef:
         58:4d:83:0a:1e:5b:b7:78:9e:60:27:0a:90:f2:8e:da:13:5d:
         67:0e:0c:04:bf:62:cc:77:55:08:bb:11:74:e7:54:ff:16:86:
         70:6b:d4:f1:71:b8:91:db:cc:e3:65:92:70:15:34:d8:5f:a6:
         e6:4b:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:19 2025 by rpki-client