Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Bv0VdFqyM_aRqYenDWbaRtCEBlk.roa
File:                     Bv0VdFqyM_aRqYenDWbaRtCEBlk.roa (raw, json)
Hash identifier:          kdsNx2cg0FKOd7rCkyHNhRwH1ZDuCOGYpWWWKbGY7y0=
Subject key identifier:   06:FD:15:74:5A:B2:33:F6:91:A9:87:A7:0D:66:DA:46:D0:84:06:59
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0469
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Bv0VdFqyM_aRqYenDWbaRtCEBlk.roa
Signing time:             Wed 01 Oct 2025 01:34:45 +0000
ROA not before:           Wed 01 Oct 2025 01:34:45 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:45 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=06FD15745AB233F691A987A70D66DA46D0840659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:01:d9:4d:6e:ea:49:8f:d1:0d:63:86:e0:
                    26:bd:89:89:0a:ed:35:4e:d5:e2:57:b3:54:67:b2:
                    a7:b1:c9:68:34:7f:48:e2:ff:33:e2:64:62:5e:30:
                    ca:2f:84:7d:b1:44:65:23:9e:e6:c7:e3:d5:1f:b1:
                    1c:43:c9:b2:b5:d5:e7:ec:58:94:e6:8b:23:5d:00:
                    39:bd:ac:cc:0a:9a:20:c6:c9:b4:e7:cd:30:2b:3c:
                    a2:c4:15:53:93:68:17:3d:50:bb:9a:d7:1d:78:d8:
                    ca:f9:96:4f:56:8a:88:63:4e:4f:b0:6f:c7:9b:66:
                    76:62:01:1c:8a:04:ab:48:19:eb:cd:cf:0c:7b:cd:
                    89:92:c7:a1:eb:ae:b4:64:43:38:00:2d:01:b1:7b:
                    c6:cf:c6:37:cc:79:78:7e:e3:92:bf:92:00:74:62:
                    1b:99:36:aa:b6:c6:7b:7b:4f:6c:84:ff:8d:2d:5d:
                    1b:c2:ca:d8:92:39:8f:36:1f:0d:8e:36:87:74:e6:
                    c4:4b:be:e9:70:61:07:40:b3:9d:2b:60:b2:36:6f:
                    2e:d4:96:53:1d:65:21:79:13:43:86:93:0a:77:1b:
                    20:88:88:06:04:e4:16:bd:af:0d:b2:0e:3b:2f:54:
                    14:70:5d:9f:7f:7b:58:65:4d:a4:45:c2:ee:ab:9e:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:15:74:5A:B2:33:F6:91:A9:87:A7:0D:66:DA:46:D0:84:06:59
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Bv0VdFqyM_aRqYenDWbaRtCEBlk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:9e:fe:e8:f7:84:02:96:42:b3:6d:a4:73:9e:78:aa:65:
         3d:92:ad:50:76:83:02:ba:ed:d2:6c:cb:a7:c3:71:18:cb:1d:
         25:13:5f:d4:c5:f1:ce:a1:46:96:48:1c:8b:28:1b:2f:24:13:
         57:75:32:d0:35:60:bb:5b:74:0c:9d:fb:64:24:bb:69:22:24:
         20:b4:f6:37:41:31:b8:95:19:c8:ef:09:0a:c1:e5:5d:f2:56:
         8c:68:b7:0a:e3:62:80:7f:49:71:2b:3d:db:9f:bf:41:3c:9d:
         42:86:63:34:99:c4:b5:21:4d:dd:53:46:b2:8a:ec:ba:c5:3f:
         08:3e:12:73:bf:d3:81:4d:92:61:ec:08:04:3d:ac:96:af:e3:
         88:df:ad:ef:28:68:b7:8f:7b:48:be:25:72:d2:d6:83:dc:fa:
         44:d0:ca:ab:74:34:be:40:47:c3:cc:79:51:ce:68:8d:93:5c:
         ef:5b:9a:bd:b3:f1:2f:91:0b:01:91:78:58:4d:ed:7b:f4:24:
         20:2f:b7:30:64:cd:22:6f:39:d7:d6:da:1f:2a:69:28:82:da:
         1c:2a:bc:d3:3e:9f:d7:20:ee:ce:ff:7a:dc:82:c0:55:aa:57:
         75:19:7a:c7:76:e1:a1:f8:f1:ae:e5:3c:53:24:77:6d:d1:c9:
         18:da:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:45 2025 by rpki-client