Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ByjGDiSdLwXde9Y01LsAO_aZlD4.roa
File:                     ByjGDiSdLwXde9Y01LsAO_aZlD4.roa (raw, json)
Hash identifier:          W6A3KUON686xRiaLAqJE9DKvBchAzHodNSByiE95kus=
Subject key identifier:   07:28:C6:0E:24:9D:2F:05:DD:7B:D6:34:D4:BB:00:3B:F6:99:94:3E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       047E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ByjGDiSdLwXde9Y01LsAO_aZlD4.roa
Signing time:             Wed 01 Oct 2025 01:34:57 +0000
ROA not before:           Wed 01 Oct 2025 01:34:57 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 12:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:57 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=0728C60E249D2F05DD7BD634D4BB003BF699943E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:a8:6d:fb:89:b5:df:98:16:83:65:65:82:
                    b1:86:d5:be:05:e5:4f:20:c1:10:d0:10:a7:db:d6:
                    49:58:c4:28:ec:c9:a1:a6:68:58:e0:9d:7b:fe:0e:
                    a8:ac:b1:de:1e:40:d5:0e:68:aa:ae:ae:a4:c8:4a:
                    9e:37:d8:49:92:cc:80:be:71:05:c0:a2:5d:c0:b8:
                    be:35:8c:10:30:85:63:e2:3a:a8:eb:f6:cb:da:4f:
                    83:2b:99:ba:3a:d4:89:d1:06:5e:99:81:61:b8:de:
                    3c:ee:20:47:12:43:6b:95:36:69:a6:b0:59:d1:14:
                    3d:3d:0e:99:6a:c6:2f:0b:46:af:fe:17:62:2b:3c:
                    c7:c1:ea:c9:cc:04:c9:6c:70:2a:8a:d0:28:7f:5f:
                    87:cb:97:d0:53:0e:f3:34:eb:1a:cf:89:3d:6f:f3:
                    b9:18:aa:a6:6f:77:c2:6b:95:52:af:9e:49:bf:ce:
                    b3:87:02:7a:7f:a6:14:5e:bd:14:40:c2:67:9d:fd:
                    eb:93:8e:15:05:e7:bd:12:e0:bd:71:5b:2a:c3:c9:
                    ea:69:91:34:fe:7f:69:f0:3f:a2:e4:01:f1:5a:63:
                    a2:95:d8:97:61:d8:af:5d:18:87:5a:ef:64:b5:ff:
                    5d:0a:0c:02:1a:27:b0:6a:26:96:8a:cf:9b:4b:93:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:C6:0E:24:9D:2F:05:DD:7B:D6:34:D4:BB:00:3B:F6:99:94:3E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ByjGDiSdLwXde9Y01LsAO_aZlD4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:57:fd:d0:0d:1e:6b:5a:2d:ba:b6:c8:83:8e:9c:e6:e3:f7:
         57:f5:72:e9:5d:35:8c:55:d6:1b:cd:69:14:3a:88:88:e3:5c:
         a4:ae:93:65:ac:4c:a4:5d:ce:91:0f:e2:01:15:83:00:10:30:
         93:95:67:e8:a5:ae:35:69:98:f0:d5:b5:b5:12:51:88:04:c3:
         30:f1:3c:b9:19:8d:0e:80:d2:12:0d:c5:55:e5:74:1c:ed:e9:
         20:70:d4:c5:f6:40:0e:cd:1d:dc:e2:8f:a8:db:04:20:66:14:
         28:74:8c:0b:34:11:82:5e:fd:5d:0d:03:40:32:15:e5:55:b7:
         dd:fa:db:a4:d6:27:e4:18:fc:97:56:3b:98:4e:34:72:c6:89:
         47:71:10:22:34:c1:c4:7b:c3:1e:3f:bf:f6:6c:48:e6:9a:5d:
         3b:bf:55:b5:24:de:c6:d7:84:68:e7:87:d1:cc:b7:ca:b8:e4:
         36:f3:e6:5e:1b:ce:e5:0e:61:ef:98:31:99:f3:91:bc:86:cb:
         99:4a:33:d3:73:50:38:e0:03:57:ec:84:a8:c8:12:9d:18:7d:
         48:2e:36:f9:01:e7:41:14:a1:39:dd:e7:59:97:d9:b6:d7:32:
         da:25:e9:13:07:e7:63:fb:63:b2:ac:6c:dc:a2:39:a2:52:dd:
         1a:99:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:46 2025 by rpki-client