Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ae45xa-Fmk82YmlRzwVcjQnW0ck.roa
File:                     ae45xa-Fmk82YmlRzwVcjQnW0ck.roa (raw, json)
Hash identifier:          iIzkZG1ghYoqY4z3nRaWyQRnz36NZk2po3HD3h+b5y8=
Subject key identifier:   69:EE:39:C5:AF:85:9A:4F:36:62:69:51:CF:05:5C:8D:09:D6:D1:C9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       046A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ae45xa-Fmk82YmlRzwVcjQnW0ck.roa
Signing time:             Wed 01 Oct 2025 01:34:46 +0000
ROA not before:           Wed 01 Oct 2025 01:34:46 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 12:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:46 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=69EE39C5AF859A4F36626951CF055C8D09D6D1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:4e:48:da:22:67:de:73:5d:a5:cd:e9:b4:
                    7e:0c:f3:97:a2:d1:11:43:ef:a8:81:4c:5c:3f:73:
                    c4:5e:15:ac:44:02:3f:8c:c4:b5:bc:e8:26:2b:c1:
                    0e:fd:d4:92:16:09:eb:bc:dd:d5:0e:05:6a:5e:8c:
                    68:c1:a3:c6:87:6d:7e:e3:b8:95:38:8b:b9:de:e2:
                    64:93:59:20:9e:81:38:b3:a4:c8:e5:5c:69:57:30:
                    03:4b:fc:34:ee:d2:e7:1f:71:5d:83:a6:81:5f:60:
                    9b:d7:98:c8:09:00:2b:b3:37:b6:b1:d2:68:ef:71:
                    33:c8:05:a6:27:23:fd:56:c4:26:38:6e:3b:e5:01:
                    5c:85:26:5e:b6:89:ca:96:15:d3:79:59:8c:85:13:
                    d7:a0:70:09:2b:4f:de:87:b5:c4:46:09:6b:1c:75:
                    23:83:71:a6:e3:59:5c:02:49:88:a3:b2:d3:48:d4:
                    61:55:d6:c7:c5:70:52:b8:71:01:85:6b:ba:f5:a4:
                    52:d5:99:5b:f8:ba:f7:61:d8:75:96:01:54:ea:95:
                    ad:ab:be:2e:5b:1a:3b:bf:aa:33:31:9d:5c:cf:56:
                    7c:10:ce:b5:77:c1:e4:b5:f6:2e:7a:21:b3:a2:a2:
                    5c:99:7f:8e:ba:5f:3d:3f:d4:39:fe:6e:91:6d:d4:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EE:39:C5:AF:85:9A:4F:36:62:69:51:CF:05:5C:8D:09:D6:D1:C9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ae45xa-Fmk82YmlRzwVcjQnW0ck.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:58:8c:5f:86:84:e8:f4:02:e5:64:ca:3e:e5:3d:31:65:f2:
         43:11:ed:17:4a:f6:b0:10:35:e6:c3:de:67:b9:9c:7a:97:6f:
         0c:28:c3:f8:b2:76:68:b8:b0:02:3d:a0:85:ad:7c:ab:49:af:
         c2:db:f0:79:10:aa:ca:fc:7b:03:dd:f5:0c:d6:fd:d9:04:9c:
         10:b7:8e:e1:40:ad:12:c1:02:44:60:b2:78:a1:85:c7:81:87:
         5b:49:82:c1:44:ab:6f:e2:80:08:ec:94:f7:7e:97:a9:d4:74:
         11:95:37:b1:00:da:26:5f:e2:ec:e6:45:dd:d2:07:37:63:d3:
         04:81:0e:2d:de:a6:18:73:77:5b:d9:c3:bd:df:15:ca:3a:58:
         ac:c3:96:dd:71:d2:5f:88:17:a5:00:78:2b:5f:26:2c:2b:39:
         a1:05:a8:fd:c2:97:47:60:eb:e2:36:e4:39:10:1b:06:ea:e3:
         2b:1e:12:05:b3:b0:e0:b9:5a:1e:8b:20:9f:21:7b:b3:03:2e:
         f5:b0:61:7c:7e:f5:60:e7:53:75:1f:27:de:a3:a5:0d:1c:f4:
         1d:d4:66:99:9a:0b:1b:12:62:5c:ef:98:31:2b:05:43:0a:aa:
         d9:14:c1:67:20:68:2c:fe:c9:45:07:d4:a2:86:59:d3:87:c2:
         a0:f7:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:42:36 2025 by rpki-client