Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dT1zCbLu4nUw8c-jaQbOZVEYpqA.roa
File:                     dT1zCbLu4nUw8c-jaQbOZVEYpqA.roa (raw, json)
Hash identifier:          8s9gJiVhMKwetn0cB1UhAP5azdI6+tsYxvXyMH9PWjk=
Subject key identifier:   75:3D:73:09:B2:EE:E2:75:30:F1:CF:A3:69:06:CE:65:51:18:A6:A0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0483
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dT1zCbLu4nUw8c-jaQbOZVEYpqA.roa
Signing time:             Wed 01 Oct 2025 01:39:52 +0000
ROA not before:           Wed 01 Oct 2025 01:39:52 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:52 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=753D7309B2EEE27530F1CFA36906CE655118A6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:77:7d:22:4e:cd:eb:0c:2c:08:3e:9e:7b:
                    17:0f:9d:08:4c:ba:16:2f:c4:29:b2:b4:55:2d:b1:
                    c6:4f:55:f1:d3:9d:c7:b9:ae:e0:01:6a:df:c6:23:
                    e1:6a:c6:cf:95:d0:98:ec:10:8a:2a:42:70:fa:c4:
                    62:22:80:b7:42:84:06:65:bc:ba:41:7a:bd:3b:ba:
                    ed:32:cc:1e:71:9c:73:2a:e5:71:ae:b4:fc:d7:a5:
                    97:3f:19:f3:d5:e3:63:c1:43:b8:18:b2:81:e5:56:
                    3c:f8:a6:56:20:b8:0f:41:5e:ae:a3:bc:53:1c:c0:
                    67:a9:51:ad:cc:06:78:de:5f:8c:c5:93:ed:64:87:
                    c2:c1:00:b8:0d:19:ba:a6:6c:ee:40:65:88:b9:80:
                    bc:e8:10:89:76:47:ab:9f:e4:0a:96:e3:4e:32:22:
                    10:a3:2c:41:4d:56:94:ce:ed:c4:e9:82:1b:79:9c:
                    c9:e4:7d:34:f9:1e:2e:18:15:67:46:90:a2:dc:5e:
                    f2:8d:b9:33:ca:4f:02:ef:fc:19:2f:26:63:c1:8e:
                    7f:02:73:2a:40:3f:ab:22:73:ca:0d:b6:bd:78:27:
                    1e:02:61:e4:a0:64:a0:26:af:9c:15:49:32:8e:cc:
                    a3:ef:b9:fa:a2:0f:7b:91:3d:ac:4e:fc:6d:d1:fe:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3D:73:09:B2:EE:E2:75:30:F1:CF:A3:69:06:CE:65:51:18:A6:A0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dT1zCbLu4nUw8c-jaQbOZVEYpqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:57:15:8c:91:bf:76:47:40:65:e5:3d:12:8d:13:90:a6:
         52:c5:e3:f5:2f:52:6d:0d:f6:1f:41:7a:07:13:e9:b0:ca:eb:
         6d:9d:00:fc:3e:59:04:46:f1:b8:1c:0a:27:93:b8:b2:59:a8:
         0b:8e:aa:ee:6b:73:a2:2a:5c:80:b6:20:67:e3:cc:fb:13:cd:
         42:3d:a2:41:83:07:a5:85:8b:28:b3:58:89:91:3d:a5:a3:0c:
         6e:9d:6b:34:36:38:71:52:6c:dd:3f:2f:0d:4d:78:68:bf:94:
         c3:3a:ab:5b:09:c0:e4:fe:85:63:9c:79:d2:20:8f:41:61:19:
         cc:15:d4:45:14:a3:ba:d5:62:2f:f1:25:68:37:ad:9d:bd:c7:
         a6:00:fc:6e:c6:0e:ea:6c:21:58:e2:b0:92:c6:a9:fc:ef:da:
         45:f7:80:82:3d:00:4d:73:3e:a2:ba:31:f7:a6:03:eb:4a:ee:
         66:bf:26:0b:f1:35:97:48:d0:db:96:c1:c8:39:fd:dc:c3:ac:
         8e:8b:44:dc:ee:46:1b:c6:c9:8f:22:d8:47:92:02:eb:53:9f:
         df:bc:2d:df:d4:96:9a:aa:7e:24:51:74:e6:21:2d:22:31:e2:
         75:3a:67:32:5f:7c:05:9d:ae:b9:88:74:ff:91:41:a5:25:77:
         31:1a:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:36 2025 by rpki-client