Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hb6qWIs24UnwEileLjgcEsvULc8.roa
File:                     hb6qWIs24UnwEileLjgcEsvULc8.roa (raw, json)
Hash identifier:          o7H0o7iVvEpkkHspR2FgJdCu3lWJGZNVHoZWED8P3rM=
Subject key identifier:   85:BE:AA:58:8B:36:E1:49:F0:12:29:5E:2E:38:1C:12:CB:D4:2D:CF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       047D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hb6qWIs24UnwEileLjgcEsvULc8.roa
Signing time:             Wed 01 Oct 2025 01:34:56 +0000
ROA not before:           Wed 01 Oct 2025 01:34:56 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:56 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=85BEAA588B36E149F012295E2E381C12CBD42DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:f2:fe:44:62:32:76:0c:c4:18:55:d4:08:
                    7f:f9:53:89:73:a8:1f:94:a0:91:86:89:f7:78:45:
                    bc:24:75:5a:6e:af:7c:c4:a5:bd:31:58:04:d3:f8:
                    8c:e6:73:db:21:dd:8d:7a:0b:1e:28:74:97:b6:71:
                    57:9b:ef:56:51:01:4c:ac:a2:39:8f:79:55:e9:ca:
                    a3:7f:9f:a5:0e:7b:b1:6e:b0:aa:17:e2:bd:0b:c1:
                    ad:a6:59:b8:76:99:ec:51:bc:27:2e:a8:6b:a8:bc:
                    fc:2f:66:b3:13:38:f0:d6:c6:53:8e:80:ad:a3:a7:
                    37:e6:34:88:9e:9c:07:90:66:23:7f:90:b7:3a:6e:
                    b5:56:88:dc:c1:3f:23:c5:2b:ac:19:1f:98:7b:ef:
                    87:0d:20:49:74:ff:2c:b5:d6:71:9b:92:ff:cf:4f:
                    1f:e5:a3:5c:31:2b:13:d3:a2:b4:f9:4e:e4:f1:7d:
                    36:af:22:6f:58:93:74:e4:18:1e:48:2f:b7:3c:a7:
                    c0:92:37:6e:2d:e9:bc:69:63:d0:26:86:8e:f6:80:
                    c2:43:5d:d1:f9:20:05:a2:08:5f:1b:14:7a:33:6e:
                    c3:27:f9:1e:b7:51:82:99:07:c8:0c:c0:75:5c:a5:
                    83:3e:af:77:34:9b:de:e1:e9:10:0a:99:d9:78:b7:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BE:AA:58:8B:36:E1:49:F0:12:29:5E:2E:38:1C:12:CB:D4:2D:CF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hb6qWIs24UnwEileLjgcEsvULc8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:29:6b:ca:62:c2:b4:26:f1:f1:c6:b0:04:24:60:9f:36:
         54:aa:b2:4f:35:52:3f:1d:50:7c:09:83:af:e8:c4:19:a1:2d:
         0e:f9:3c:7b:79:3d:ee:72:65:78:0a:8d:19:d4:3a:fb:7c:fe:
         29:a3:3c:8c:5b:38:e0:ea:23:58:80:e3:e8:27:83:ed:39:c9:
         89:87:38:d7:50:53:4b:f3:0e:90:7c:0f:1b:02:f4:21:af:4e:
         31:48:bb:19:72:48:b8:f9:3e:71:a2:f5:a3:45:9e:e9:3f:d6:
         a2:37:93:5d:61:b2:f5:d4:e2:ce:e8:1f:9d:3a:d1:e7:e3:05:
         d0:c7:7e:03:09:60:3d:2d:42:e5:32:cd:e8:d8:cf:74:b6:ae:
         7e:ff:65:57:71:00:83:ac:3e:92:77:ef:74:b6:e1:b8:03:ca:
         97:69:27:22:12:e0:e6:52:f4:2e:b5:a1:cd:67:eb:6e:81:e7:
         d7:57:5d:2d:73:ec:84:a9:13:c5:15:fa:fd:1d:da:b3:19:af:
         28:84:99:17:ba:5f:bc:34:6d:e3:d3:f9:c0:d7:81:8d:91:31:
         3f:63:1b:01:f7:aa:74:1d:47:70:e4:6e:eb:58:62:d5:ce:60:
         23:05:90:75:31:c7:4a:19:ba:d4:c3:27:4f:ac:eb:78:d0:b4:
         b1:94:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:50:50 2025 by rpki-client