Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
File:                     nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa (raw, json)
Hash identifier:          44V+ScIRujlPqRa5pwfCxlF6gMgpDuWrdLOu9pZNH4E=
Subject key identifier:   9C:F7:41:B8:9C:73:2E:A9:13:72:92:53:61:45:05:76:64:E3:F0:BF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0496
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
Signing time:             Wed 01 Oct 2025 01:43:36 +0000
ROA not before:           Wed 01 Oct 2025 01:43:36 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:43:36 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9CF741B89C732EA9137292536145057664E3F0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:d9:b6:5b:62:d3:bf:37:7e:a4:5e:88:4e:
                    3e:21:dd:ff:12:0f:5c:9c:36:db:fc:9d:6c:99:d1:
                    af:31:16:f2:d6:ff:8b:20:0e:7f:f0:0f:00:1b:67:
                    e3:3f:b1:4a:26:94:57:ce:cb:ce:16:11:51:34:73:
                    f5:cc:1a:cc:9c:56:2f:f7:be:82:35:10:0a:7a:19:
                    b3:a4:59:88:e6:eb:0f:cb:48:9e:6a:87:df:6f:5f:
                    34:5a:38:37:a0:5d:59:13:88:69:ab:30:61:5c:99:
                    cd:90:28:4c:c1:93:11:84:2c:07:40:9d:31:da:ac:
                    8e:75:e3:16:e4:f6:71:91:92:d2:ed:1c:67:5b:23:
                    2c:7c:84:71:e8:d3:17:61:36:ef:5b:8e:99:59:6b:
                    fa:fe:fd:9d:d7:bb:23:a0:83:b5:45:8b:0a:1e:f9:
                    de:e8:7f:43:29:eb:8a:4c:13:fb:89:1a:cb:3a:c8:
                    cf:6e:22:cf:63:54:19:46:f0:74:ff:95:53:92:7b:
                    19:ef:a2:f4:d9:c8:a2:e2:36:a0:c7:f4:2b:cf:63:
                    56:a4:eb:24:8a:0d:13:1e:00:df:d4:cf:4e:74:f0:
                    6b:3c:7e:26:38:98:ef:fe:c7:ed:e9:dd:12:41:f1:
                    0c:91:fb:13:46:06:69:3f:3e:8f:71:8c:d1:c9:bc:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:41:B8:9C:73:2E:A9:13:72:92:53:61:45:05:76:64:E3:F0:BF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nPdBuJxzLqkTcpJTYUUFdmTj8L8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:d7:52:44:d7:ba:1d:73:b3:32:84:e8:78:d4:9e:f1:90:
         9b:11:3b:c1:f1:0d:55:6f:a1:f1:9d:f8:fd:24:1c:e4:2c:99:
         e5:0e:ee:d3:8f:d5:2b:90:0e:18:04:99:a7:72:7a:82:89:a4:
         e5:90:2a:41:a4:ab:b7:b2:0f:f4:3a:b3:fe:ec:f9:a6:88:18:
         2b:0f:15:b1:6b:ea:c0:25:0a:07:10:18:cd:3e:11:8b:ae:f1:
         35:4b:5e:77:c0:03:d7:8a:4e:3d:50:8e:2c:4f:44:3a:fd:96:
         77:e8:23:7f:3c:9a:50:67:96:55:70:3e:a8:18:67:2a:3e:76:
         da:95:db:81:c2:b5:20:cb:81:f7:90:54:c0:09:a5:f2:00:c4:
         84:38:73:e3:e6:c8:4d:25:35:b1:46:be:5d:e1:a3:80:92:47:
         a6:41:b2:9a:a0:ff:73:0d:74:2c:d4:53:ad:bb:69:1a:dd:83:
         97:5a:64:06:c1:01:ad:82:07:f0:40:2b:75:ab:c7:90:a2:b4:
         3d:fc:44:88:23:03:23:87:25:8c:47:f6:5b:70:e0:11:25:6f:
         07:c7:8e:94:32:da:32:35:c5:5f:07:7a:34:fc:b0:4a:b5:ff:
         d9:0d:6a:79:b5:2d:40:24:8e:9d:b1:5d:14:8e:0a:65:8b:44:
         48:e3:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:19:54 2025 by rpki-client