Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oMhIf8snpCMIOum5Yje8nr6AyrY.roa
File:                     oMhIf8snpCMIOum5Yje8nr6AyrY.roa (raw, json)
Hash identifier:          gAZw/ZmgUfm/STP0a0DyOU7W5XAVryN+aHy1ZCXwQZs=
Subject key identifier:   A0:C8:48:7F:CB:27:A4:23:08:3A:E9:B9:62:37:BC:9E:BE:80:CA:B6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0494
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oMhIf8snpCMIOum5Yje8nr6AyrY.roa
Signing time:             Wed 01 Oct 2025 01:40:04 +0000
ROA not before:           Wed 01 Oct 2025 01:40:04 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 08:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:40:04 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A0C8487FCB27A423083AE9B96237BC9EBE80CAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:c3:ba:0f:42:36:9e:37:de:ad:b9:a0:14:
                    0f:21:4e:b3:52:2f:c0:37:6c:4c:4e:e9:09:be:04:
                    f5:91:00:40:49:e4:1e:23:de:9f:8c:d8:3b:f2:60:
                    39:cb:82:2b:c4:bc:2b:3f:32:51:d6:38:1f:0a:ec:
                    fc:0e:cb:12:e0:d7:e5:ad:0c:32:ef:13:8d:9a:0b:
                    3c:37:c2:14:7b:b6:9b:2f:ed:86:7d:75:24:99:b7:
                    ce:e3:d1:ff:84:71:7b:36:13:de:3b:d1:65:df:5c:
                    d7:1a:7e:49:22:da:5f:b7:76:67:69:53:b8:41:cf:
                    73:ed:f0:82:6d:57:be:57:bf:16:0f:8d:f2:88:2c:
                    88:96:1b:9f:25:d3:98:c2:d2:8f:cf:5f:fc:7e:04:
                    ac:13:e6:7b:05:18:27:71:a0:7d:06:f8:b1:fa:5d:
                    24:56:9a:94:7e:29:9d:a8:01:c6:40:2c:dc:d6:5a:
                    0c:2d:5a:81:f3:de:a8:4a:87:70:82:9d:f8:8a:87:
                    d5:f4:22:52:7b:c0:38:01:dc:01:56:82:50:eb:cf:
                    da:97:25:63:ef:a8:c5:d4:36:76:56:19:f9:ff:eb:
                    fc:35:03:59:2d:de:33:50:e2:86:46:28:0f:ef:c8:
                    67:09:dd:89:66:cf:60:61:c0:14:0c:c7:64:0f:a3:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:48:7F:CB:27:A4:23:08:3A:E9:B9:62:37:BC:9E:BE:80:CA:B6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oMhIf8snpCMIOum5Yje8nr6AyrY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:38:8d:96:f6:ff:95:60:b3:d6:ca:ab:4c:76:9c:87:29:
         86:ac:b4:02:4a:8c:20:65:d6:82:c7:d9:8b:0c:c3:0f:68:29:
         b3:10:a5:d8:7d:71:82:e4:c1:3e:ec:35:f7:90:c4:91:e2:1d:
         54:48:ec:f2:c0:0e:52:fc:4d:e6:0f:6e:df:27:93:b4:d3:b8:
         c8:e5:a5:46:c3:e9:4e:db:1a:bc:af:bc:59:58:12:b7:28:52:
         9c:32:43:4a:4b:4c:60:46:31:5b:b4:76:5d:f8:7e:14:d3:b9:
         98:4c:78:40:0e:3f:a2:70:c6:4c:69:17:c7:0f:cd:58:e3:4c:
         eb:a6:5c:3e:0f:22:28:1e:95:26:19:78:03:ba:3c:e0:99:cb:
         1a:3a:0e:37:21:66:3d:85:3d:05:5e:0e:55:58:e4:b7:e7:ea:
         ec:18:e3:d3:d2:15:8e:f3:68:ba:c2:0b:9b:d9:4e:e7:2e:66:
         bf:f6:3e:88:97:65:a4:ec:3e:64:c2:dc:d9:ff:80:91:f3:06:
         fb:ef:f9:af:e4:50:b4:ea:7d:24:b2:ac:f5:e8:4c:ba:e4:0c:
         5b:08:44:69:14:1c:cd:fe:87:48:2c:e6:01:78:be:54:1b:05:
         d9:42:98:45:64:f8:0a:a0:fc:80:6a:f9:3f:30:11:e0:7f:08:
         dd:0d:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:57 2025 by rpki-client