Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/ySoJ8yWBnJCUJOTGcjEndBlpYdU.roa
File:                     ySoJ8yWBnJCUJOTGcjEndBlpYdU.roa (raw, json)
Hash identifier:          iAglnhZ/mYaPjVOuz+YKjPekbvywJpt1zm518Hz+uvk=
Subject key identifier:   C9:2A:09:F3:25:81:9C:90:94:24:E4:C6:72:31:27:74:19:69:61:D5
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01AE
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ySoJ8yWBnJCUJOTGcjEndBlpYdU.roa
Signing time:             Wed 01 Oct 2025 01:38:34 +0000
ROA not before:           Wed 01 Oct 2025 01:38:34 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        210.132.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:34 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C92A09F325819C909424E4C672312774196961D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:7d:c5:09:47:4e:e7:08:25:c0:7e:18:e3:
                    78:0f:0c:d6:0f:53:92:87:32:91:de:5f:1c:89:e0:
                    36:ba:af:08:b2:bd:15:3a:b2:a4:d8:a4:35:98:e5:
                    80:63:cb:05:52:bc:2d:21:2b:de:ea:3e:fc:d6:a6:
                    ba:36:be:fd:dd:a3:ff:a7:78:68:d5:76:20:d4:bf:
                    3f:95:00:8a:cf:72:7e:fb:fd:c3:0b:9e:b3:59:48:
                    a2:34:ee:b8:5b:fc:02:84:12:9b:be:44:a7:26:f3:
                    19:df:10:34:5c:b7:1d:9c:da:af:0b:8f:d1:af:fc:
                    60:4e:a6:46:67:b2:80:9a:6b:97:de:43:cb:7a:5e:
                    3c:f8:71:2c:75:fd:b2:be:05:d1:a5:50:db:64:af:
                    35:cb:0c:ff:87:6b:20:05:0c:d2:13:e9:65:b8:73:
                    f7:c5:92:48:3a:4f:59:bb:70:00:89:52:ee:db:1c:
                    e1:2d:f2:26:33:d7:36:af:65:c9:9b:be:6f:83:c3:
                    95:c7:0e:f7:4b:4c:a5:03:01:d9:ba:ac:a6:5f:eb:
                    9d:29:1c:62:3a:1c:df:78:ab:11:a7:b0:26:b2:c8:
                    ab:f8:6e:55:6a:03:c6:cd:af:34:9e:23:f1:5f:8c:
                    8a:e8:36:99:3d:2d:f2:be:02:24:57:97:45:17:27:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:09:F3:25:81:9C:90:94:24:E4:C6:72:31:27:74:19:69:61:D5
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ySoJ8yWBnJCUJOTGcjEndBlpYdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:48:e5:67:3d:05:cf:62:e3:c7:86:fe:ce:93:7c:54:42:
         3c:3f:89:e1:05:0b:c0:0b:2f:a8:67:ee:ae:b6:2e:d1:a5:1a:
         bc:9f:35:e9:1c:e3:0d:aa:5d:8a:9a:0d:73:0d:69:68:ea:d4:
         c9:ea:a9:57:0b:d3:df:3d:ec:c4:ce:27:e6:01:d6:4b:97:49:
         f1:26:aa:09:a7:ea:6f:8e:41:0b:b1:12:f2:72:f8:dc:81:d3:
         c2:9f:89:8c:f9:79:bb:ce:e9:02:7c:a1:1d:54:04:d9:3b:91:
         65:c5:cd:21:f5:c3:d3:b5:14:6d:61:14:b9:7a:a3:56:e9:6f:
         f2:52:aa:17:27:b2:33:0d:cf:16:ad:97:92:6c:57:a9:78:fb:
         21:f6:05:f1:c6:da:74:c8:47:d9:d4:99:4f:fd:4f:9e:d0:b2:
         bf:55:8e:28:ad:30:d8:ae:bc:e1:cb:ec:74:77:06:01:67:a9:
         93:c3:72:c0:bd:3a:af:f1:2b:cb:7e:9c:3a:7c:71:ab:05:62:
         f2:1b:5b:d8:ab:f9:15:be:43:38:e3:03:f8:7a:35:f2:72:c8:
         24:77:32:b2:0c:e0:16:57:e4:2d:55:60:6c:99:b0:89:8b:31:
         47:34:42:73:be:22:8c:92:97:75:95:97:86:54:ad:22:e5:f5:
         3a:b5:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:21 2025 by rpki-client