Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YDu0RldQYwV6JYLBb9VABNs9-s.roa
File:                     0YDu0RldQYwV6JYLBb9VABNs9-s.roa (raw, json)
Hash identifier:          m5U1zX17TFXoUJ/FS1Am1REtKdjTWBW+kJncIqNzePo=
Subject key identifier:   D1:80:EE:D1:19:5D:41:8C:15:E8:96:0B:05:BF:55:00:13:6C:F7:EB
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       2A
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YDu0RldQYwV6JYLBb9VABNs9-s.roa
Signing time:             Tue 07 Oct 2025 01:24:29 +0000
ROA not before:           Tue 07 Oct 2025 01:24:29 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        210.251.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:29 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D180EED1195D418C15E8960B05BF5500136CF7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:4c:94:5f:fc:9c:af:96:9f:c6:ef:30:ff:
                    c9:9a:e0:16:75:e0:d7:40:c0:93:ea:07:27:16:7d:
                    eb:5f:1a:b6:9a:f3:eb:32:82:42:41:f4:15:42:6c:
                    6a:b7:a3:1c:b3:b5:34:48:54:6a:b5:f7:9d:69:8b:
                    3a:91:77:21:55:85:b9:11:07:72:11:ad:5e:26:22:
                    4f:86:7d:b3:d8:e8:7f:75:be:87:19:d1:de:07:b2:
                    5d:fe:6e:12:15:32:4f:54:40:e5:d5:6b:18:1c:64:
                    b0:13:12:9f:1e:82:b6:54:fa:2f:d2:e0:11:be:93:
                    98:a8:01:c8:de:f8:72:51:88:34:44:05:bf:d0:fc:
                    c6:b8:4d:3a:79:e3:be:17:fb:73:c3:21:ce:91:d0:
                    c1:5a:0b:4e:74:08:9d:24:88:64:33:52:86:cb:4d:
                    74:df:89:67:f1:11:94:80:ed:e1:c9:95:3f:5f:ed:
                    fd:52:68:36:b3:16:4f:99:51:c0:16:4b:f2:cf:b7:
                    81:c2:a2:99:77:0c:b3:ef:40:1e:70:95:e3:98:3b:
                    0a:ac:2b:73:3e:5e:0b:cd:c3:80:ec:ed:21:8b:a9:
                    be:f5:41:d9:09:1a:34:b1:5d:51:4e:9f:43:ef:79:
                    ba:d2:19:31:96:33:86:b8:e8:99:c9:de:3a:26:25:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:80:EE:D1:19:5D:41:8C:15:E8:96:0B:05:BF:55:00:13:6C:F7:EB
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/0YDu0RldQYwV6JYLBb9VABNs9-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:04:e5:c7:fd:64:76:9b:ac:05:96:25:dc:da:5e:b4:00:7f:
         a7:fb:b3:cc:ec:ba:55:14:59:6d:be:71:2d:f2:f6:1a:4a:fb:
         5b:15:3d:44:b3:88:65:e2:88:84:53:c5:f1:08:22:c5:e6:84:
         a1:f4:56:9d:60:15:65:14:ca:80:b9:84:58:7a:e6:76:fa:aa:
         0f:4c:56:bd:d5:5a:7f:36:e2:77:8f:81:87:c5:86:43:11:38:
         b5:f3:fd:ff:76:ca:ed:5a:bc:9c:98:80:2c:30:aa:1c:7f:34:
         02:d1:00:02:75:10:37:b5:13:17:ab:fc:ee:54:fa:98:77:0a:
         90:b8:5b:9f:f8:ee:7c:17:f2:c1:b3:47:42:0c:6f:2e:16:3a:
         e5:c9:77:8d:2e:f0:ec:6a:eb:64:25:9d:a4:3f:43:73:d9:44:
         b9:94:b5:f3:52:a4:4a:a8:e3:75:4b:11:4d:f6:53:93:fc:2f:
         00:8f:5b:b7:d8:4d:43:25:68:57:9a:0b:ec:c6:64:f6:87:d7:
         c5:91:ad:fe:61:af:5a:f6:dd:f8:d4:53:dd:0d:25:f1:88:ee:
         5a:5c:e8:fe:7d:10:78:cd:c6:85:31:8e:8c:36:64:e9:62:cf:
         dd:93:cf:33:55:72:84:ee:8c:b5:2b:d7:79:81:17:e7:12:f0:
         5b:e3:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:07:25 2025 by rpki-client