Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/1JPvJmeGWrRwnGf5leb4O7eFQgI.roa
File:                     1JPvJmeGWrRwnGf5leb4O7eFQgI.roa (raw, json)
Hash identifier:          J0IvMYOHz8DinqS22umk3m42OtOVfDZ/+Yy1TjDfOd4=
Subject key identifier:   D4:93:EF:26:67:86:5A:B4:70:9C:67:F9:95:E6:F8:3B:B7:85:42:02
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       31
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/1JPvJmeGWrRwnGf5leb4O7eFQgI.roa
Signing time:             Tue 07 Oct 2025 01:24:33 +0000
ROA not before:           Tue 07 Oct 2025 01:24:33 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:33 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D493EF2667865AB4709C67F995E6F83BB7854202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:cf:db:a0:37:95:b0:8c:fe:92:0d:53:45:
                    0e:ca:17:2e:90:7e:d8:2a:07:71:33:b3:08:6b:f8:
                    32:bc:2b:cd:06:8b:9a:28:fe:f8:44:fb:77:4b:85:
                    8d:4e:7e:5e:e1:d6:a4:48:4b:3a:0d:7d:26:4a:a7:
                    9e:23:0d:9d:68:21:b8:64:62:1d:48:2a:b0:12:97:
                    80:f0:f5:82:e7:a6:60:8b:a8:59:67:92:e8:a9:cc:
                    13:0d:ac:5e:91:10:2c:04:7e:78:6b:72:8c:7d:85:
                    74:d0:15:71:63:94:68:bd:13:2a:53:d8:31:1e:9e:
                    76:93:bc:62:8e:5b:87:87:2d:aa:e8:9d:9f:f7:2d:
                    7d:6f:bb:77:74:8b:50:a9:9d:39:03:6a:e5:ed:9f:
                    1a:a9:95:e7:d1:c1:ab:0f:41:b9:18:64:ed:51:29:
                    20:d6:c2:10:9b:6c:43:63:3d:77:d7:2b:28:6b:a6:
                    54:c6:4d:ac:24:6c:61:b2:f4:1a:e8:7c:45:29:4e:
                    1f:d1:05:5b:a6:90:db:b6:c9:fe:49:f0:7c:e3:72:
                    1a:c5:70:e3:3f:6f:49:3b:86:16:4a:f3:82:ca:a0:
                    fa:c8:a8:1e:d4:f4:b1:66:72:3b:61:86:d2:b6:68:
                    50:4c:7b:a2:a6:9d:5e:84:32:e6:a9:fe:1f:7d:97:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:EF:26:67:86:5A:B4:70:9C:67:F9:95:E6:F8:3B:B7:85:42:02
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/1JPvJmeGWrRwnGf5leb4O7eFQgI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:50:86:6f:01:25:28:d4:ad:ad:45:94:50:42:af:b1:cb:86:
         11:d4:44:62:28:8c:de:f7:2e:b2:0e:66:89:95:f1:c4:63:fc:
         e4:21:50:77:d8:0b:c1:4e:a5:00:15:89:6e:40:d5:58:ed:0f:
         4f:c4:e1:4f:9e:b8:38:23:41:ea:83:d7:fc:8b:9b:26:de:2d:
         19:b8:31:57:1f:e9:c3:37:e0:d1:4d:e0:51:99:97:a3:e0:f6:
         69:9f:7b:36:04:62:df:2e:13:e1:b3:a5:ac:82:de:cb:c7:3d:
         ca:e0:24:8a:22:a5:a7:aa:7a:4f:41:b7:23:9a:0d:3c:70:7c:
         1f:2c:d8:31:b2:00:ee:ad:42:c4:e9:d4:c5:b0:ca:8d:5d:25:
         51:af:79:d4:46:e4:c9:af:6c:2d:e3:dc:05:fd:ba:73:5c:6d:
         0e:da:c3:11:c8:9a:b9:12:98:70:85:70:f9:dc:3f:01:43:40:
         ec:e3:8c:3d:6b:8e:ab:91:80:53:8b:f2:b3:38:12:af:c1:69:
         81:22:48:96:fd:ad:07:34:28:51:39:33:54:6e:db:33:02:2a:
         10:46:e6:95:c1:ce:9a:c5:ca:41:51:34:a2:77:9a:7e:af:5e:
         ea:7a:51:b8:41:18:44:e6:fa:74:8b:40:3a:a6:93:0f:2c:5b:
         58:13:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client