Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/EReHb3cHsOWXsZwwX9E2r65IKCs.roa
File:                     EReHb3cHsOWXsZwwX9E2r65IKCs.roa (raw, json)
Hash identifier:          OzU5HUunDl/h/kh7MCVlGa+ECTHq8ygVIAJkSkU/oD0=
Subject key identifier:   11:17:87:6F:77:07:B0:E5:97:B1:9C:30:5F:D1:36:AF:AE:48:28:2B
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       34
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/EReHb3cHsOWXsZwwX9E2r65IKCs.roa
Signing time:             Tue 07 Oct 2025 01:24:35 +0000
ROA not before:           Tue 07 Oct 2025 01:24:35 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        27.113.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:35 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=1117876F7707B0E597B19C305FD136AFAE48282B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:23:36:59:75:40:df:2c:83:ad:74:65:a2:
                    b1:cc:95:c1:c3:1e:a8:28:70:ab:69:37:d5:4d:63:
                    86:4f:6d:2f:26:a3:b3:19:30:67:9e:a5:66:8d:1b:
                    0f:0e:9f:3e:49:cc:69:6c:38:8c:37:34:58:55:22:
                    ac:80:36:de:60:12:68:75:1a:7e:27:03:6e:37:02:
                    11:95:5c:6d:6b:67:8a:8d:97:3e:13:17:48:56:26:
                    e9:a0:13:9a:9b:1c:47:fc:86:a8:c7:e4:81:e9:a7:
                    2b:dd:c1:12:7f:00:45:fa:fb:77:ca:dd:d7:d6:12:
                    d9:b1:96:33:c1:da:9e:92:0b:3e:66:8d:7b:04:0f:
                    97:24:05:26:be:53:33:33:34:c3:51:f1:7b:da:66:
                    b2:8a:f0:cc:8e:c5:47:e7:f7:67:7d:f6:2d:1c:55:
                    fc:9c:5a:01:36:a0:04:b7:90:6f:49:79:77:3e:ca:
                    70:e1:21:5a:c1:67:78:89:06:ca:99:15:f0:0d:c8:
                    10:ab:c2:3b:67:ae:59:8b:cd:3c:56:41:2c:b5:6f:
                    79:0b:b2:0b:5b:a2:a7:0d:08:32:13:3e:8a:85:c1:
                    5d:11:c2:9c:f4:cb:67:83:fa:bc:e6:7e:95:0f:4d:
                    7a:31:4e:c9:cb:74:54:1b:94:10:ed:ff:cc:6e:73:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:87:6F:77:07:B0:E5:97:B1:9C:30:5F:D1:36:AF:AE:48:28:2B
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/EReHb3cHsOWXsZwwX9E2r65IKCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:e8:8e:d6:30:32:ce:8a:54:88:d1:82:89:b3:5a:41:32:
         34:9b:0b:cd:e4:09:bf:94:ea:0b:f4:17:cb:c3:2d:99:a4:ee:
         e4:88:7e:d9:6a:dc:d3:0a:e2:9d:ea:85:5f:ba:4e:34:c6:2d:
         3b:d1:bd:ab:f3:c2:92:8c:ea:68:41:b5:69:52:4a:58:f7:29:
         48:14:27:04:66:fb:4c:a5:40:94:6d:33:6d:f9:6f:78:01:a2:
         7e:d6:9c:cc:d2:3c:b7:0b:48:e6:29:70:e7:73:4e:b2:f3:f2:
         35:8a:d7:70:fb:a0:21:82:78:6c:af:91:0d:e8:2a:28:8d:b2:
         35:61:a6:dc:7a:8d:12:47:2a:00:8d:61:b6:b1:d4:3c:87:75:
         13:d7:8d:27:e5:f8:44:15:d2:7d:8c:46:a9:70:f2:38:f4:5b:
         8b:9f:25:40:01:3e:ef:81:55:03:22:62:28:cb:57:a7:0c:5f:
         0c:55:31:87:ef:c3:1f:dd:6c:b9:98:2d:1f:a5:ef:f8:64:71:
         2e:f2:3c:b3:79:a2:40:e4:23:f9:42:f0:21:3f:09:64:19:1f:
         45:a8:ee:1a:24:07:85:b8:8b:f9:64:d6:08:3a:62:33:14:2a:
         07:4a:07:ba:b4:6e:dd:7b:85:19:cb:81:e4:01:f2:a5:a7:76:
         9c:7f:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client