Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
File:                     eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa (raw, json)
Hash identifier:          4yunNaNNxlrTr49HnqdvkLNjJ07nNvKz3gdz6OGl4VA=
Subject key identifier:   79:28:55:B7:43:77:0A:F6:05:EE:36:7A:86:15:E0:61:5B:83:30:07
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       2D
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
Signing time:             Tue 07 Oct 2025 01:24:30 +0000
ROA not before:           Tue 07 Oct 2025 01:24:30 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:30 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=792855B743770AF605EE367A8615E0615B833007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:2c:2c:05:cd:c0:8f:6f:ec:a2:94:7b:b5:
                    c0:c8:13:1e:8a:8f:ed:24:c4:d1:06:10:68:9a:88:
                    5b:9a:86:e9:2a:49:7c:13:10:72:19:57:99:a0:5f:
                    1a:4c:1a:53:4f:67:48:1d:aa:14:95:e1:12:8a:49:
                    1d:26:f5:52:c8:07:98:28:cd:db:c8:e4:e8:ee:8d:
                    d0:ad:a6:f9:63:1b:54:ee:ca:2b:56:9b:f1:a4:ec:
                    3d:99:1e:56:28:80:67:f1:10:7d:46:65:e5:72:e2:
                    ae:c9:51:94:d8:05:a9:e7:3d:b4:09:53:73:8d:0d:
                    7a:b4:70:35:08:2a:03:f0:be:f5:4d:1f:81:b9:b9:
                    1c:8c:07:72:e5:60:14:b9:2f:81:cd:d2:b7:07:42:
                    66:37:ca:d2:5f:82:31:69:c8:16:41:0c:e3:50:f3:
                    14:ae:3c:b1:e9:ae:c7:d7:2a:fd:8e:a7:34:ac:2a:
                    97:12:cf:e3:5e:83:22:ef:20:f5:50:31:00:bc:49:
                    72:49:de:cc:15:9f:b4:b7:19:c1:9e:7e:57:0d:1b:
                    cd:74:fd:dd:d2:67:02:2f:ba:5a:0c:a0:9a:3c:e6:
                    ca:5e:40:a6:7f:40:d7:bb:92:ab:49:d6:5f:cb:f7:
                    3c:ee:0b:70:b7:cb:32:b3:66:9d:cf:2f:01:b3:19:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:55:B7:43:77:0A:F6:05:EE:36:7A:86:15:E0:61:5B:83:30:07
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/eShVt0N3CvYF7jZ6hhXgYVuDMAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:a5:3b:a0:49:59:e7:d8:73:ec:46:e4:5f:87:61:e2:2d:1a:
         02:16:12:72:80:8e:ff:26:b1:dc:d4:30:fe:ad:52:41:10:a2:
         4a:ee:74:ac:a6:3a:62:16:6a:9d:92:3c:43:f8:4b:7f:2f:0a:
         63:77:8e:f6:9b:4c:be:9e:83:29:97:25:ba:94:19:83:38:d8:
         1e:b3:be:16:fe:31:d9:ac:04:bf:bf:cb:ce:50:45:91:95:19:
         33:30:f7:eb:9d:ef:b4:0b:e8:2c:bb:0e:fe:f9:95:65:94:bf:
         45:14:88:1d:83:cb:57:60:12:48:1e:0f:23:53:24:cf:05:2a:
         54:93:53:88:65:15:ad:51:e8:cc:49:6f:1b:93:25:dd:ab:66:
         0c:cd:15:db:b7:1e:2c:67:16:42:24:61:7f:06:b7:02:08:0b:
         4c:26:e5:30:09:23:1c:84:03:44:3e:2b:cd:cb:c5:1e:bf:dd:
         c4:cc:2f:13:75:da:68:d7:cb:bc:47:66:fd:90:c8:71:0e:24:
         69:73:f6:5c:18:99:99:b1:9b:24:3d:93:44:74:6f:3a:25:08:
         e2:c0:61:7d:16:ed:56:5e:f8:d8:eb:4a:0e:ad:ba:b1:45:04:
         3a:e1:dc:0d:de:77:61:0f:57:a1:bf:d0:96:a4:9b:14:e1:96:
         d0:69:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:07:26 2025 by rpki-client