Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/WKC66I9GyGwxG7nc_jmRlk8okDI.roa
File:                     WKC66I9GyGwxG7nc_jmRlk8okDI.roa (raw, json)
Hash identifier:          VOY/oC7HiH9g9Q10MyDIEdxJAri1VguN/mDZK7xEMM0=
Subject key identifier:   58:A0:BA:E8:8F:46:C8:6C:31:1B:B9:DC:FE:39:91:96:4F:28:90:32
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       51
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/WKC66I9GyGwxG7nc_jmRlk8okDI.roa
Signing time:             Wed 01 Oct 2025 01:35:07 +0000
ROA not before:           Wed 01 Oct 2025 01:35:07 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7527
IP address blocks:        210.171.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Oct  1 01:35:07 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=58A0BAE88F46C86C311BB9DCFE3991964F289032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:db:bf:62:84:09:1c:57:24:a9:69:e3:58:
                    da:cc:18:fa:89:af:a5:5d:29:48:67:d6:4e:ad:fa:
                    c4:87:33:45:a4:0e:22:d9:98:2f:b6:76:16:23:c1:
                    4c:68:ca:3d:5b:d0:e5:1d:00:ea:0b:6a:78:c2:89:
                    89:12:9c:c9:ad:81:03:41:08:42:40:e2:74:c7:1b:
                    d2:b7:d1:f7:16:e3:a9:74:db:ee:5e:df:8a:e1:fd:
                    0e:6e:da:b6:d4:a6:bf:94:6a:4b:71:bc:73:d3:4d:
                    2b:33:0e:e7:8b:db:e2:73:08:ba:7a:cf:e4:40:69:
                    49:21:56:ec:af:8d:b6:03:99:e4:1e:59:75:9d:f7:
                    84:f0:d6:c7:fa:db:f2:e4:bb:0d:60:ab:3e:e1:a5:
                    aa:f3:15:87:e2:0b:1a:13:2b:ed:ac:87:b0:84:8b:
                    c0:90:21:42:c3:e6:ef:1b:68:84:cc:31:d3:51:16:
                    d4:eb:17:4a:72:18:e3:d0:c4:42:64:1b:68:20:c8:
                    93:5f:ed:e9:83:6b:8d:45:78:6f:76:38:95:36:ae:
                    78:6b:85:db:98:7f:a9:36:38:89:78:ff:84:22:2b:
                    0d:6c:4e:a7:97:b7:c8:27:ca:e9:73:45:93:53:3f:
                    ce:31:a7:3e:fb:6b:63:66:14:21:85:3c:98:f6:ce:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:BA:E8:8F:46:C8:6C:31:1B:B9:DC:FE:39:91:96:4F:28:90:32
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/WKC66I9GyGwxG7nc_jmRlk8okDI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:50:55:1a:8b:f5:4c:17:7b:cb:bf:08:18:7e:a5:38:b9:ce:
         78:92:24:05:80:52:02:ad:ed:c1:70:ce:80:2d:39:52:b4:68:
         ab:ef:84:b7:25:6b:ca:6d:fb:ed:42:5c:3c:74:0a:77:60:49:
         59:25:64:43:13:3d:83:14:83:9d:a7:30:c4:c6:c7:64:0f:ff:
         c2:b7:74:49:94:1b:44:15:91:75:ca:dd:ed:a2:e9:b0:6b:cf:
         c6:16:40:af:13:77:02:fb:21:a4:1e:9c:26:bc:4e:ef:21:88:
         bf:b7:3f:6c:e1:27:96:a4:bd:65:92:ca:e8:bb:df:e4:f3:a6:
         5b:3d:fa:ce:d0:0f:68:30:67:0c:c9:1e:59:fc:29:09:20:ac:
         c4:f6:63:72:70:1e:8e:a5:33:fe:3b:9e:27:4e:7a:d6:1c:c0:
         25:b3:32:5d:26:9c:03:7e:00:51:be:b3:dd:50:02:d9:ea:e9:
         41:aa:af:56:62:99:95:0b:a6:6a:18:98:af:15:31:c3:8f:29:
         d6:f3:47:69:35:66:2c:67:97:74:94:68:13:b7:3b:e6:49:18:
         f8:e7:5b:d0:c3:fa:aa:1d:fb:e8:86:ed:7c:25:3c:5a:ac:53:
         68:1c:a5:55:4d:7e:21:97:21:0a:0e:61:d0:ee:eb:29:ce:7b:
         93:39:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:21:33 2025 by rpki-client