Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/_PcPFZUmfB0Sp9xJxagAsJv9_CQ.roa
File:                     _PcPFZUmfB0Sp9xJxagAsJv9_CQ.roa (raw, json)
Hash identifier:          FM2eWK4BVYfxiZtL9XjjmEzBZLBoRacK12VzaTtVq4Q=
Subject key identifier:   FC:F7:0F:15:95:26:7C:1D:12:A7:DC:49:C5:A8:00:B0:9B:FD:FC:24
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01FD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_PcPFZUmfB0Sp9xJxagAsJv9_CQ.roa
Signing time:             Wed 01 Oct 2025 01:33:43 +0000
ROA not before:           Wed 01 Oct 2025 01:33:43 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     4774
IP address blocks:        103.2.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:33:43 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=FCF70F1595267C1D12A7DC49C5A800B09BFDFC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:fb:9d:3c:02:ed:4e:ba:87:05:d5:5a:0f:
                    98:5f:93:4e:7e:6d:ec:77:3f:77:f5:a1:43:8f:78:
                    97:f6:76:31:5c:7a:5d:c5:7d:de:a2:76:79:7a:9a:
                    ca:78:ba:e8:f1:c7:27:9e:1e:59:4d:46:f2:92:12:
                    ce:9c:29:97:32:7a:86:ab:6c:19:c9:36:d2:bb:e7:
                    e7:3a:9a:71:17:da:9a:c3:2f:ce:5a:e0:98:e7:1c:
                    b3:b1:93:3d:4f:d5:f9:64:fc:ce:bf:ed:b9:ee:c9:
                    99:94:b8:82:ed:da:78:a9:23:34:12:fa:93:f9:59:
                    ce:a9:d7:6c:4b:e5:5c:37:ec:7c:cc:06:29:d4:a0:
                    2c:d7:a6:e6:a7:2d:74:8f:2d:70:00:04:fd:98:26:
                    47:cb:77:74:57:1e:f3:43:7d:f2:60:cf:88:65:b2:
                    8c:7b:5c:b5:3e:22:e1:93:68:97:fe:dc:ee:82:24:
                    36:e1:67:02:39:46:ac:de:8c:12:b4:22:93:90:53:
                    19:9e:e2:19:ca:fe:5d:01:78:cc:09:86:40:eb:44:
                    13:24:69:c1:c1:79:ae:6e:64:c4:e0:3d:bb:51:4e:
                    8f:33:7f:d6:b9:72:50:ef:8f:dd:7f:6b:c0:51:98:
                    eb:7c:7b:a7:3d:ce:59:60:3d:d1:55:3a:39:73:d8:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:0F:15:95:26:7C:1D:12:A7:DC:49:C5:A8:00:B0:9B:FD:FC:24
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/_PcPFZUmfB0Sp9xJxagAsJv9_CQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:04:e2:31:f9:dd:80:1a:8c:c8:74:14:89:5e:e8:b0:0d:4c:
         c9:fa:21:4b:c5:01:2c:17:2f:72:a5:35:55:df:63:a9:9a:1a:
         45:c9:00:15:37:ea:d1:0d:48:4f:0b:8b:74:f9:3d:63:4e:df:
         6d:7d:fd:22:1b:b4:67:d8:54:5f:c9:3e:3f:0a:77:ac:eb:5a:
         9e:d6:4b:bc:e9:80:7e:ac:e4:06:b6:21:83:ee:c7:ea:ce:1e:
         f6:6c:2b:2b:3b:da:75:2d:4e:c0:e5:e9:be:e8:7a:b4:50:b6:
         2a:e2:f2:7b:82:e3:c7:3a:1c:a7:42:0b:14:f8:e9:39:34:69:
         93:fd:30:d8:4b:f5:22:cf:49:19:1d:80:70:eb:7c:90:67:09:
         ab:8f:48:97:2e:42:df:0d:16:79:c8:46:51:54:4c:14:d5:18:
         c3:4e:a0:fd:4b:0b:b1:27:2f:1d:66:07:f7:d0:72:85:ad:d0:
         39:f5:23:d4:8e:f9:d3:c4:5e:6f:e5:40:8e:38:3e:1b:5d:db:
         53:fc:ed:63:10:2a:57:35:d7:36:7c:3e:42:c7:fc:ca:a2:09:
         d6:ab:50:de:ec:db:ad:bc:57:a8:03:d9:4c:50:4e:6f:37:ef:
         19:52:5d:f1:15:00:23:f1:c6:a0:ef:14:91:24:cd:b6:58:5f:
         94:d2:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:58 2025 by rpki-client