Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/vSZnC0IMMdDOrGP9BttO_QkmtFc.roa
File:                     vSZnC0IMMdDOrGP9BttO_QkmtFc.roa (raw, json)
Hash identifier:          CffTQg8fxhj/TW1nhR0yLFaAYy6XcsEtzNb2ocP1np8=
Subject key identifier:   BD:26:67:0B:42:0C:31:D0:CE:AC:63:FD:06:DB:4E:FD:09:26:B4:57
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       9E
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/vSZnC0IMMdDOrGP9BttO_QkmtFc.roa
Signing time:             Wed 01 Oct 2025 01:30:18 +0000
ROA not before:           Wed 01 Oct 2025 01:30:18 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9621
IP address blocks:        119.59.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct  1 01:30:18 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BD26670B420C31D0CEAC63FD06DB4EFD0926B457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:e5:c2:ba:d3:1e:ce:bc:60:a8:04:e0:73:
                    d6:34:3c:c6:b6:8a:98:7b:08:c2:c2:da:01:66:44:
                    9d:b4:13:e0:8e:27:eb:fd:77:c1:a4:46:5e:b5:fc:
                    79:28:e9:7a:f3:1f:bc:ed:eb:dc:42:80:69:c6:dd:
                    a8:53:11:6f:09:94:5b:e2:a6:d8:0e:7e:fa:c8:b9:
                    69:78:1b:44:6b:ab:e0:0c:6b:36:83:3b:c2:25:b4:
                    72:be:ef:38:3c:9d:47:8d:b3:a5:6c:15:0a:39:5c:
                    86:b8:cf:b7:2c:71:a5:3e:92:a0:6a:d3:10:25:a9:
                    5b:c7:54:77:02:3a:a7:f6:bd:bb:20:e7:fb:8a:a3:
                    60:c4:50:a1:17:e5:f0:ff:3f:ff:61:a1:fd:9e:d7:
                    34:2f:b7:df:7e:7f:96:3d:74:b9:3d:30:14:03:f4:
                    3a:18:38:c0:33:68:14:14:74:fd:87:e9:e3:fd:cf:
                    01:32:a1:b1:1b:9c:71:40:59:24:70:1c:9f:54:71:
                    3c:be:36:62:84:5a:9e:34:3d:86:3c:36:1b:14:2d:
                    c5:ac:71:02:83:a0:d9:50:fb:5a:0e:5f:d6:9e:82:
                    d7:37:0d:b9:a9:4e:98:59:77:c9:36:8b:83:e1:10:
                    7d:1f:a5:27:6a:25:2d:1b:0c:9a:ac:c6:4b:17:73:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:67:0B:42:0C:31:D0:CE:AC:63:FD:06:DB:4E:FD:09:26:B4:57
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/vSZnC0IMMdDOrGP9BttO_QkmtFc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:ad:07:49:f3:18:7a:45:ca:89:3f:7a:f4:68:03:00:62:
         9e:fd:6f:b0:33:6b:1c:70:8b:49:8c:de:9f:e3:ca:c4:53:b3:
         93:a0:83:20:7e:89:de:bd:4d:d4:b4:4a:be:ce:2b:d9:5c:07:
         fe:d6:3b:93:49:c4:c4:17:54:05:48:26:3a:16:4c:59:b9:79:
         89:84:40:7f:df:0e:c8:96:30:3b:98:a6:5c:91:7e:19:4c:9e:
         e1:c3:d6:60:e1:a8:ae:db:74:16:10:a1:c3:7a:2d:e0:fc:66:
         9e:5d:f6:b6:ea:77:d1:e9:96:0f:55:5f:f1:63:ce:f6:f1:16:
         a7:e0:ba:dc:d4:65:ae:8c:2a:42:63:46:bd:38:39:5e:6f:0b:
         6a:7b:03:58:e2:cb:00:fe:c2:b8:c0:1f:43:fc:10:aa:40:22:
         6a:49:b5:6d:72:08:c2:6f:38:4d:3f:93:63:00:c9:85:96:1d:
         df:a7:df:57:93:1b:b7:b1:16:73:44:c5:ad:ef:1c:0b:66:7d:
         f5:e8:16:4a:5d:4c:4d:f7:de:6c:d5:ed:e0:6c:cb:48:c5:32:
         7a:21:17:bb:1d:4b:b3:48:a5:c3:58:c7:17:52:b8:fc:2c:78:
         ca:9a:f7:1f:cd:f8:3e:1c:07:e2:e8:25:66:25:18:7b:e6:71:
         2f:23:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:34:40 2025 by rpki-client