Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/922/Ig7h5jLyaqdYQMbmUDtS3OAHCko.roa
File:                     Ig7h5jLyaqdYQMbmUDtS3OAHCko.roa (raw, json)
Hash identifier:          wlhrBonOGNdI4bvQIx/I0HG9yK3SNMSwgZ2UFggmhC0=
Subject key identifier:   22:0E:E1:E6:32:F2:6A:A7:58:40:C6:E6:50:3B:52:DC:E0:07:0A:4A
Certificate issuer:       /CN=79CBC4D4A73DA94583670435292E466AE13217D1
Certificate serial:       04
Authority key identifier: 79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/Ig7h5jLyaqdYQMbmUDtS3OAHCko.roa
Signing time:             Thu 16 Oct 2025 08:42:55 +0000
ROA not before:           Thu 16 Oct 2025 08:42:55 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     7503
IP address blocks:        210.159.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79CBC4D4A73DA94583670435292E466AE13217D1
        Validity
            Not Before: Oct 16 08:42:55 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=220EE1E632F26AA75840C6E6503B52DCE0070A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:38:89:d8:07:d1:2d:9a:4a:2b:0e:6e:a6:
                    f5:9d:b1:1a:f9:32:49:ca:9d:16:e9:0f:77:de:9b:
                    8e:16:9e:6d:52:8e:ae:db:6e:f6:ca:e4:f2:99:2a:
                    1f:61:6a:9e:a1:3c:34:f9:0d:e1:46:fe:a5:d5:41:
                    94:01:61:fd:0a:92:23:b3:ca:e9:df:b3:b4:76:e1:
                    b3:b5:1b:3d:83:66:48:79:53:36:da:17:b0:4e:16:
                    fe:98:09:7b:1b:92:04:38:c3:fd:db:5f:33:72:7d:
                    22:96:23:1d:9b:9a:8c:bb:0b:d1:61:cf:ce:22:35:
                    4a:db:fc:d0:36:d3:3f:ec:37:ba:e6:66:29:a4:89:
                    ed:f3:3e:13:38:4f:c8:f7:84:a6:68:34:f8:1f:23:
                    27:14:88:3c:60:30:ac:25:a8:5d:9d:ba:23:53:2f:
                    59:f8:61:17:18:4e:2e:73:db:1c:45:7f:47:cc:e5:
                    3b:32:89:a2:bc:cc:c9:f0:d4:91:d7:7a:5f:4c:f3:
                    f0:f4:21:a4:0f:c9:07:49:23:fc:f2:72:4f:f8:07:
                    c4:5c:26:24:a8:4c:5e:6f:99:f9:6f:fb:ff:16:11:
                    b1:b1:ca:8a:e7:59:b3:40:2a:13:e4:bc:4b:46:53:
                    0f:c0:ad:03:d7:26:8a:63:a0:29:ee:e0:96:0e:50:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0E:E1:E6:32:F2:6A:A7:58:40:C6:E6:50:3B:52:DC:E0:07:0A:4A
            X509v3 Authority Key Identifier:
                keyid:79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/Ig7h5jLyaqdYQMbmUDtS3OAHCko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:df:05:75:c2:c4:2e:b0:25:73:84:36:1a:1a:06:57:13:
         d0:c9:8a:d4:b1:ff:f7:0e:32:35:38:5c:cb:ee:01:bc:a1:ef:
         b6:fc:23:6f:55:b7:11:cb:ae:36:9c:5f:c6:cc:3c:ad:e1:a8:
         af:af:7d:b7:56:39:85:8b:e8:1d:52:b0:cf:06:5a:24:88:96:
         c0:cf:2f:34:55:a1:c0:e3:e7:08:93:37:3f:b0:b6:16:01:44:
         97:ee:4f:56:e4:cd:2c:81:f1:4e:eb:f3:78:ac:9f:a4:1c:38:
         ae:51:a7:e7:15:ac:8c:cf:81:71:77:0d:65:a8:56:c2:09:9a:
         c1:5f:e5:dd:7f:ab:24:2f:c1:b0:6e:8f:89:71:10:a8:f8:ee:
         05:1f:62:6e:71:34:54:04:8c:7a:79:97:71:f9:c7:b5:72:f1:
         1b:c8:f8:26:fc:22:58:6a:1d:53:d3:c7:21:f9:cb:66:7f:1d:
         16:13:a1:a2:1a:7c:0d:15:ff:3f:75:73:c7:1e:22:33:a3:19:
         d1:75:63:12:ba:4e:f2:61:94:ca:35:5a:e1:b3:35:1f:5e:22:
         df:fd:3f:d4:12:6a:23:2d:f3:1a:42:29:f7:0e:77:4d:73:3c:
         5b:7e:6a:5a:bd:8c:55:33:96:9e:83:bf:b9:99:99:72:d8:93:
         6d:a9:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:57 2025 by rpki-client