Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/922/n2D28JxdtYpzCs-kmx5SsU8HAkE.roa
File:                     n2D28JxdtYpzCs-kmx5SsU8HAkE.roa (raw, json)
Hash identifier:          E9KT6MPgIg0at7gop6u+AAS6eDw1zjL7lG2O9vY2v4A=
Subject key identifier:   9F:60:F6:F0:9C:5D:B5:8A:73:0A:CF:A4:9B:1E:52:B1:4F:07:02:41
Certificate issuer:       /CN=79CBC4D4A73DA94583670435292E466AE13217D1
Certificate serial:       05
Authority key identifier: 79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/n2D28JxdtYpzCs-kmx5SsU8HAkE.roa
Signing time:             Thu 16 Oct 2025 09:09:08 +0000
ROA not before:           Thu 16 Oct 2025 09:09:08 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     7503
IP address blocks:        210.166.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79CBC4D4A73DA94583670435292E466AE13217D1
        Validity
            Not Before: Oct 16 09:09:08 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=9F60F6F09C5DB58A730ACFA49B1E52B14F070241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:d2:4a:b7:3f:eb:ce:96:f0:35:81:37:7b:
                    01:fe:b2:48:58:e3:55:5b:35:1c:6b:c6:eb:eb:0c:
                    fa:84:1f:e8:ca:5b:ba:fc:cc:d8:33:f8:3f:df:aa:
                    ed:6a:ff:50:c3:25:e9:df:49:75:9c:77:98:91:ec:
                    9f:e9:06:14:f3:61:9f:96:f7:32:91:38:f8:82:0f:
                    a4:33:6d:43:1c:96:6d:19:08:3a:b7:1d:14:6c:1f:
                    a9:1d:15:c4:3c:ec:f8:b8:4f:44:6e:83:f7:38:b2:
                    7e:4b:65:9e:f1:f2:93:68:99:d2:3a:7f:f1:a2:2e:
                    6c:f4:c6:a1:c8:00:d2:be:c8:ec:07:62:18:b6:01:
                    0e:46:06:91:8d:0b:27:1f:22:ca:53:d5:dc:8e:3b:
                    b0:f7:06:e9:cb:9e:7d:4c:df:87:36:c9:62:0b:c0:
                    06:6f:6c:4e:68:c5:32:a0:e7:79:b4:db:55:bf:89:
                    18:bf:22:fc:bb:1c:40:bf:e7:ec:69:98:4c:3a:9f:
                    dc:5f:50:18:13:77:fc:d7:00:c0:44:1d:76:de:1e:
                    7e:9a:a5:34:a6:0b:cd:29:ad:07:bf:a1:ba:c2:7d:
                    6e:28:7e:95:a7:58:60:35:74:43:e4:e3:d9:78:fa:
                    e8:2d:ac:7c:55:eb:9d:20:bc:d7:5e:0b:e6:d4:3f:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:60:F6:F0:9C:5D:B5:8A:73:0A:CF:A4:9B:1E:52:B1:4F:07:02:41
            X509v3 Authority Key Identifier:
                keyid:79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/n2D28JxdtYpzCs-kmx5SsU8HAkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:f2:6f:41:17:34:55:10:44:31:d8:70:e8:a9:bc:d7:a0:
         b7:31:25:58:b1:53:8c:b3:2b:2c:77:cb:af:25:d8:23:52:b7:
         0e:c2:a5:bb:ed:8c:12:8b:d3:53:b7:54:29:40:32:32:0d:62:
         14:9e:f3:5e:9b:7f:0a:06:c9:46:b3:7e:78:26:61:f0:b9:2e:
         17:7b:44:40:c0:22:f3:32:16:d8:83:7f:24:df:ed:d3:d8:65:
         3d:71:42:a6:36:a1:1f:5a:45:b1:2c:30:91:59:f7:0b:f2:b3:
         08:a2:fa:9c:90:1d:e7:73:cc:0a:a0:c7:19:6a:13:4f:4b:cf:
         f6:ba:c3:26:b9:3f:37:42:36:3f:ef:d2:22:2f:e8:c9:50:72:
         cc:67:7e:cb:a1:0c:7a:65:66:71:51:48:4f:61:c1:85:6f:4b:
         20:e9:65:38:df:d6:59:09:90:1a:5d:80:e9:94:c4:a1:f3:f0:
         3e:7d:12:f8:36:e5:ce:41:c4:e1:f8:48:2a:d6:19:bb:b0:24:
         51:9c:cd:51:ad:14:02:3f:37:78:40:88:df:91:d8:60:b8:6c:
         91:f5:a3:ff:9f:74:d5:eb:38:00:53:6c:a3:35:36:67:dc:92:
         19:37:35:dd:30:3b:13:e4:70:fb:d0:2f:fa:b7:89:1a:05:cf:
         62:96:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:00:20 2025 by rpki-client