Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/VBnAAfeMrkRjSBcvuNTIOlg9dmM.roa
File:                     VBnAAfeMrkRjSBcvuNTIOlg9dmM.roa (raw, json)
Hash identifier:          ilrKEumS3XQDWfxfmL8pag9QxkGoKL8wtKB7La3W0WQ=
Subject key identifier:   54:19:C0:01:F7:8C:AE:44:63:48:17:2F:B8:D4:C8:3A:58:3D:76:63
Certificate issuer:       /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Certificate serial:       58
Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/VBnAAfeMrkRjSBcvuNTIOlg9dmM.roa
Signing time:             Sat 01 Nov 2025 01:31:13 +0000
ROA not before:           Sat 01 Nov 2025 01:31:13 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2515
IP address blocks:        192.41.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
        Validity
            Not Before: Nov  1 01:31:13 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5419C001F78CAE446348172FB8D4C83A583D7663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:e6:b5:a2:e0:dc:24:10:73:40:59:7e:ea:
                    0e:f3:47:7e:ef:59:bd:dc:b4:9b:78:1d:45:e2:f9:
                    37:25:6c:2a:63:31:58:74:52:2a:c5:6e:3d:47:d5:
                    d8:12:49:ee:8a:b3:81:0c:78:29:ce:65:40:4b:35:
                    4d:04:b1:26:7c:1f:c1:46:54:11:7b:a0:63:0e:d7:
                    03:0f:c7:cb:b6:81:fe:94:6c:a0:6d:0c:05:e2:a5:
                    37:c2:e9:8b:05:5d:a3:af:a4:d8:3f:90:54:50:60:
                    4b:5b:4e:ef:56:29:8e:a2:26:ce:f5:0f:3e:42:83:
                    ce:0b:17:9a:8a:1f:4c:20:49:07:58:da:d1:47:33:
                    7c:f2:d6:ae:c0:37:b6:bd:d2:6f:fe:ab:cb:e8:6f:
                    8f:2f:dd:31:ba:ec:20:53:f8:e7:55:4b:6e:f1:a0:
                    74:b3:18:8c:bc:9f:28:84:f4:78:b3:9d:cb:40:44:
                    7c:0b:97:ca:f7:f0:7d:97:73:50:a8:dc:25:9a:1c:
                    e8:ab:8b:78:76:74:01:8d:57:e9:7a:fe:42:7e:fd:
                    51:ae:37:a2:3b:1a:55:b6:34:73:52:da:c2:3e:75:
                    56:c4:99:92:af:70:a2:b1:a4:dc:54:90:cd:cd:ef:
                    27:cc:bf:0a:84:6a:b1:49:88:a1:da:30:e9:1d:39:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:C0:01:F7:8C:AE:44:63:48:17:2F:B8:D4:C8:3A:58:3D:76:63
            X509v3 Authority Key Identifier:
                keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/VBnAAfeMrkRjSBcvuNTIOlg9dmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:11:5e:fb:85:a9:7a:6c:ef:1c:4c:c4:26:28:ff:85:fa:fc:
         47:7d:21:a5:2e:c8:64:24:1b:3c:61:b3:c8:12:5f:ff:18:b5:
         5c:b6:77:24:00:22:74:ae:71:74:d3:7d:e3:91:bf:f6:ab:9d:
         d8:30:0f:0b:38:28:d0:9a:e1:16:e5:21:88:82:5e:3b:5f:70:
         56:dd:52:16:02:0d:e6:8e:61:fa:fd:e7:c0:86:fa:c2:a0:8e:
         ce:d3:ed:54:f6:63:ad:18:44:fa:35:43:0d:da:73:9c:29:66:
         dd:b6:2f:7f:95:13:e8:ca:89:d1:52:4c:7a:16:e3:1f:50:b8:
         21:a4:78:9b:7b:e9:4d:35:79:e4:62:19:56:74:15:ee:92:3b:
         2a:68:f4:1d:89:e4:c4:9e:2e:c3:d3:8a:ef:67:a1:e6:ae:de:
         8b:44:fa:3d:bb:71:e1:fe:c9:32:33:d8:4a:1c:fd:ba:99:b3:
         ee:c5:c5:92:11:99:df:56:81:5a:e9:c4:4b:dc:7d:c2:fa:89:
         69:3c:4b:02:4c:1a:6d:29:f8:1e:23:e2:e0:98:89:24:8d:d2:
         3d:10:50:a4:2a:5e:2e:b9:94:df:6c:9a:37:5d:f3:c1:29:ce:
         c8:89:52:25:f9:2f:d6:71:a5:fc:1a:36:68:8f:8f:5e:9a:b9:
         30:db:4f:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOENE
QkMyNEE2QzNDNTMwQjk5ODE1QUU3QjVDMERBM0VGOEE4NEQ1MB4XDTI1MTEwMTAx
MzExM1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNTQxOUMwMDFGNzhDQUU0
NDYzNDgxNzJGQjhENEM4M0E1ODNENzY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALmH5rWi4NwkEHNAWX7qDvNHfu9Zvdy0m3gdReL5NyVsKmMxWHRS
KsVuPUfV2BJJ7oqzgQx4Kc5lQEs1TQSxJnwfwUZUEXugYw7XAw/Hy7aB/pRsoG0M
BeKlN8LpiwVdo6+k2D+QVFBgS1tO71YpjqImzvUPPkKDzgsXmoofTCBJB1ja0Ucz
fPLWrsA3tr3Sb/6ry+hvjy/dMbrsIFP451VLbvGgdLMYjLyfKIT0eLOdy0BEfAuX
yvfwfZdzUKjcJZoc6KuLeHZ0AY1X6Xr+Qn79Ua43ojsaVbY0c1Lawj51VsSZkq9w
orGk3FSQzc3vJ8y/CoRqsUmIodow6R05CAECAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRUGcAB94yuRGNIFy+41Mg6WD12YzAfBgNVHSMEGDAWgBTozbwkpsPFMLmYFa57
XA2j74qE1TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAwMy82TTI4SktiRHhUQzVtQld1ZTF3Tm8tLUtoTlUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC82TTI4SktiRHhUQzVtQld1ZTF3Tm8t
LUtoTlUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTAwMy9WQm5BQWZlTXJrUmpTQmN2dU5USU9sZzlkbU0ucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwCnAMA0GCSqGSIb3DQEBCwUAA4IBAQAXEV77hal6bO8cTMQmKP+F+vxH
fSGlLshkJBs8YbPIEl//GLVctnckACJ0rnF0033jkb/2q53YMA8LOCjQmuEW5SGI
gl47X3BW3VIWAg3mjmH6/efAhvrCoI7O0+1U9mOtGET6NUMN2nOcKWbdti9/lRPo
yonRUkx6FuMfULghpHibe+lNNXnkYhlWdBXukjsqaPQdieTEni7D04rvZ6Hmrt6L
RPo9u3Hh/skyM9hKHP26mbPuxcWSEZnfVoFa6cRL3H3C+olpPEsCTBptKfgeI+Lg
mIkkjdI9EFCkKl4uuZTfbJo3XfPBKc7IiVIl+S/WcaX8GjZoj49emrkw20+Y
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:02:56 2025 by rpki-client