Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20018/DQCpGVV5McK5wh04rmsE573sJmY.roa
File:                     DQCpGVV5McK5wh04rmsE573sJmY.roa (raw, json)
Hash identifier:          vm+2z7c7VDyGzlAdrFndSVoTsDnO/shNm9BZhvbTrhI=
Subject key identifier:   0D:00:A9:19:55:79:31:C2:B9:C2:1D:38:AE:6B:04:E7:BD:EC:26:66
Certificate issuer:       /CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Certificate serial:       49
Authority key identifier: 7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/DQCpGVV5McK5wh04rmsE573sJmY.roa
Signing time:             Wed 05 Nov 2025 02:04:33 +0000
ROA not before:           Wed 05 Nov 2025 02:04:33 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131912
IP address blocks:        103.79.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
        Validity
            Not Before: Nov  5 02:04:33 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0D00A919557931C2B9C21D38AE6B04E7BDEC2666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:f9:bd:19:5f:a5:c4:f0:e5:c6:7d:b6:bf:
                    8c:31:1b:8b:11:c4:45:21:8c:b5:9f:18:a0:83:64:
                    d6:d3:57:a1:a9:9b:0d:fc:1c:da:d0:ea:b9:47:57:
                    e4:94:5e:9e:a3:cd:a5:73:31:68:e0:70:ec:e3:5b:
                    b9:3d:b9:0a:82:4f:05:24:b5:f6:6c:20:b5:00:6b:
                    85:76:17:41:a1:86:3c:c2:68:00:ce:c2:da:60:9c:
                    e2:67:f1:a9:42:83:34:18:29:9e:96:b4:98:61:88:
                    96:7a:eb:38:5e:c7:7c:ea:00:36:e2:b0:6e:28:03:
                    18:7f:13:93:97:29:bc:12:06:4f:b7:84:d1:66:e0:
                    43:a0:7b:72:c9:ee:c2:26:c1:77:78:f1:13:1f:0f:
                    43:a7:e8:d9:b9:72:e6:9d:5a:8b:c2:a7:06:93:14:
                    3b:0f:20:3d:b8:ea:86:b4:d4:f4:10:eb:c3:dd:66:
                    41:43:1e:78:e4:b7:92:5d:1d:1f:de:19:71:53:48:
                    17:35:98:09:3c:82:6c:ab:6d:21:80:57:8a:43:54:
                    17:79:57:2c:41:4c:e3:1a:f7:53:58:c5:5c:35:2e:
                    6c:0e:79:bd:a3:4a:c4:bd:38:41:65:30:50:58:45:
                    5b:5f:d4:b4:1f:b8:9b:7b:27:98:04:58:80:1e:1d:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:A9:19:55:79:31:C2:B9:C2:1D:38:AE:6B:04:E7:BD:EC:26:66
            X509v3 Authority Key Identifier:
                keyid:7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/DQCpGVV5McK5wh04rmsE573sJmY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:da:84:b9:ed:ef:ee:76:dd:53:db:5b:94:86:38:0a:d3:
         8c:aa:1c:d1:10:ac:b1:a6:88:58:35:b5:38:e8:f4:84:2e:b2:
         cd:77:03:1b:68:62:78:72:79:0f:e4:82:b3:ab:5b:97:13:12:
         2b:54:90:cd:f6:ba:04:b5:68:24:f0:f5:e8:af:28:8a:38:3b:
         55:e1:9a:34:e3:ef:11:02:be:57:95:1c:91:a1:5c:e4:6f:54:
         5e:52:e9:56:b1:f2:7e:62:8b:4b:1c:ee:f9:48:57:15:b3:ff:
         a9:88:9d:57:b9:26:f5:3c:16:c5:08:06:9f:b3:4d:f1:da:2e:
         ff:89:37:6b:69:39:3f:25:90:ca:12:06:17:62:16:37:6b:80:
         f3:8f:39:e3:49:1f:ae:50:87:2f:41:d8:72:e2:82:4e:4b:e9:
         5c:fe:e5:8e:7b:48:7c:64:55:3e:85:97:7a:e5:1f:03:41:98:
         de:b4:b9:8a:4d:ab:47:29:04:90:56:01:e4:34:38:cb:08:aa:
         55:62:90:e5:45:16:c1:8f:11:8c:5c:78:7f:d4:06:b1:8f:e9:
         89:d9:b0:ca:18:66:ad:e8:07:4e:ea:8c:3f:f8:d5:81:8f:0c:
         d4:48:6e:f9:75:10:c7:b6:d8:c5:d7:77:7c:d8:a7:a9:f7:4f:
         a1:cb:b4:18
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3RUE3
MzAxREZDRDg4NTQ4MUJBRUNEOURCQkVDOEExNEU5ODE1N0Q5MB4XDTI1MTEwNTAy
MDQzM1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMEQwMEE5MTk1NTc5MzFD
MkI5QzIxRDM4QUU2QjA0RTdCREVDMjY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcJ+b0ZX6XE8OXGfba/jDEbixHERSGMtZ8YoINk1tNXoambDfwc
2tDquUdX5JRenqPNpXMxaOBw7ONbuT25CoJPBSS19mwgtQBrhXYXQaGGPMJoAM7C
2mCc4mfxqUKDNBgpnpa0mGGIlnrrOF7HfOoANuKwbigDGH8Tk5cpvBIGT7eE0Wbg
Q6B7csnuwibBd3jxEx8PQ6fo2bly5p1ai8KnBpMUOw8gPbjqhrTU9BDrw91mQUMe
eOS3kl0dH94ZcVNIFzWYCTyCbKttIYBXikNUF3lXLEFM4xr3U1jFXDUubA55vaNK
xL04QWUwUFhFW1/UtB+4m3snmARYgB4dmN0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQNAKkZVXkxwrnCHTiuawTnvewmZjAfBgNVHSMEGDAWgBR+pzAd/NiFSBuuzZ27
7IoU6YFX2TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMTgvZnFjd0hmelloVWdicnMyZHUteUtGT21CVjlrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZnFjd0hmelloVWdicnMyZHUteUtG
T21CVjlrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDE4L0RRQ3BHVlY1TWNLNXdoMDRybXNFNTczc0ptWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnTw8wDQYJKoZIhvcNAQELBQADggEBAI932oS57e/udt1T21uUhjgK
04yqHNEQrLGmiFg1tTjo9IQuss13AxtoYnhyeQ/kgrOrW5cTEitUkM32ugS1aCTw
9eivKIo4O1XhmjTj7xECvleVHJGhXORvVF5S6Vax8n5ii0sc7vlIVxWz/6mInVe5
JvU8FsUIBp+zTfHaLv+JN2tpOT8lkMoSBhdiFjdrgPOPOeNJH65Qhy9B2HLigk5L
6Vz+5Y57SHxkVT6Fl3rlHwNBmN60uYpNq0cpBJBWAeQ0OMsIqlVikOVFFsGPEYxc
eH/UBrGP6YnZsMoYZq3oB07qjD/41YGPDNRIbvl1EMe22MXXd3zYp6n3T6HLtBg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:21:55 2025 by rpki-client