Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20018/rMBCsH1-otMfZdL83hfsUFQU4QU.roa
File:                     rMBCsH1-otMfZdL83hfsUFQU4QU.roa (raw, json)
Hash identifier:          de+IccXqvpC4pApBSP8ZeI1HyZ7dfM25xGiFzoQFGPs=
Subject key identifier:   AC:C0:42:B0:7D:7E:A2:D3:1F:65:D2:FC:DE:17:EC:50:54:14:E1:05
Certificate issuer:       /CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Certificate serial:       4B
Authority key identifier: 7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/rMBCsH1-otMfZdL83hfsUFQU4QU.roa
Signing time:             Wed 05 Nov 2025 02:16:27 +0000
ROA not before:           Wed 05 Nov 2025 02:16:27 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131912
IP address blocks:        103.79.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
        Validity
            Not Before: Nov  5 02:16:27 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=ACC042B07D7EA2D31F65D2FCDE17EC505414E105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:38:64:31:ae:35:3f:e0:9d:3e:10:b5:b2:
                    84:f9:3f:34:a3:94:b1:bf:9f:3e:66:f6:1c:20:63:
                    53:fd:0c:0b:af:13:6c:ee:88:c7:0c:cd:fc:58:4d:
                    29:d8:cc:1d:36:66:bd:3d:74:04:5b:e7:32:7e:65:
                    75:93:5b:5b:79:d6:7b:62:31:6a:c3:65:71:56:07:
                    15:12:e0:11:e7:2c:20:95:5a:ef:fe:cb:31:a1:a7:
                    ed:60:0d:8a:45:fb:8a:39:0f:92:10:00:a4:c4:f3:
                    14:b7:73:67:1c:68:be:f0:b6:e9:76:3d:8f:80:2f:
                    3d:48:a5:0c:6e:e8:e5:21:cf:bc:90:aa:7c:84:5b:
                    f5:12:ce:3d:0f:99:ac:5c:22:2c:1b:27:d9:96:5f:
                    7f:d9:3f:9e:01:c5:47:ce:7f:08:13:05:c6:5b:e0:
                    4a:12:66:c1:35:4b:17:ec:dd:77:cd:d7:ca:54:63:
                    b0:05:83:76:8e:b4:2f:22:a4:f0:bc:a8:8c:0c:0c:
                    03:5a:0c:94:8d:15:84:d0:fc:fa:21:5f:cd:dd:ba:
                    04:4e:d8:5a:1f:46:e1:c2:00:1a:a4:67:b7:ca:ec:
                    e0:2d:d2:15:49:64:8c:4c:00:b9:2e:e5:97:c5:b6:
                    c3:0a:d8:8c:33:a1:2b:fc:af:21:1c:34:20:c3:58:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C0:42:B0:7D:7E:A2:D3:1F:65:D2:FC:DE:17:EC:50:54:14:E1:05
            X509v3 Authority Key Identifier:
                keyid:7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/rMBCsH1-otMfZdL83hfsUFQU4QU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6d:8b:46:92:be:fa:cf:74:21:d2:99:f3:38:8d:fc:98:9a:
         5e:af:a7:c7:fc:1f:e6:9f:a5:0f:30:02:2f:c0:4a:18:d6:15:
         e0:f8:e6:e9:42:7f:61:17:90:f7:b4:db:cb:03:98:7a:63:39:
         dc:f6:e3:99:d3:0f:d3:53:fb:d0:86:1c:57:90:68:49:67:1e:
         df:6f:5e:52:57:ee:f3:3a:b9:36:cc:80:a1:ab:3c:ad:b1:df:
         e9:3e:aa:f7:37:20:dd:05:10:bd:2c:a4:57:f0:a6:1a:51:d2:
         75:f8:36:d5:c8:79:78:d6:d1:c9:7c:16:73:3b:3c:cb:9d:ee:
         64:5c:9e:04:05:33:2d:ed:b7:11:e1:a6:6d:ff:ff:1e:7d:15:
         89:7f:71:14:bf:99:b5:d5:04:2e:d6:ff:fc:26:7b:8b:19:37:
         f2:9f:9b:1f:38:31:7e:c6:15:af:39:cb:b3:0b:85:76:13:4a:
         4d:a4:a6:23:d0:d9:d0:18:63:45:6d:e8:41:7f:78:2a:98:d4:
         ab:b2:9a:fb:0a:92:01:4b:ba:f0:cd:cf:b5:e4:a1:6e:83:16:
         42:a0:67:c6:83:3b:fd:b4:9f:d9:15:71:8f:b7:62:fa:6e:13:
         0a:83:60:84:9c:4e:fb:8f:63:a4:76:57:5f:5d:b6:29:0f:3f:
         b1:7b:a6:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:31:53 2025 by rpki-client