Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
File:                     FWESt5rwQxvKCoxPUILP2qQ4wLg.roa (raw, json)
Hash identifier:          pCdmyEsME6sYpM3u8uwjq8wAefUwK7aa5ZUjqPKB+mg=
Subject key identifier:   15:61:12:B7:9A:F0:43:1B:CA:0A:8C:4F:50:82:CF:DA:A4:38:C0:B8
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       011C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
Signing time:             Sat 01 Nov 2025 01:33:57 +0000
ROA not before:           Sat 01 Nov 2025 01:33:57 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2914
IP address blocks:        203.105.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:57 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=156112B79AF0431BCA0A8C4F5082CFDAA438C0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:8a:ad:f8:a9:fe:72:8c:e7:53:98:47:5c:
                    bf:be:eb:ee:a8:2a:99:01:69:05:f3:5b:95:e6:f7:
                    ee:e2:35:56:2c:93:83:40:a8:74:18:e6:5c:d2:05:
                    c0:ce:fe:c3:c7:4e:26:a5:bf:1a:d9:5f:25:de:69:
                    93:89:a2:13:d0:f9:83:42:b4:bd:6c:fc:80:91:77:
                    9a:41:2a:69:9d:cc:a9:dd:bc:a3:e5:35:f7:dd:18:
                    7f:8f:cb:f1:2c:53:cf:74:6a:fb:66:62:09:37:71:
                    9b:e1:e6:ea:2d:84:55:0c:1c:24:9a:c8:39:5b:6d:
                    b8:66:66:f7:66:b0:4c:a2:54:ce:dd:43:6a:7e:4b:
                    0e:3b:b2:fc:7d:c6:46:71:78:cb:09:37:9f:fe:68:
                    85:2b:86:6b:f6:29:10:5b:c4:82:4f:7c:33:15:7f:
                    0a:4b:30:6e:d7:4d:ad:6f:42:3a:ce:4e:72:e7:8a:
                    ab:fc:66:72:a4:53:73:71:51:bd:18:66:31:b1:87:
                    4b:37:c3:d5:55:5d:5b:a9:25:7e:c4:5d:18:41:d2:
                    25:5f:d7:c4:1f:5c:5a:cc:0d:a3:0e:6e:c2:4b:9c:
                    a1:07:05:04:42:c2:78:dd:b8:51:39:d7:d2:2a:0d:
                    c5:d0:32:fb:78:37:89:e1:18:c7:87:a8:67:aa:29:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:12:B7:9A:F0:43:1B:CA:0A:8C:4F:50:82:CF:DA:A4:38:C0:B8
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FWESt5rwQxvKCoxPUILP2qQ4wLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:29:02:00:49:b7:6c:40:1b:09:25:23:56:46:d0:9f:de:
         0a:02:df:03:82:83:ae:5d:d9:5a:ad:d8:f8:c0:70:95:4f:e2:
         1b:9b:49:72:ec:ec:21:ad:8c:56:c6:5e:1a:33:fd:72:38:45:
         51:ea:3b:9f:56:20:8c:db:70:d9:21:ca:b3:5f:bc:c6:48:5d:
         da:fc:95:a8:cb:9a:07:6c:59:57:fb:bb:d8:1e:97:2a:27:dd:
         8f:35:2f:8b:06:60:b5:77:87:f9:7e:8e:38:8e:a3:46:8d:d6:
         00:3b:09:8b:0c:2a:2b:a2:01:19:d3:9c:45:39:86:f2:7e:b5:
         ef:ad:94:5d:d0:b2:2a:26:37:bc:42:d2:d7:2d:af:b3:e0:7a:
         ac:df:0e:c5:5c:48:25:59:ea:a3:3e:08:35:5a:0b:df:4d:98:
         10:c2:85:cf:20:ab:61:9e:c1:5b:e4:3c:32:34:ca:ab:25:78:
         6e:00:76:1e:1f:41:0f:c5:c6:9f:b4:55:71:60:b5:9d:7f:92:
         b3:d7:4a:2b:66:f3:db:dc:93:4d:6f:f3:4b:3d:70:a0:6c:94:
         8d:0e:79:ca:53:de:b4:34:b8:b8:55:b9:7d:cd:13:d5:40:7d:
         b2:c0:30:c8:51:24:62:01:a0:5e:dd:fd:7c:b0:fe:38:59:1c:
         b5:2b:ff:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw
MTMzNTdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1NjExMkI3OUFGMDQz
MUJDQTBBOEM0RjUwODJDRkRBQTQzOEMwQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw5Iqt+Kn+coznU5hHXL++6+6oKpkBaQXzW5Xm9+7iNVYsk4NA
qHQY5lzSBcDO/sPHTialvxrZXyXeaZOJohPQ+YNCtL1s/ICRd5pBKmmdzKndvKPl
NffdGH+Py/EsU890avtmYgk3cZvh5uothFUMHCSayDlbbbhmZvdmsEyiVM7dQ2p+
Sw47svx9xkZxeMsJN5/+aIUrhmv2KRBbxIJPfDMVfwpLMG7XTa1vQjrOTnLniqv8
ZnKkU3NxUb0YZjGxh0s3w9VVXVupJX7EXRhB0iVf18QfXFrMDaMObsJLnKEHBQRC
wnjduFE519IqDcXQMvt4N4nhGMeHqGeqKURfAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUFWESt5rwQxvKCoxPUILP2qQ4wLgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9GV0VTdDVyd1F4dktDb3hQVUlMUDJxUTR3TGcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFy2lAMA0GCSqGSIb3DQEBCwUAA4IBAQCO0SkCAEm3bEAbCSUjVkbQ
n94KAt8DgoOuXdlardj4wHCVT+Ibm0ly7OwhrYxWxl4aM/1yOEVR6jufViCM23DZ
IcqzX7zGSF3a/JWoy5oHbFlX+7vYHpcqJ92PNS+LBmC1d4f5fo44jqNGjdYAOwmL
DCorogEZ05xFOYbyfrXvrZRd0LIqJje8QtLXLa+z4Hqs3w7FXEglWeqjPgg1Wgvf
TZgQwoXPIKthnsFb5DwyNMqrJXhuAHYeH0EPxcaftFVxYLWdf5Kz10orZvPb3JNN
b/NLPXCgbJSNDnnKU960NLi4Vbl9zRPVQH2ywDDIUSRiAaBe3f18sP44WRy1K/+t
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:02 2025 by rpki-client