Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
File:                     SOTPCEr74fQMr3wriXgNsW6H3Hk.roa (raw, json)
Hash identifier:          a3P5dGsrn2+RSHugnXIQlmJr4q4JAEEgcnQHBrww/Ks=
Subject key identifier:   48:E4:CF:08:4A:FB:E1:F4:0C:AF:7C:2B:89:78:0D:B1:6E:87:DC:79
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       E2
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
Signing time:             Fri 24 Oct 2025 10:27:09 +0000
ROA not before:           Fri 24 Oct 2025 10:27:09 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     23918
IP address blocks:        153.254.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Oct 24 10:27:09 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=48E4CF084AFBE1F40CAF7C2B89780DB16E87DC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:9d:1b:00:f8:9a:94:77:20:11:c4:1d:f7:
                    d7:f4:04:eb:6e:cb:f8:98:f4:a5:07:17:21:92:3a:
                    f6:14:be:98:d5:5e:16:e3:d5:25:07:28:db:c7:c8:
                    9c:d7:fc:0c:2a:e3:7f:1c:04:7f:7e:ab:48:63:84:
                    60:ae:3d:35:db:4d:f5:75:68:d9:b7:65:75:e2:67:
                    49:d5:75:36:24:f6:64:b2:f2:cd:85:66:74:f4:73:
                    6c:14:6b:21:cc:1b:0c:54:3e:40:ae:ac:22:d5:8f:
                    21:78:94:49:35:84:f6:89:76:0d:fd:b6:71:8f:55:
                    49:36:d5:2a:bb:61:db:8b:5f:f1:e7:ff:33:95:87:
                    2a:d7:12:72:21:14:26:7c:5c:83:9d:d9:67:54:2b:
                    54:e9:ca:f2:f6:22:a2:ca:3e:8a:48:c0:2c:fc:d8:
                    72:41:84:71:b0:99:be:01:9e:34:1b:76:c1:47:f4:
                    be:74:27:f8:cc:3f:54:5c:b3:62:82:98:ba:37:45:
                    7b:e5:d3:fd:6f:7b:f8:4e:8d:91:d2:c8:31:ac:8a:
                    c9:25:ce:e9:23:69:b1:4c:26:b4:ff:3b:94:0d:f8:
                    a8:14:d4:e1:6c:33:a0:a6:eb:00:d6:9b:e7:c2:e5:
                    55:5c:82:ed:0b:15:b3:1f:8c:7b:01:2e:62:e9:64:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:CF:08:4A:FB:E1:F4:0C:AF:7C:2B:89:78:0D:B1:6E:87:DC:79
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/SOTPCEr74fQMr3wriXgNsW6H3Hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:63:ca:0f:80:5c:f2:5b:0e:2c:14:94:7c:24:1d:17:3c:
         82:fd:c0:69:a1:aa:1f:33:16:55:54:1e:9f:7b:f0:cf:7f:9e:
         b5:04:b0:fa:de:a2:c9:52:e9:44:bf:36:81:df:58:b3:f5:79:
         3f:d2:e3:56:6d:72:06:42:1c:a4:82:5e:24:5f:07:3f:bd:97:
         f4:90:db:a6:2e:5d:b4:1a:08:2b:2f:9f:12:7e:8c:29:13:c4:
         4e:22:e6:4e:f8:e1:4b:86:9c:ae:6b:0e:60:e1:f6:b7:fe:05:
         fd:c0:d2:e2:32:4b:8c:45:eb:dd:08:4a:bf:4f:01:d3:3a:1a:
         db:e9:ee:37:22:13:09:f0:44:ce:6a:ff:10:18:d8:c5:db:65:
         ae:2e:7b:7b:db:de:50:4d:f2:79:4f:9e:c3:a5:0a:c4:09:76:
         50:80:7b:3a:9c:80:91:bb:5d:e6:35:66:18:41:d4:c7:42:6d:
         2d:77:48:39:ca:79:10:34:a0:9e:53:ab:72:aa:91:a9:8f:f9:
         de:8b:70:7c:87:ee:bb:f5:87:d4:e8:43:87:80:68:71:d2:37:
         3b:c4:74:8b:20:2b:ab:52:46:91:85:63:2a:33:d2:4f:6a:59:
         05:ed:9f:35:61:ba:8c:b8:03:6c:cc:0d:9e:f1:6f:91:59:84:
         c7:eb:08:64
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx
MDI3MDlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4RTRDRjA4NEFGQkUx
RjQwQ0FGN0MyQjg5NzgwREIxNkU4N0RDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOA50bAPialHcgEcQd99f0BOtuy/iY9KUHFyGSOvYUvpjVXhbj
1SUHKNvHyJzX/Awq438cBH9+q0hjhGCuPTXbTfV1aNm3ZXXiZ0nVdTYk9mSy8s2F
ZnT0c2wUayHMGwxUPkCurCLVjyF4lEk1hPaJdg39tnGPVUk21Sq7YduLX/Hn/zOV
hyrXEnIhFCZ8XIOd2WdUK1TpyvL2IqLKPopIwCz82HJBhHGwmb4BnjQbdsFH9L50
J/jMP1Rcs2KCmLo3RXvl0/1ve/hOjZHSyDGsisklzukjabFMJrT/O5QN+KgU1OFs
M6Cm6wDWm+fC5VVcgu0LFbMfjHsBLmLpZCEbAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSOTPCEr74fQMr3wriXgNsW6H3HkwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9TT1RQQ0VyNzRmUU1yM3dyaVhnTnNXNkgzSGsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAmf5cMA0GCSqGSIb3DQEBCwUAA4IBAQCeAmPKD4Bc8lsOLBSUfCQd
FzyC/cBpoaofMxZVVB6fe/DPf561BLD63qLJUulEvzaB31iz9Xk/0uNWbXIGQhyk
gl4kXwc/vZf0kNumLl20GggrL58SfowpE8ROIuZO+OFLhpyuaw5g4fa3/gX9wNLi
MkuMRevdCEq/TwHTOhrb6e43IhMJ8ETOav8QGNjF22WuLnt7295QTfJ5T57DpQrE
CXZQgHs6nICRu13mNWYYQdTHQm0td0g5ynkQNKCeU6tyqpGpj/nei3B8h+679YfU
6EOHgGhx0jc7xHSLICurUkaRhWMqM9JPalkF7Z81YbqMuANszA2e8W+RWYTH6whk
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:22:38 2025 by rpki-client