Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
File:                     Tv82jDkvYXnNklBDEqqgIxpE2L0.roa (raw, json)
Hash identifier:          /dWtmfKBETHuIoz+GMPjWu43KeB5O2dbqZH3YSW4dZY=
Subject key identifier:   4E:FF:36:8C:39:2F:61:79:CD:92:50:43:12:AA:A0:23:1A:44:D8:BD
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       010C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
Signing time:             Sat 01 Nov 2025 01:33:48 +0000
ROA not before:           Sat 01 Nov 2025 01:33:48 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     399077
IP address blocks:        124.40.53.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:48 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=4EFF368C392F6179CD92504312AAA0231A44D8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9c:5d:54:00:4b:21:26:50:97:5e:71:fe:84:
                    bc:e8:e3:b9:9e:de:b2:7d:29:01:f9:80:61:5b:23:
                    0b:d5:36:fe:d2:8c:ea:d2:d6:1b:94:f9:b1:a1:cb:
                    d1:a8:9e:40:9f:33:2d:1a:98:f7:33:4d:29:88:2a:
                    8e:68:ba:e2:df:21:ee:f5:1e:52:ba:35:7f:ab:67:
                    ef:3e:0e:cf:8f:e9:85:13:43:aa:f6:2a:33:59:ac:
                    b5:81:3f:af:e6:f0:33:3a:ec:b6:9a:5f:53:b2:b0:
                    d2:c3:10:d3:79:21:4f:c8:eb:2c:68:5a:de:7b:ed:
                    c1:f6:78:e3:7b:4a:83:9b:e2:a5:69:40:b8:e5:8d:
                    6d:1d:6a:bc:9a:a8:e6:86:89:63:91:7f:3f:c4:b5:
                    4d:3f:3b:6a:b1:0a:b1:26:b2:eb:61:78:3d:f8:10:
                    88:32:3e:62:19:ec:f1:9b:ba:8e:cb:38:0e:1e:f3:
                    00:9a:1f:1f:54:42:02:35:9e:f2:49:eb:ce:e4:2d:
                    84:b2:34:c9:82:cc:d7:c3:b7:98:f7:66:ed:85:68:
                    48:50:d3:42:ed:65:b2:75:33:07:9a:e4:55:02:a9:
                    1e:f5:1e:0b:d3:9a:87:b1:6a:19:1e:dd:cf:fc:04:
                    57:ef:86:a0:19:d7:20:23:e2:9f:2c:02:bb:88:0e:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FF:36:8C:39:2F:61:79:CD:92:50:43:12:AA:A0:23:1A:44:D8:BD
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Tv82jDkvYXnNklBDEqqgIxpE2L0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.53.128/25

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:fb:b9:56:0f:d4:3c:ae:88:20:28:c4:79:f7:d0:64:32:
         0b:11:08:92:f5:20:58:35:fa:10:d8:aa:3d:46:6e:3e:8b:e3:
         51:a8:e8:9b:80:c8:01:be:65:88:23:76:ff:63:f1:2f:be:be:
         1c:9d:e6:cc:b6:1c:7c:8e:3b:f9:b6:62:da:c5:dd:ad:f8:f0:
         fb:32:2a:cd:5e:60:7c:31:bc:6b:c8:62:d9:7e:d5:dc:55:6e:
         95:fb:cc:b3:6f:be:d8:54:19:6c:5a:c9:99:ee:c5:9d:7b:61:
         27:11:40:bb:f8:13:c0:99:f1:3d:fb:d7:d3:33:c0:ce:d3:55:
         14:ff:cb:99:c9:f0:82:a6:57:f8:a0:38:c3:cb:5d:71:30:17:
         31:a8:6c:1d:4e:c8:cc:a6:94:bf:92:42:5a:d3:36:cd:ef:17:
         3e:21:92:7a:95:f2:23:01:6d:42:0a:19:34:f2:82:e0:2b:8b:
         37:bd:e2:16:fc:29:db:72:d8:13:0f:a3:ef:43:60:2f:68:b0:
         b2:2a:12:39:24:f0:d8:f2:d0:94:ad:bb:92:85:cb:2c:5c:d6:
         d8:7f:39:8f:5b:97:44:35:d5:57:7c:10:8b:1f:76:cc:b9:61:
         2a:53:ff:fe:87:a2:af:08:c5:1a:6e:00:27:de:41:62:aa:db:
         50:4c:40:46
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw
MTMzNDhaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRFRkYzNjhDMzkyRjYx
NzlDRDkyNTA0MzEyQUFBMDIzMUE0NEQ4QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1nF1UAEshJlCXXnH+hLzo47me3rJ9KQH5gGFbIwvVNv7SjOrS
1huU+bGhy9GonkCfMy0amPczTSmIKo5ouuLfIe71HlK6NX+rZ+8+Ds+P6YUTQ6r2
KjNZrLWBP6/m8DM67LaaX1OysNLDENN5IU/I6yxoWt577cH2eON7SoOb4qVpQLjl
jW0daryaqOaGiWORfz/EtU0/O2qxCrEmsutheD34EIgyPmIZ7PGbuo7LOA4e8wCa
Hx9UQgI1nvJJ687kLYSyNMmCzNfDt5j3Zu2FaEhQ00LtZbJ1Mwea5FUCqR71HgvT
moexahke3c/8BFfvhqAZ1yAj4p8sAruIDucXAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUTv82jDkvYXnNklBDEqqgIxpE2L0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9UdjgyakRrdllYbk5rbEJERXFxZ0l4cEUyTDAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUHfCg1gDANBgkqhkiG9w0BAQsFAAOCAQEAXp77uVYP1DyuiCAoxHn3
0GQyCxEIkvUgWDX6ENiqPUZuPovjUajom4DIAb5liCN2/2PxL76+HJ3mzLYcfI47
+bZi2sXdrfjw+zIqzV5gfDG8a8hi2X7V3FVulfvMs2++2FQZbFrJme7FnXthJxFA
u/gTwJnxPfvX0zPAztNVFP/LmcnwgqZX+KA4w8tdcTAXMahsHU7IzKaUv5JCWtM2
ze8XPiGSepXyIwFtQgoZNPKC4CuLN73iFvwp23LYEw+j70NgL2iwsioSOSTw2PLQ
lK27koXLLFzW2H85j1uXRDXVV3wQix92zLlhKlP//oeirwjFGm4AJ95BYqrbUExA
Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:40 2025 by rpki-client