Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Va4rbyudFCrEjDRw6kcfvapKUPY.roa
File:                     Va4rbyudFCrEjDRw6kcfvapKUPY.roa (raw, json)
Hash identifier:          pjX+Vumsq9+wLAlck3Hgf/nu05XPi2VNJsy6TtU7qRI=
Subject key identifier:   55:AE:2B:6F:2B:9D:14:2A:C4:8C:34:70:EA:47:1F:BD:AA:4A:50:F6
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       F3
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Va4rbyudFCrEjDRw6kcfvapKUPY.roa
Signing time:             Sat 01 Nov 2025 01:28:33 +0000
ROA not before:           Sat 01 Nov 2025 01:28:33 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2914
IP address blocks:        117.103.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:28:33 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=55AE2B6F2B9D142AC48C3470EA471FBDAA4A50F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:5c:56:fa:69:76:12:58:94:02:ed:14:19:
                    e9:0c:bb:b1:00:99:a3:fa:66:89:ac:fa:6a:21:4c:
                    76:43:dd:48:02:f2:22:f8:cf:ba:b7:3b:d9:35:64:
                    02:b4:ad:93:ee:83:97:b8:8c:db:a6:bd:69:82:b6:
                    33:5f:7f:1e:ac:0f:7b:89:6c:87:9c:33:8a:17:b7:
                    0b:1d:17:3a:bc:82:78:f5:9a:28:11:9d:f6:84:fb:
                    57:ab:bf:19:74:4e:63:15:d1:60:05:54:74:3a:21:
                    2f:7d:36:c7:83:e1:89:e6:a2:7e:b9:1f:2d:30:61:
                    92:a5:be:eb:0e:b8:d5:d2:f5:f5:48:67:0b:43:0c:
                    45:e2:ec:ec:e6:28:b1:cc:40:55:df:18:6b:65:30:
                    4e:47:dc:8f:da:fa:cb:53:f4:93:02:b4:b4:8b:6e:
                    d6:89:d1:22:0f:b9:51:d9:bd:0d:a9:f7:36:e4:de:
                    63:b5:69:98:ee:d9:d1:ff:32:98:dd:fe:22:e0:d6:
                    5b:3e:e8:cb:6e:9e:66:ac:04:c1:dc:20:56:85:e6:
                    b9:c3:48:6e:7e:d4:e5:be:87:d1:d7:72:6c:10:33:
                    f2:9c:7a:cd:fb:74:44:bd:ff:4f:b7:57:33:6b:52:
                    eb:04:ac:ae:b9:86:ff:ef:74:15:a9:5b:ad:45:75:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AE:2B:6F:2B:9D:14:2A:C4:8C:34:70:EA:47:1F:BD:AA:4A:50:F6
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Va4rbyudFCrEjDRw6kcfvapKUPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:be:c0:c8:94:7a:99:22:51:4d:ca:c0:97:4f:14:de:4e:dd:
         a6:d4:d1:00:2b:b7:65:0c:81:cb:e4:15:f4:9e:f7:93:4e:41:
         b5:2f:37:28:5b:51:7d:2e:0f:e1:6a:26:30:f3:61:b7:ee:51:
         4d:98:54:0b:46:4c:df:26:a1:2b:dc:f1:50:a3:b1:47:b8:48:
         04:00:6b:54:9c:30:1d:17:38:76:71:9a:92:1b:5b:79:4b:29:
         23:da:80:48:81:18:bc:df:99:67:16:42:38:1b:c8:48:0c:33:
         57:06:e5:2f:43:fd:e4:fc:01:23:22:e3:ef:a6:02:da:d1:81:
         5b:74:c7:45:1a:1e:a9:73:fd:35:0b:86:c0:d9:32:ee:1d:5e:
         32:77:9a:0a:5b:b3:3a:53:9b:d2:55:5d:7b:54:ad:d2:76:56:
         ef:cc:63:5f:43:16:3e:48:f9:57:08:0d:11:66:7c:03:4c:1d:
         93:a7:c4:a3:6e:89:3a:50:b7:d0:79:f1:5f:d6:13:2a:73:1d:
         76:c3:3a:a7:dd:bb:16:71:55:60:35:a4:ef:87:6e:4a:08:7d:
         99:06:f8:3a:07:2d:10:0f:7b:19:02:dd:62:c0:fc:2c:95:1b:
         35:fd:1b:a5:39:36:23:b2:6b:8b:92:8c:d8:90:b5:00:5d:9f:
         43:09:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:21 2025 by rpki-client