Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
File:                     Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa (raw, json)
Hash identifier:          HGOyuRi4xBWCwp8bP1BpWwm4zwAapi7xuaYgf97TEaU=
Subject key identifier:   5A:A6:B9:24:2C:3E:88:66:D1:67:5D:11:08:47:51:CE:E0:25:A9:78
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       011E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
Signing time:             Sat 01 Nov 2025 01:33:58 +0000
ROA not before:           Sat 01 Nov 2025 01:33:58 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2914
IP address blocks:        117.104.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:58 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5AA6B9242C3E8866D1675D11084751CEE025A978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:a3:9a:e5:99:d5:56:83:eb:5b:2d:62:41:
                    4a:cf:d2:6c:23:b9:00:14:c3:3e:5c:af:38:73:d1:
                    c1:5e:92:05:c6:f4:b2:bd:9c:64:d6:23:af:d4:08:
                    90:cf:42:14:e9:6f:8e:87:1c:59:42:3f:1f:4f:87:
                    3b:85:68:6a:57:12:0f:c0:8f:76:f9:b9:05:06:c3:
                    7b:45:32:1d:a9:09:64:6a:f9:5b:3e:89:97:c0:35:
                    19:d6:57:89:22:2e:4b:d1:6b:c2:fe:56:b9:f4:c2:
                    57:72:75:e4:4c:1a:ec:be:98:e5:a9:7f:3f:43:6f:
                    89:4b:7f:28:92:11:f6:3f:43:db:2d:87:27:7e:fd:
                    69:3e:c8:18:ad:8e:5e:2e:eb:85:ce:b1:ff:1c:e8:
                    01:44:b7:26:19:50:2a:26:17:d8:3f:fc:5d:13:75:
                    80:6b:f5:b2:73:f3:e6:ab:d6:b9:a8:b1:e1:50:30:
                    5c:63:6f:00:16:da:bc:16:9b:46:81:79:23:e3:0f:
                    1c:c7:b7:b5:c8:82:72:20:c0:aa:0f:dd:0a:c3:8f:
                    80:66:55:28:5f:96:c7:9d:30:2f:13:68:0e:c7:53:
                    d7:e4:26:73:81:5e:30:8c:62:2c:c1:25:25:05:78:
                    86:f0:9e:df:f0:56:3c:30:ad:18:9b:89:9b:a8:8e:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:B9:24:2C:3E:88:66:D1:67:5D:11:08:47:51:CE:E0:25:A9:78
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Wqa5JCw-iGbRZ10RCEdRzuAlqXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:b9:63:74:d9:ea:3e:22:05:8a:0f:6c:96:7e:88:04:dd:a0:
         a4:56:0a:02:48:75:d8:46:88:b9:bb:66:3c:8a:a1:53:cc:8c:
         51:91:3a:2c:c5:b8:b2:22:b4:fc:68:ab:1b:75:50:6f:72:16:
         43:ef:a4:9e:f1:10:ee:dd:06:37:63:6e:65:ae:48:fb:0b:7d:
         26:26:c5:64:c7:8d:14:98:c3:e1:17:00:9c:75:a2:b5:5d:06:
         02:8f:57:c8:95:6f:f3:6f:74:20:06:79:9d:e7:7e:fb:39:98:
         67:a3:4d:d1:0c:26:3c:83:44:a2:b9:1f:e6:81:b9:95:fe:d4:
         ae:bd:d8:24:a0:cb:c6:b4:7e:5d:09:7e:7d:c9:01:96:ca:a4:
         e9:45:35:66:e6:61:c3:21:15:7f:71:97:f5:51:2e:2c:81:c3:
         50:a7:fc:30:fb:9e:20:ae:a1:e2:c3:ff:7e:ea:29:71:e3:99:
         03:49:2e:45:f6:e4:03:dd:ea:b0:2c:e2:3f:3f:05:11:11:8c:
         00:33:49:ab:21:02:3c:5a:ef:07:1f:57:21:ed:01:2c:95:d2:
         c2:29:34:7b:8b:f4:e8:13:10:59:88:e6:05:a4:cc:5b:8f:de:
         14:75:71:2a:4e:7f:73:06:c9:ef:ce:e6:40:1d:62:51:6b:a4:
         14:f1:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:09:30 2025 by rpki-client