Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c1nBetTEnKbVZj21nvhmIpM27gA.roa
File:                     c1nBetTEnKbVZj21nvhmIpM27gA.roa (raw, json)
Hash identifier:          SEehDG2WzTp5rNTVAJUHGz072TiBR67pK+SB/ZEJTkc=
Subject key identifier:   73:59:C1:7A:D4:C4:9C:A6:D5:66:3D:B5:9E:F8:66:22:93:36:EE:00
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0105
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c1nBetTEnKbVZj21nvhmIpM27gA.roa
Signing time:             Sat 01 Nov 2025 01:28:43 +0000
ROA not before:           Sat 01 Nov 2025 01:28:43 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     3949
IP address blocks:        61.200.83.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:28:43 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=7359C17AD4C49CA6D5663DB59EF866229336EE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:71:5c:3f:b7:94:2e:57:25:00:43:47:dd:
                    7b:8d:d7:fe:c2:79:ef:4b:cd:8b:f3:a2:18:58:5e:
                    fc:a1:31:e8:db:56:e4:55:e8:95:5d:32:91:1c:07:
                    53:db:58:18:54:76:f6:8a:c9:8d:6c:ce:56:2f:e5:
                    d6:2b:17:09:cd:9e:fe:9a:c7:1b:a6:3b:b0:9d:aa:
                    fe:40:f3:3d:e7:8f:69:6d:c5:4a:52:8b:b0:99:93:
                    66:1d:92:a6:0d:d9:9e:68:e2:4b:51:91:63:36:63:
                    c8:76:6b:cd:df:80:47:c2:e3:46:ca:ad:e6:bc:0d:
                    4a:5d:4f:94:e8:26:8c:c0:ce:7f:31:57:f7:76:1b:
                    e8:ab:63:44:2a:7f:2c:db:58:95:2a:23:1a:28:fe:
                    21:b9:f3:44:ad:53:53:a4:4d:bd:9f:ad:b4:41:95:
                    d7:da:b4:75:5e:fb:06:c5:f1:bd:5f:9e:67:56:c4:
                    9d:cb:9b:d2:8f:52:4a:00:ee:c0:9a:ec:bb:7a:f3:
                    0a:d4:37:7a:11:b5:fc:f3:18:6e:ed:bc:b4:ab:8a:
                    e7:75:bc:c2:d7:c2:ae:d7:fd:f1:8f:3b:25:e4:06:
                    d7:57:46:43:f6:da:25:1b:3e:51:ea:de:f5:98:cb:
                    5e:ad:55:f6:a0:f4:19:e3:76:e8:0a:b3:5d:c0:02:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:59:C1:7A:D4:C4:9C:A6:D5:66:3D:B5:9E:F8:66:22:93:36:EE:00
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c1nBetTEnKbVZj21nvhmIpM27gA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.192/26

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:bd:df:3e:a7:63:00:94:99:44:ad:6d:b5:b8:71:12:e1:
         76:71:71:a8:15:e0:94:16:74:5c:04:27:30:26:95:d8:d3:5d:
         98:14:b2:2d:a4:92:84:fc:10:05:dc:8c:2f:87:70:77:f6:63:
         f5:36:06:ac:a9:c5:eb:37:32:65:35:b8:b1:cd:0a:ca:0c:f5:
         e6:36:90:4d:3a:81:89:a1:40:b1:ef:ae:54:b1:1d:b1:ba:3c:
         7b:84:40:32:b0:63:ee:4c:96:7e:be:0a:b3:2a:40:c7:ee:1f:
         73:4b:60:49:71:75:ee:78:97:20:54:5c:b8:34:15:13:e9:84:
         6f:a0:a6:98:1e:e4:bb:8f:3f:fa:ce:73:f5:05:40:f4:89:f0:
         88:b3:ce:20:d8:03:6d:ce:25:1f:9a:86:73:9e:ea:ce:1e:7f:
         1f:e2:6d:78:d0:e4:82:58:60:4d:f2:16:89:f9:dc:4d:30:ae:
         ea:69:58:c5:d2:fa:aa:17:80:43:fe:4a:45:9e:2a:d4:02:aa:
         03:77:33:1d:49:13:89:b9:17:78:a2:7a:bc:ff:80:bb:18:20:
         1b:d2:45:f6:2f:b3:e1:11:04:4a:77:7f:e9:f2:56:1e:7f:c9:
         18:30:24:8e:76:2e:79:a5:a0:80:70:76:f9:96:ae:a4:3f:1d:
         1e:9c:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:08 2025 by rpki-client