Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eICWfvqOQewEkzGpP33mKrMCGLw.roa
File:                     eICWfvqOQewEkzGpP33mKrMCGLw.roa (raw, json)
Hash identifier:          VSQW8w3Vqdv65B0+dxcbEFlaZfny6naAKMKDoxqd+JE=
Subject key identifier:   78:80:96:7E:FA:8E:41:EC:04:93:31:A9:3F:7D:E6:2A:B3:02:18:BC
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       F9
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eICWfvqOQewEkzGpP33mKrMCGLw.roa
Signing time:             Sat 01 Nov 2025 01:28:37 +0000
ROA not before:           Sat 01 Nov 2025 01:28:37 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     394265
IP address blocks:        117.104.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 08:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:28:37 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=7880967EFA8E41EC049331A93F7DE62AB30218BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:ea:fc:75:09:c6:5d:eb:9c:b5:31:91:5a:
                    56:e1:89:76:ad:c2:90:af:5d:f1:14:8c:c2:f3:4b:
                    57:9c:8c:03:60:4e:1f:a1:68:89:c7:91:ec:ce:bc:
                    82:06:74:69:7b:e7:72:7d:2e:3a:37:23:63:41:18:
                    60:70:6a:5e:54:a6:b2:54:ab:c4:02:f5:1a:5b:07:
                    ca:d5:0d:33:61:4a:c7:56:6c:55:02:1a:57:53:8d:
                    d8:30:9e:db:4c:4f:e4:3c:c1:d0:94:92:cf:fc:01:
                    5c:9d:2b:5c:54:b5:55:1f:23:0b:d4:6b:95:66:07:
                    55:5c:5f:f9:f5:bd:26:4e:54:d3:e6:fc:08:3d:bc:
                    ac:b8:f0:75:aa:9e:3c:6d:b4:04:af:89:5c:12:b8:
                    bd:0f:3e:4f:3e:8d:0b:c7:42:bb:c7:5d:2b:71:f2:
                    e3:1b:1f:b9:68:c2:cc:7c:b8:b9:5e:2c:18:42:d1:
                    bf:d0:e5:81:1f:20:c3:e8:80:1e:39:d1:b4:10:6a:
                    28:52:d3:8d:c7:7e:c1:7b:b5:f5:03:ab:5a:81:ce:
                    17:a2:26:5b:98:6f:fe:c6:29:98:af:af:f6:ba:25:
                    3c:87:f0:ce:e0:f8:0a:03:72:13:b3:1f:32:c7:b9:
                    6d:74:20:8c:18:84:f4:15:a3:da:70:24:23:f8:78:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:80:96:7E:FA:8E:41:EC:04:93:31:A9:3F:7D:E6:2A:B3:02:18:BC
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/eICWfvqOQewEkzGpP33mKrMCGLw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:23:7a:62:83:9c:46:1b:c0:f4:87:cc:3b:aa:75:74:d4:
         01:08:b1:85:69:17:1d:40:f9:b5:f9:2b:ad:f3:a2:40:33:ff:
         06:c8:18:e9:07:66:5d:75:26:c4:33:b5:26:f9:e0:38:3c:13:
         2b:1b:e6:b1:56:b7:6d:aa:1e:f3:61:53:e4:2a:2b:c2:e1:41:
         7d:25:98:ea:78:10:20:b1:01:e5:1c:93:e2:fc:4e:25:ce:1a:
         ce:b8:eb:65:06:b7:2c:23:dc:28:a1:f8:35:8b:6a:01:60:af:
         b6:09:ba:a2:c1:01:59:bc:ca:73:8a:ad:88:ca:42:f1:c3:d2:
         18:62:bd:74:66:e8:30:78:2c:55:6f:2b:2e:ea:1d:90:da:9a:
         98:ba:9e:e6:fe:4e:2e:09:ca:c5:ae:3c:c0:55:49:e9:dc:e3:
         19:16:8f:f5:d2:50:cd:e1:b4:da:ab:2f:8d:bf:a6:dd:95:05:
         cb:39:7b:6d:7c:22:b1:f9:51:39:07:7a:4d:45:c7:3a:94:cd:
         87:74:c3:c5:f4:45:38:17:50:65:a2:e8:43:b2:a1:43:d2:61:
         ce:dd:4a:24:0c:34:4a:95:2c:e6:63:e9:a0:b1:3d:33:51:72:
         fc:2f:68:3b:20:2b:1f:2b:20:ee:35:a4:45:37:93:3f:5a:d4:
         5f:48:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:34:54 2025 by rpki-client