Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vB_EWrs9DQC9OU8fTQWyKg3J4Yo.roa
File:                     vB_EWrs9DQC9OU8fTQWyKg3J4Yo.roa (raw, json)
Hash identifier:          C+Aey6ENNn41UlLzHpRPwgwnZOttwsPoPwq80DI79W0=
Subject key identifier:   BC:1F:C4:5A:BB:3D:0D:00:BD:39:4F:1F:4D:05:B2:2A:0D:C9:E1:8A
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       011F
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vB_EWrs9DQC9OU8fTQWyKg3J4Yo.roa
Signing time:             Sat 01 Nov 2025 01:33:59 +0000
ROA not before:           Sat 01 Nov 2025 01:33:59 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2914
IP address blocks:        120.29.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:59 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=BC1FC45ABB3D0D00BD394F1F4D05B22A0DC9E18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:04:86:24:e5:f5:92:2c:d5:9b:23:23:a8:
                    d4:a2:b4:e4:c2:6c:56:30:89:2c:13:33:69:5f:91:
                    bc:bd:38:0f:ae:41:33:c2:a2:c1:1e:1d:80:86:9b:
                    43:65:ec:37:95:84:26:28:f7:d3:02:e6:4f:08:00:
                    fe:89:45:6d:2a:a8:6d:19:7c:8b:c4:c1:44:9b:42:
                    82:da:d9:1b:4d:39:b1:30:b3:88:fc:c1:36:ce:5a:
                    5f:23:f1:33:ad:98:ab:4c:71:9a:f4:34:45:b5:46:
                    6e:85:20:4b:ae:c7:e4:95:1c:cf:52:54:54:1a:f0:
                    6a:ef:68:77:0f:7c:8d:3f:2e:32:b2:52:a3:c4:e9:
                    1a:57:02:85:fe:42:bf:f2:b6:cb:6b:c0:80:c9:75:
                    b8:bc:59:fa:97:38:26:d5:c7:94:76:c0:e8:01:2b:
                    41:e8:67:2c:72:ed:2d:a7:4b:72:6c:52:d2:29:54:
                    17:94:ef:90:a0:c0:d1:00:fc:52:32:b3:bd:c3:ba:
                    a7:8b:aa:8a:3d:a1:7f:af:47:c8:91:a3:1a:8c:d2:
                    da:c0:a9:4c:4f:74:4d:92:1d:53:72:ea:b5:cb:8f:
                    24:7b:2d:14:d3:8b:0b:ce:81:cc:1e:4c:cc:b9:1f:
                    6d:ad:40:76:dd:1f:a6:51:62:5f:f6:c4:d9:2b:86:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1F:C4:5A:BB:3D:0D:00:BD:39:4F:1F:4D:05:B2:2A:0D:C9:E1:8A
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vB_EWrs9DQC9OU8fTQWyKg3J4Yo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:84:73:d7:9a:38:d9:44:7a:29:00:60:e1:b3:02:ab:31:1b:
         55:e6:fc:b7:18:c6:c2:fd:6d:bd:5f:c4:99:d6:e1:88:60:d7:
         69:e4:21:5a:48:04:e6:d7:10:10:d7:68:bf:93:d6:bc:2e:bd:
         c3:32:f0:8a:25:ff:1b:86:82:b8:88:11:dc:02:36:ee:e1:54:
         b8:ef:2b:ef:c3:6b:9c:aa:6e:75:79:9e:c4:34:fc:45:74:72:
         41:f8:af:c5:84:be:82:27:f1:53:34:8a:44:b1:65:11:c3:3a:
         1b:a5:c4:2b:8f:23:03:be:2d:e5:34:97:53:dc:3f:34:c8:46:
         18:b6:a5:3e:f9:78:01:65:8b:b7:c0:57:73:94:5b:80:cf:dd:
         e6:a3:5e:da:de:d7:1a:2f:b1:92:dc:38:c6:d3:fe:b3:55:0d:
         a8:0e:80:0b:90:f6:7a:8c:af:d9:14:84:1a:21:e4:70:fc:e6:
         b9:d7:55:c3:d3:e6:3f:31:2f:12:47:39:04:5a:08:1e:8c:a9:
         89:1f:d3:29:1d:9e:11:70:49:e5:c9:d8:dc:d1:0d:47:bd:46:
         66:5e:04:06:de:04:13:76:b4:fb:8c:e2:7b:e2:42:af:0f:70:
         1e:61:1d:43:dc:22:30:04:cf:71:62:80:1b:3d:db:23:24:f2:
         e5:cd:6f:14
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw
MTMzNTlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDMUZDNDVBQkIzRDBE
MDBCRDM5NEYxRjREMDVCMjJBMERDOUUxOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCAgSGJOX1kizVmyMjqNSitOTCbFYwiSwTM2lfkby9OA+uQTPC
osEeHYCGm0Nl7DeVhCYo99MC5k8IAP6JRW0qqG0ZfIvEwUSbQoLa2RtNObEws4j8
wTbOWl8j8TOtmKtMcZr0NEW1Rm6FIEuux+SVHM9SVFQa8GrvaHcPfI0/LjKyUqPE
6RpXAoX+Qr/ytstrwIDJdbi8WfqXOCbVx5R2wOgBK0HoZyxy7S2nS3JsUtIpVBeU
75CgwNEA/FIys73DuqeLqoo9oX+vR8iRoxqM0trAqUxPdE2SHVNy6rXLjyR7LRTT
iwvOgcweTMy5H22tQHbdH6ZRYl/2xNkrho2fAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUvB/EWrs9DQC9OU8fTQWyKg3J4YowHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC92Ql9FV3JzOURRQzlPVThmVFFXeUtnM0o0WW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFeB2gMA0GCSqGSIb3DQEBCwUAA4IBAQAnhHPXmjjZRHopAGDhswKr
MRtV5vy3GMbC/W29X8SZ1uGIYNdp5CFaSATm1xAQ12i/k9a8Lr3DMvCKJf8bhoK4
iBHcAjbu4VS47yvvw2ucqm51eZ7ENPxFdHJB+K/FhL6CJ/FTNIpEsWURwzobpcQr
jyMDvi3lNJdT3D80yEYYtqU++XgBZYu3wFdzlFuAz93mo17a3tcaL7GS3DjG0/6z
VQ2oDoALkPZ6jK/ZFIQaIeRw/Oa511XD0+Y/MS8SRzkEWggejKmJH9MpHZ4RcEnl
ydjc0Q1HvUZmXgQG3gQTdrT7jOJ74kKvD3AeYR1D3CIwBM9xYoAbPdsjJPLlzW8U
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:10 2025 by rpki-client