Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/SPlmLKIPwxgR4AMhfr_Nebqdgsc.roa
File:                     SPlmLKIPwxgR4AMhfr_Nebqdgsc.roa (raw, json)
Hash identifier:          zmHNqXDd3sSzjsvQcddODrmq9XFXqdNY1oi1HXWt/zA=
Subject key identifier:   48:F9:66:2C:A2:0F:C3:18:11:E0:03:21:7E:BF:CD:79:BA:9D:82:C7
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       25
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/SPlmLKIPwxgR4AMhfr_Nebqdgsc.roa
Signing time:             Thu 24 Jul 2025 09:45:37 +0000
ROA not before:           Thu 24 Jul 2025 09:45:37 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     151382
IP address blocks:        157.15.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: Jul 24 09:45:37 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=48F9662CA20FC31811E003217EBFCD79BA9D82C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:18:1e:e6:68:0d:b7:20:49:11:04:34:64:
                    40:63:c1:00:eb:3e:c7:b1:46:a2:59:5d:09:81:9d:
                    40:fe:36:19:85:6e:63:7f:da:5e:27:17:f4:87:81:
                    7b:c7:56:7f:94:dd:c8:27:08:28:3e:23:97:0a:e0:
                    6f:28:fe:dc:18:2d:b9:98:6b:dd:65:09:84:61:46:
                    08:8e:dd:f2:b2:ee:01:8e:c1:0f:33:8c:37:75:dc:
                    cf:b0:89:f6:58:4d:e4:d3:c8:2e:15:7a:a6:7d:cb:
                    a6:ce:66:cc:95:4a:db:b3:01:a1:af:7b:8b:0f:88:
                    b6:3f:8c:b8:ef:44:4d:db:d6:19:c1:2c:17:ad:62:
                    66:eb:f3:24:68:90:6b:c6:18:9c:39:3d:4f:40:b6:
                    13:ba:99:66:49:f6:68:6d:c7:59:3d:d6:8d:5e:24:
                    b1:55:b4:cc:22:c0:38:da:8f:62:0b:cd:aa:5a:08:
                    45:ae:db:93:bf:9a:62:5e:69:fd:bd:4a:64:1c:c7:
                    c0:3d:90:cf:4b:7f:f8:d6:82:c8:c3:f5:ad:88:35:
                    7b:a5:cb:c3:02:eb:42:00:63:5d:14:2a:04:01:f1:
                    6c:2b:48:8a:00:19:0f:61:c7:89:b0:82:da:58:9d:
                    5b:6f:1a:07:3c:fc:a8:a7:78:e2:43:a9:d2:08:c9:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:66:2C:A2:0F:C3:18:11:E0:03:21:7E:BF:CD:79:BA:9D:82:C7
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/SPlmLKIPwxgR4AMhfr_Nebqdgsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:06:2d:93:95:9b:01:28:0b:d2:a2:65:3c:2d:0d:a5:db:e9:
         6b:d2:7c:99:76:75:11:d3:02:d9:51:11:34:4e:bf:df:ad:dc:
         59:9f:9b:2a:46:bc:38:c1:f9:af:9d:aa:d2:6e:ba:0f:f1:ef:
         52:1a:5a:45:f3:9d:c0:49:e8:10:13:2a:ec:b3:41:bf:2b:41:
         9f:37:23:4b:a6:78:5b:f7:98:1d:4e:fe:7f:1a:78:ca:c3:1d:
         93:06:3d:7f:00:86:0b:88:ed:bf:90:5e:12:21:e3:46:67:fe:
         bf:28:c4:68:9d:43:5a:14:a6:b9:d2:05:61:7c:83:5f:82:ce:
         09:f2:ae:58:a4:ed:9f:10:99:fe:b2:6e:71:d9:95:6a:63:2c:
         99:3d:b8:e1:e7:ee:ef:92:7a:f6:cb:bb:30:9d:c2:5e:e6:8b:
         63:77:5c:fc:f3:9c:2f:67:a9:26:fa:44:68:a9:97:b8:a6:62:
         7b:93:6e:77:87:db:50:53:5a:dd:b1:02:90:da:c9:d0:fe:12:
         6b:3f:10:f3:d0:3e:b4:be:ea:a9:23:24:bb:4c:43:e1:a2:7f:
         f1:3f:3f:bc:74:ab:9c:0c:49:5c:8d:f0:d0:e1:9e:5d:2f:88:
         7d:1b:8b:57:5f:fc:27:98:29:f6:3f:72:45:93:ac:d5:0c:a3:
         3d:3c:d3:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 14 01:49:10 2025 by rpki-client