Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/61uB5Ciw2LZd6PEbvbrfWKAuVJY.roa
File:                     61uB5Ciw2LZd6PEbvbrfWKAuVJY.roa (raw, json)
Hash identifier:          JlEgl5ff2AraL0KKyvg4Yh8nMa/wYmKq6DEnHOgrhOE=
Subject key identifier:   EB:5B:81:E4:28:B0:D8:B6:5D:E8:F1:1B:BD:BA:DF:58:A0:2E:54:96
Certificate issuer:       /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial:       1C
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/61uB5Ciw2LZd6PEbvbrfWKAuVJY.roa
Signing time:             Sat 01 Nov 2025 01:35:53 +0000
ROA not before:           Sat 01 Nov 2025 01:35:53 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     7677
IP address blocks:        157.101.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 13:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
        Validity
            Not Before: Nov  1 01:35:53 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=EB5B81E428B0D8B65DE8F11BBDBADF58A02E5496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:6f:95:27:dd:7b:f2:1f:bb:e3:79:2f:a2:
                    61:43:75:2a:c9:f6:77:57:00:1b:79:ac:2b:e4:02:
                    a4:fa:25:ba:9a:43:9b:28:7e:c9:07:12:47:40:89:
                    d7:8f:5a:c3:46:dd:27:fc:21:4f:41:c7:12:30:0a:
                    ef:5d:e1:84:a8:96:d9:8a:1f:2a:da:28:16:3c:45:
                    8d:ce:ea:55:2a:1a:36:3b:45:38:ff:17:97:7c:cc:
                    f1:09:db:b4:21:d2:ab:24:e0:4b:a6:0f:54:3e:f3:
                    ff:10:72:8e:df:0b:1a:ef:87:d7:3e:d0:bf:f8:c4:
                    28:20:a3:e4:eb:ae:79:8f:cd:9b:4e:35:01:60:26:
                    a0:19:e0:92:12:40:a5:e6:75:2f:2f:9d:6a:ca:12:
                    f9:ec:aa:7f:75:ec:61:fa:9d:8f:8f:5c:54:8a:12:
                    7c:9c:d7:4f:50:9a:d3:e4:ba:e0:da:47:2c:78:5a:
                    4e:25:c4:71:41:26:4c:80:a9:54:bb:49:76:a1:4c:
                    51:cc:1d:72:c5:f4:8a:c6:ba:11:10:7f:11:58:d3:
                    40:1b:7a:10:35:5f:61:e8:b8:d4:a3:5c:7c:ad:f1:
                    75:96:ce:a0:28:42:ae:1c:6e:73:ce:68:7e:78:c3:
                    8a:65:1e:5b:b7:d6:02:78:f5:d9:0d:38:2e:2e:fb:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5B:81:E4:28:B0:D8:B6:5D:E8:F1:1B:BD:BA:DF:58:A0:2E:54:96
            X509v3 Authority Key Identifier:
                keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/61uB5Ciw2LZd6PEbvbrfWKAuVJY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.101.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:8a:8a:a4:c1:14:90:d7:4a:77:6f:b9:ff:87:6e:a3:14:
         bb:9d:69:3d:1d:67:76:0e:51:3e:de:6f:29:76:df:1c:34:24:
         f7:2c:bc:54:45:63:29:a0:67:e5:e2:84:06:e7:94:69:7a:cf:
         48:bb:78:1d:13:f2:02:2a:1b:24:56:25:17:42:52:31:8b:ee:
         c3:ce:31:b4:ed:a6:48:30:3e:cc:f3:4a:eb:74:dd:e2:3e:a6:
         e6:cc:89:dc:90:8d:1b:12:d9:56:6f:7f:bd:aa:26:e7:6d:0b:
         7b:b8:ab:1e:a7:0e:77:0b:ee:34:54:1a:96:24:af:e7:1b:63:
         9d:8a:b2:6c:a7:71:84:e8:66:4b:c0:28:15:f9:63:ca:bd:a4:
         1c:7d:1a:b5:20:39:50:95:7b:bf:3a:06:fb:33:fa:dd:07:1b:
         50:1c:7f:88:ef:36:26:1e:ae:36:6f:cf:c7:5b:06:f9:0a:d9:
         10:85:5e:57:bb:ba:e2:d2:26:7c:f6:2a:c0:96:87:71:5a:bc:
         18:47:85:fe:ff:5d:52:75:21:1b:e3:c4:1f:fa:5f:7e:92:c5:
         c6:ac:d1:8d:68:8e:7b:3d:e7:f3:84:9e:2f:11:ef:9c:3d:47:
         3f:49:cc:e9:2e:91:f6:dc:22:f8:14:4e:f7:b5:44:0e:f3:02:
         77:af:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:07:29 2025 by rpki-client