Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/_Jd8rHCMICBdurEuN8FQjJX8zik.roa
File:                     _Jd8rHCMICBdurEuN8FQjJX8zik.roa (raw, json)
Hash identifier:          VZYQECne9dijiPEg8xC+gqaW2E3vgO0KO7yX8nCntQ8=
Subject key identifier:   FC:97:7C:AC:70:8C:20:20:5D:BA:B1:2E:37:C1:50:8C:95:FC:CE:29
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       4F
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/_Jd8rHCMICBdurEuN8FQjJX8zik.roa
Signing time:             Sat 01 Nov 2025 01:28:59 +0000
ROA not before:           Sat 01 Nov 2025 01:28:59 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     55396
IP address blocks:        192.50.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Nov  1 01:28:59 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=FC977CAC708C20205DBAB12E37C1508C95FCCE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ec:78:37:f0:4f:52:09:97:62:97:84:31:76:
                    a0:d2:17:48:a1:30:98:48:53:0c:f8:3d:31:b9:f3:
                    b9:0c:f9:4f:ce:9a:06:5a:49:c2:bb:c3:3b:7e:e1:
                    da:97:e0:f7:35:18:16:ff:0e:18:74:de:4c:38:6e:
                    13:8b:87:33:83:74:fb:dd:20:57:8f:d7:65:f8:04:
                    60:8e:3b:2f:e1:a8:0c:1c:bb:9e:28:40:4f:66:db:
                    c4:b1:22:66:81:a0:a8:b2:28:fe:48:ca:d5:ef:9c:
                    08:01:12:1c:88:4c:ce:de:c9:cc:d0:20:1c:e5:59:
                    c8:4c:e0:83:6c:29:f2:e7:69:f8:eb:96:f1:21:06:
                    df:34:bd:58:76:f5:54:72:20:39:f6:32:55:65:29:
                    2b:1b:92:bf:b7:23:24:d0:d1:b1:92:b1:58:63:40:
                    eb:20:90:2b:22:00:03:01:36:0f:9c:b3:40:34:28:
                    72:bc:71:01:5d:ad:56:b4:c7:1b:4b:e5:51:7d:5a:
                    75:67:23:a6:72:cd:cd:c4:01:d6:3f:64:5c:af:0b:
                    bf:8e:83:a9:cb:dd:e6:23:ef:83:5c:37:94:55:1e:
                    89:4d:c5:53:4b:2f:9e:60:ea:78:28:60:28:28:4c:
                    99:2a:d3:fa:e0:48:6a:1d:15:2a:02:41:96:5e:81:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:7C:AC:70:8C:20:20:5D:BA:B1:2E:37:C1:50:8C:95:FC:CE:29
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/_Jd8rHCMICBdurEuN8FQjJX8zik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:c4:0b:3b:5f:9a:19:0c:52:41:a0:77:e0:d4:7f:2f:db:03:
         3d:b4:dd:3d:d5:ec:73:67:0b:23:db:24:65:ce:ea:b1:d1:03:
         ca:46:bd:16:ff:a4:38:a1:d9:6f:c7:50:2f:82:0a:b5:35:fa:
         70:11:a3:62:5c:1a:3c:3a:ea:fe:fe:6f:7e:6f:7c:c8:45:36:
         48:f4:55:7c:cc:50:78:48:2d:bc:cf:c6:f4:e7:8c:00:71:96:
         e8:44:10:ef:fd:9a:ea:5b:7d:97:0a:e5:b7:5c:2f:f8:68:83:
         83:db:45:77:88:34:01:0d:40:99:ed:51:69:c2:c9:95:7c:2c:
         a8:cd:21:4b:9b:e6:37:3c:f6:08:81:01:d9:5a:39:65:a8:df:
         f3:ed:11:91:4d:87:e2:ac:b1:2b:32:ee:0e:75:54:60:bb:de:
         25:c0:a8:3c:9e:48:af:75:0f:38:ee:40:0c:3f:1d:8a:8c:71:
         de:0b:88:ad:f8:a4:6b:31:12:eb:42:22:fd:75:23:15:b8:19:
         1e:51:04:86:20:8b:c6:a2:b1:20:9f:34:b3:04:67:97:9c:ea:
         c6:0b:4d:a3:50:81:14:a7:33:b8:07:89:d5:50:e7:4a:c7:5c:
         5a:78:5a:9a:60:bc:c3:cd:f3:ca:49:a1:94:f7:fc:5f:0d:30:
         a7:7a:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:23 2025 by rpki-client