Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/D64C56ML_iB7UY5LkA19qBVcM2k.roa
File:                     D64C56ML_iB7UY5LkA19qBVcM2k.roa (raw, json)
Hash identifier:          jPb7k1A0CzMqnG/CuOuz240uMGRuwEq8TpyQIiG/u1g=
Subject key identifier:   0F:AE:02:E7:A3:0B:FE:20:7B:51:8E:4B:90:0D:7D:A8:15:5C:33:69
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       CE
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/D64C56ML_iB7UY5LkA19qBVcM2k.roa
Signing time:             Sat 01 Nov 2025 01:32:43 +0000
ROA not before:           Sat 01 Nov 2025 01:32:43 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:32:43 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0FAE02E7A30BFE207B518E4B900D7DA8155C3369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:a5:f4:4a:37:d0:3f:bc:ce:ac:e2:5c:fe:
                    6a:9b:de:22:56:2c:39:93:13:17:ac:3a:91:21:9c:
                    37:00:ad:5f:b4:b4:29:76:30:cd:30:d6:53:57:ca:
                    2d:b5:2e:04:11:5d:ac:d7:e9:82:36:c5:2c:3b:29:
                    4c:51:46:fc:19:d1:0b:87:91:d4:92:da:34:90:cb:
                    81:e9:e4:a6:92:43:40:1b:3d:f6:50:d8:7c:06:9c:
                    2d:ab:29:89:3d:32:31:0f:d7:64:ed:41:55:94:15:
                    6b:82:70:4b:04:00:82:90:80:99:c3:82:ed:6c:64:
                    c7:7b:0d:64:84:22:29:d0:01:5b:db:5b:95:a3:76:
                    3d:45:87:d8:f7:36:8b:7b:e8:9a:20:8e:30:ef:c0:
                    db:8a:4b:90:7c:9b:9c:f3:21:5e:d1:9e:90:8e:92:
                    93:c4:2d:1e:94:c6:6e:38:5f:23:6b:96:17:d6:d1:
                    46:33:63:21:c7:2f:f8:2e:5e:82:2c:79:ce:2b:64:
                    96:7f:ab:01:11:70:e1:a3:b0:fc:b0:a6:fd:10:a6:
                    4a:b1:0c:a6:ea:df:17:33:75:f0:c6:5c:4f:35:6e:
                    66:5a:0e:cc:8c:90:f7:92:25:a9:3c:1e:2c:10:c4:
                    f9:74:c0:fa:1a:13:5e:6a:cb:ca:ac:14:89:d2:34:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:02:E7:A3:0B:FE:20:7B:51:8E:4B:90:0D:7D:A8:15:5C:33:69
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/D64C56ML_iB7UY5LkA19qBVcM2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:08:a7:67:b9:4f:9a:9d:76:e2:d9:70:42:0b:f9:d8:34:
         fa:f6:3f:59:90:e1:74:c9:0b:05:46:91:b4:e1:2d:da:12:4d:
         3d:8c:86:cb:8c:5c:91:b3:2d:75:a7:48:6a:b9:16:66:57:7e:
         f9:3e:b7:e1:5c:84:e3:43:dd:3d:eb:cf:a8:bd:fc:34:c8:3f:
         58:0a:2c:7a:33:ee:39:8b:21:a3:0f:10:12:20:bf:c8:fd:0e:
         2e:51:bc:80:3c:f0:e5:ab:3d:5b:16:55:e8:52:7d:62:71:69:
         80:38:c0:9b:f2:b7:38:94:87:23:0f:1f:b0:61:1c:b9:4b:6e:
         73:64:10:c8:7e:ea:68:e9:b6:ba:bd:1b:72:85:1e:62:b9:a9:
         83:bc:0c:d8:79:5d:62:39:6a:c8:5e:cc:e5:d3:ab:bd:05:13:
         42:29:8a:6d:3d:6a:1e:9d:d6:72:fd:54:69:c9:89:56:46:38:
         04:8e:e7:0b:a2:af:22:8b:da:58:31:33:c7:a9:7b:88:87:54:
         dc:06:06:4a:73:7f:3c:e1:18:a7:b1:e9:9a:3d:d9:36:14:ee:
         65:ce:cf:b4:87:60:a6:12:d1:8a:ef:f1:f5:7a:72:4a:fa:2c:
         ee:3c:d2:98:41:fa:fa:78:c1:43:bc:75:ac:f8:12:96:55:16:
         b2:a2:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:19:31 2025 by rpki-client