Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/c-pqbEtY1CA2hnl31Ojt4AnUN9Y.roa
File:                     c-pqbEtY1CA2hnl31Ojt4AnUN9Y.roa (raw, json)
Hash identifier:          CqF1MXLqRNBjqwbl8WlMPeqhCPRQKhwR3iJNuHSV7yQ=
Subject key identifier:   73:EA:6A:6C:4B:58:D4:20:36:86:79:77:D4:E8:ED:E0:09:D4:37:D6
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       C2
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/c-pqbEtY1CA2hnl31Ojt4AnUN9Y.roa
Signing time:             Sat 01 Nov 2025 01:32:36 +0000
ROA not before:           Sat 01 Nov 2025 01:32:36 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:32:36 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=73EA6A6C4B58D42036867977D4E8EDE009D437D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:68:7e:7d:6c:2d:e1:92:97:22:2a:d4:55:
                    5a:55:67:40:d8:1c:a5:9e:28:61:e0:fe:b8:35:e0:
                    f2:bd:85:f3:60:b1:48:49:06:0a:14:96:0e:b5:7d:
                    9a:38:3b:3f:b9:1e:6b:6e:ab:de:2a:5a:8a:57:15:
                    a7:08:8d:75:b2:be:02:4a:73:3b:54:3b:ee:96:ed:
                    52:6f:cf:26:13:f2:1f:d1:7b:ff:fb:4f:16:39:15:
                    11:b7:44:5d:7b:f9:e9:21:77:eb:49:e8:5f:1c:df:
                    b0:37:b5:89:77:47:27:b1:cb:d0:5c:07:48:6e:6a:
                    00:5d:0b:b6:1a:96:22:9c:34:aa:91:71:8f:90:4d:
                    72:98:a1:34:9d:3c:c4:b3:97:e7:60:f5:fb:92:d4:
                    09:54:cf:56:04:e0:9b:4d:dc:5b:23:2c:ac:f6:5b:
                    2b:9b:0b:32:4c:47:67:5b:2b:c3:dd:82:6f:56:a9:
                    7e:9e:b3:34:17:c7:25:8d:64:66:d0:3b:ea:36:7f:
                    38:b2:47:c0:a1:eb:bf:8f:37:c3:9f:b4:2a:79:f9:
                    8c:62:19:0e:c9:1e:1b:44:2b:e9:9e:a9:7c:ce:81:
                    72:93:da:ff:d3:33:41:5f:92:c3:b3:aa:28:dc:96:
                    25:43:9c:85:44:27:c3:0d:09:5b:61:c2:87:5a:7a:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:6A:6C:4B:58:D4:20:36:86:79:77:D4:E8:ED:E0:09:D4:37:D6
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/c-pqbEtY1CA2hnl31Ojt4AnUN9Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:bd:a1:c5:d7:36:a0:0b:bb:a1:10:b1:37:8d:8f:6d:ce:
         a5:fc:11:e2:b2:24:ab:67:29:99:f6:f2:4c:7d:9d:bd:59:5a:
         61:5c:5e:60:9b:0e:c0:a3:f4:60:9c:64:bb:df:a3:06:86:08:
         28:fe:e0:31:cb:51:86:21:fd:e1:fb:3d:3c:25:c0:12:a3:de:
         29:6a:7c:f5:ed:75:c8:ae:c3:25:ee:f8:81:1b:31:07:cd:59:
         56:f2:0d:e0:30:b5:38:e9:af:61:57:67:c5:dd:58:60:1d:7c:
         a3:75:a7:cf:06:72:cb:e0:d2:47:24:58:f1:4f:92:1d:b2:59:
         7a:b9:e3:0e:6b:1c:bd:f7:43:7b:c0:5b:9d:95:90:60:c8:f3:
         d5:7a:68:22:2d:ad:b3:00:e2:88:1a:e9:0c:c9:c5:28:55:f2:
         5e:7f:4b:c3:49:65:fb:b1:57:69:74:da:c1:fd:5e:7d:10:d4:
         85:ba:3e:e0:bd:a5:1f:3d:a6:6c:6b:f8:43:7b:3e:26:3a:2b:
         4f:62:e4:34:b6:6d:56:d7:bf:03:4e:0d:4d:db:6d:e1:c9:d7:
         47:c0:2c:5a:01:2d:cf:f5:85:c6:4e:78:5c:45:c8:f0:b2:b8:
         a2:8d:af:82:f0:f5:54:85:15:7c:75:55:af:d8:66:b7:c3:b9:
         0a:8e:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:48:26 2025 by rpki-client