Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
File:                     pcvdN8eeT9cgeQovTbsieupMilg.roa (raw, json)
Hash identifier:          towyZeAqbZNNZXpgYiAEZoRcQAZ7lKrlkz+4N3XipBA=
Subject key identifier:   A5:CB:DD:37:C7:9E:4F:D7:20:79:0A:2F:4D:BB:22:7A:EA:4C:8A:58
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       D3
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
Signing time:             Sat 01 Nov 2025 01:38:08 +0000
ROA not before:           Sat 01 Nov 2025 01:38:08 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:38:08 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=A5CBDD37C79E4FD720790A2F4DBB227AEA4C8A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:a9:09:69:71:c7:fe:75:bb:ed:6e:e6:d5:
                    94:b0:52:ba:2d:40:59:6c:f7:ad:41:f2:33:7a:96:
                    6e:3e:02:14:2c:73:eb:12:82:d8:7b:44:44:ed:02:
                    f8:01:c1:cd:93:9c:dd:54:7d:2f:93:5c:26:43:66:
                    43:3b:8a:5e:e0:b5:97:ef:f8:82:f3:16:5c:37:8f:
                    77:d2:6b:b2:10:45:ac:7d:c3:69:0f:0a:01:8f:ff:
                    63:56:71:cd:8c:57:97:f3:19:f7:08:d2:78:0b:61:
                    eb:c4:8e:3f:8b:95:23:21:19:bb:3b:8f:57:de:96:
                    80:7a:78:8d:ca:bf:74:43:bd:29:72:74:6d:41:34:
                    a2:4c:02:21:36:ef:42:6a:a5:d6:8a:b2:3f:30:c0:
                    fd:83:33:64:26:97:08:d9:38:79:a3:75:32:ae:f9:
                    8f:53:d1:f7:71:96:5d:9c:05:c6:f2:09:71:ce:84:
                    e1:a3:c6:0c:c8:f8:a3:17:cc:83:75:d9:93:06:87:
                    7c:41:25:b5:65:d0:c8:45:c1:f4:e2:c3:4f:79:6b:
                    d1:c5:1c:0e:59:83:a6:69:dc:37:08:79:54:1f:46:
                    a6:a8:a1:0c:4f:60:9e:55:63:16:d7:54:24:c0:a7:
                    34:0a:90:b1:75:02:dd:4c:ad:fe:05:30:30:30:ff:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:DD:37:C7:9E:4F:D7:20:79:0A:2F:4D:BB:22:7A:EA:4C:8A:58
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pcvdN8eeT9cgeQovTbsieupMilg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:8c:18:26:39:c2:82:43:f4:1e:a2:ae:51:70:c6:f5:f0:
         32:87:40:7c:09:19:e0:6f:1e:f8:7d:70:43:34:ac:1a:25:3c:
         46:bd:ce:46:e0:5a:5b:55:34:08:0c:54:ff:f6:e3:17:fb:48:
         ae:60:66:a3:60:5c:b1:f9:cf:fe:37:10:cc:8b:08:ae:11:27:
         41:92:bf:84:ac:f2:b3:76:8c:d0:c9:a7:d7:f2:82:cd:84:7f:
         be:bb:5f:3f:b0:c2:dc:32:58:ab:aa:19:18:3f:fb:1d:98:2d:
         3f:c9:9b:c2:a0:c7:13:2a:a2:fe:ae:12:16:9d:54:1a:14:3a:
         41:90:81:7f:7a:4a:9f:53:7f:89:4a:c7:3e:52:5b:77:56:1a:
         aa:df:5e:97:0f:21:78:35:aa:e2:66:8b:69:41:91:00:37:35:
         55:93:c6:81:f7:8a:12:83:d5:c7:ad:04:2b:11:f3:b4:a8:24:
         ca:83:f7:12:24:74:97:ae:83:7f:04:b3:8e:0d:e5:33:ee:1f:
         44:60:04:e6:97:af:46:e1:b0:68:80:08:f6:1a:7a:fe:71:f6:
         32:21:9e:06:97:11:7b:83:2a:28:7c:c1:ce:59:c2:0a:32:5b:
         00:14:53:f9:5c:69:83:94:60:15:8a:e5:5d:90:63:fd:90:88:
         67:6b:ad:cd
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw
MTM4MDhaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE1Q0JERDM3Qzc5RTRG
RDcyMDc5MEEyRjREQkIyMjdBRUE0QzhBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG5akJaXHH/nW77W7m1ZSwUrotQFls961B8jN6lm4+AhQsc+sS
gth7RETtAvgBwc2TnN1UfS+TXCZDZkM7il7gtZfv+ILzFlw3j3fSa7IQRax9w2kP
CgGP/2NWcc2MV5fzGfcI0ngLYevEjj+LlSMhGbs7j1feloB6eI3Kv3RDvSlydG1B
NKJMAiE270JqpdaKsj8wwP2DM2QmlwjZOHmjdTKu+Y9T0fdxll2cBcbyCXHOhOGj
xgzI+KMXzIN12ZMGh3xBJbVl0MhFwfTiw095a9HFHA5Zg6Zp3DcIeVQfRqaooQxP
YJ5VYxbXVCTApzQKkLF1At1Mrf4FMDAw/w3VAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUpcvdN8eeT9cgeQovTbsieupMilgwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9wY3ZkTjhlZVQ5Y2dlUW92VGJzaWV1cE1pbGcucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFoPiAMA0GCSqGSIb3DQEBCwUAA4IBAQCu8YwYJjnCgkP0HqKuUXDG9fAyh0B8
CRngbx74fXBDNKwaJTxGvc5G4FpbVTQIDFT/9uMX+0iuYGajYFyx+c/+NxDMiwiu
ESdBkr+ErPKzdozQyafX8oLNhH++u18/sMLcMlirqhkYP/sdmC0/yZvCoMcTKqL+
rhIWnVQaFDpBkIF/ekqfU3+JSsc+Ult3Vhqq316XDyF4NariZotpQZEANzVVk8aB
94oSg9XHrQQrEfO0qCTKg/cSJHSXroN/BLOODeUz7h9EYATml69G4bBogAj2Gnr+
cfYyIZ4GlxF7gyoofMHOWcIKMlsAFFP5XGmDlGAViuVdkGP9kIhna63N
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:27:52 2025 by rpki-client