Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
File:                     qs1pUxI6yj-W2EjaNKX6JCKugtI.roa (raw, json)
Hash identifier:          1dPB9J6qUXp8OKKbj9xh3ATkY/2PROqEzgTE08b/Aug=
Subject key identifier:   AA:CD:69:53:12:3A:CA:3F:96:D8:48:DA:34:A5:FA:24:22:AE:82:D2
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       BE
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
Signing time:             Sat 01 Nov 2025 01:32:34 +0000
ROA not before:           Sat 01 Nov 2025 01:32:34 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov  1 01:32:34 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=AACD6953123ACA3F96D848DA34A5FA2422AE82D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:67:ee:8c:68:ea:aa:7b:a7:67:65:f2:5b:
                    fa:1e:6f:f0:02:e9:2b:00:19:66:e9:df:e6:6c:08:
                    c7:14:56:5d:84:4e:ef:48:98:05:88:31:96:3a:2d:
                    de:38:13:e3:95:05:2b:df:b1:48:dc:fe:8b:91:0a:
                    86:0c:5f:e7:60:36:d4:3f:7c:c9:9a:98:70:61:20:
                    e0:a7:f0:0f:80:f0:91:e1:53:10:6e:5a:77:21:e9:
                    74:65:64:a5:30:e7:46:5c:a9:49:73:0f:01:4d:eb:
                    e1:8a:90:fb:af:87:ca:52:0c:af:e2:a5:6b:11:ce:
                    eb:b1:07:77:df:49:2c:3a:fc:f3:f3:e2:a2:00:e9:
                    e1:e2:a3:ad:89:f4:db:e8:21:73:b3:0c:ac:cb:77:
                    01:4a:b2:fe:4d:ae:17:77:19:23:c0:15:f8:25:a3:
                    1c:b7:1a:8e:16:9b:99:a2:a1:9f:f3:f2:ae:7d:3f:
                    34:1e:13:cf:c9:c2:8a:54:58:56:88:ef:83:88:32:
                    3b:3f:d5:31:28:a3:59:63:81:2d:99:42:eb:37:10:
                    a3:de:69:be:95:ae:ce:15:20:0a:ea:f0:54:d2:ce:
                    df:5d:3a:5a:51:17:89:57:94:82:e3:c3:dc:36:e6:
                    83:fd:2e:f4:63:00:d5:a2:7e:ed:a5:be:26:a1:dd:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:69:53:12:3A:CA:3F:96:D8:48:DA:34:A5:FA:24:22:AE:82:D2
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qs1pUxI6yj-W2EjaNKX6JCKugtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:be:6e:c0:5c:a2:a9:d9:cc:2a:1c:e8:a5:0d:7a:01:0a:c8:
         f0:4f:97:6b:2b:14:f9:1c:3f:cb:c6:49:a5:07:6a:5e:52:78:
         85:12:e4:97:b8:e3:81:3f:6d:f5:d6:90:8b:e5:8b:0e:a4:86:
         39:59:dd:53:23:f9:06:27:7a:86:4b:ae:c6:22:d8:c0:ba:a6:
         8e:37:12:fa:ea:f5:9e:32:a2:6e:af:43:72:ba:24:78:fc:b4:
         3b:09:67:d8:ae:28:ce:dd:48:56:69:87:6d:24:6d:65:1f:fc:
         86:98:3d:05:c1:72:67:ea:71:8f:34:7c:59:42:01:63:68:a3:
         af:a1:f2:bd:aa:87:d8:36:21:f9:19:9e:a8:b7:7b:0e:03:5f:
         55:14:28:e6:ad:5a:b0:32:d9:0a:b8:a0:da:8e:c3:0b:2b:35:
         dd:35:7b:e5:18:43:7c:8a:ef:13:da:80:0c:fa:2d:81:06:7b:
         7f:af:61:01:1f:6b:d6:80:ec:ce:35:2e:c3:e7:1d:da:ab:22:
         c5:e7:78:d5:95:92:1c:4b:65:09:a0:17:85:60:77:20:8d:4f:
         bc:c2:97:7c:1a:06:08:ad:b5:10:1e:86:b6:67:d7:da:3d:cf:
         cb:36:d5:13:32:ea:e4:eb:00:b1:cd:8f:e1:b5:2a:05:2c:7e:
         b6:af:b7:d0
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw
MTMyMzRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFBQ0Q2OTUzMTIzQUNB
M0Y5NkQ4NDhEQTM0QTVGQTI0MjJBRTgyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCRVGfujGjqqnunZ2XyW/oeb/AC6SsAGWbp3+ZsCMcUVl2ETu9I
mAWIMZY6Ld44E+OVBSvfsUjc/ouRCoYMX+dgNtQ/fMmamHBhIOCn8A+A8JHhUxBu
Wnch6XRlZKUw50ZcqUlzDwFN6+GKkPuvh8pSDK/ipWsRzuuxB3ffSSw6/PPz4qIA
6eHio62J9NvoIXOzDKzLdwFKsv5Nrhd3GSPAFfgloxy3Go4Wm5mioZ/z8q59PzQe
E8/JwopUWFaI74OIMjs/1TEoo1ljgS2ZQus3EKPeab6Vrs4VIArq8FTSzt9dOlpR
F4lXlILjw9w25oP9LvRjANWifu2lviah3XtdAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUqs1pUxI6yj+W2EjaNKX6JCKugtIwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9xczFwVXhJNnlqLVcyRWphTktYNkpDS3VndEkucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFnUGAMA0GCSqGSIb3DQEBCwUAA4IBAQA2vm7AXKKp2cwqHOilDXoBCsjwT5dr
KxT5HD/LxkmlB2peUniFEuSXuOOBP2311pCL5YsOpIY5Wd1TI/kGJ3qGS67GItjA
uqaONxL66vWeMqJur0NyuiR4/LQ7CWfYrijO3UhWaYdtJG1lH/yGmD0FwXJn6nGP
NHxZQgFjaKOvofK9qofYNiH5GZ6ot3sOA19VFCjmrVqwMtkKuKDajsMLKzXdNXvl
GEN8iu8T2oAM+i2BBnt/r2EBH2vWgOzONS7D5x3aqyLF53jVlZIcS2UJoBeFYHcg
jU+8wpd8GgYIrbUQHoa2Z9faPc/LNtUTMurk6wCxzY/htSoFLH62r7fQ
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:33:46 2025 by rpki-client