Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
File:                     vPo1bFB-EcCQ9X8h73-hQAPDae0.roa (raw, json)
Hash identifier:          dpjuYaQ0urbRFgR36LubQAxLH2OWldkUGykwMaXlb+4=
Subject key identifier:   BC:FA:35:6C:50:7E:11:C0:90:F5:7F:21:EF:7F:A1:40:03:C3:69:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FE0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
Signing time:             Sat 01 Nov 2025 01:31:48 +0000
ROA not before:           Sat 01 Nov 2025 01:31:48 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 08:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4064 (0xfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Nov  1 01:31:48 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=BCFA356C507E11C090F57F21EF7FA14003C369ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:50:5e:fc:8e:69:87:08:5f:ca:a1:4f:80:
                    1c:e2:a4:e0:ce:bd:40:ac:88:4d:d0:1b:1b:8d:ef:
                    45:9f:63:b0:f6:d7:ac:ef:87:7f:ff:27:98:1d:84:
                    17:1a:4d:63:4e:62:cf:c3:19:68:78:63:2d:35:1b:
                    86:4c:1f:03:cf:36:f5:c6:15:d9:49:42:91:ea:6d:
                    e5:8b:08:fd:ac:7a:b7:f1:a1:83:14:4d:79:04:05:
                    ad:80:bc:94:09:e9:f7:ac:92:fd:25:17:ad:21:32:
                    54:40:1b:18:09:d1:b5:4e:40:fe:f5:8a:84:9a:8f:
                    df:64:78:ab:be:db:7e:fe:96:7c:0f:05:ac:4f:05:
                    ec:a2:04:51:0e:a6:0a:00:6f:28:64:43:39:cf:bc:
                    4d:4e:ad:26:d0:25:33:c3:2c:de:8f:f3:bd:84:b6:
                    0f:d9:eb:4f:da:6c:43:79:3d:0e:c4:62:c0:fc:8a:
                    8b:4a:fe:95:6e:de:d7:45:f8:a9:3d:df:40:15:4a:
                    f8:c9:60:80:ae:e4:90:7c:bd:3d:98:66:87:f6:8e:
                    77:3b:8e:26:b1:ce:67:98:b6:e7:e2:ef:4c:32:79:
                    e6:8e:80:cb:de:f1:16:65:49:f0:16:43:98:f3:bf:
                    5f:24:e3:07:62:b9:fd:e8:13:f8:61:56:66:05:3d:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:35:6C:50:7E:11:C0:90:F5:7F:21:EF:7F:A1:40:03:C3:69:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vPo1bFB-EcCQ9X8h73-hQAPDae0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:44:27:55:7d:d8:b9:1a:36:39:5a:34:ea:c0:fa:38:9b:
         3e:73:5a:94:b5:d7:2e:c8:c0:f6:f6:b0:3f:9b:98:1f:62:7a:
         4d:ca:0c:d3:85:88:ae:09:ea:dc:f0:66:bd:9d:0a:83:f6:81:
         53:82:62:9d:ac:b9:2d:9b:30:3a:2a:a3:2c:75:73:7c:6f:70:
         78:71:18:49:b4:a6:1b:9c:5f:6c:5d:95:3b:7f:2b:05:f3:97:
         97:ef:1f:c8:a6:32:ee:31:0f:fb:06:cb:02:46:fa:79:c5:52:
         5f:69:1b:05:52:c4:4f:83:2f:c1:1b:14:84:ff:7b:70:1b:2a:
         2b:99:ac:45:e2:1f:0c:f8:4c:c0:da:7a:d4:a8:5e:06:02:1d:
         c6:14:ce:91:4f:a2:ea:2e:76:cc:97:bf:07:8a:91:a4:42:f5:
         90:ef:99:0d:eb:16:ad:4d:3d:a2:25:45:ac:41:5f:b4:62:23:
         d2:ca:ca:dc:31:6d:0b:16:a7:fd:c2:11:0b:80:f9:85:b6:49:
         70:cb:b5:36:0b:ed:d2:0a:ca:cf:f7:1b:4a:33:6f:88:8d:af:
         67:1a:b1:3e:7d:ce:54:53:10:06:dc:16:95:80:8f:f0:88:a6:
         c6:8c:21:06:f5:47:c1:3f:31:6a:cd:b6:9c:40:06:ec:af:61:
         13:42:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:38:54 2025 by rpki-client