Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/n55MC7_XnBXT7ZQtd3Z_qBu8HhM.roa
File:                     n55MC7_XnBXT7ZQtd3Z_qBu8HhM.roa (raw, json)
Hash identifier:          b+/NYDuAhIiG0IfRqaZdV42ZiXp05l58ucM4gmzHnBA=
Subject key identifier:   9F:9E:4C:0B:BF:D7:9C:15:D3:ED:94:2D:77:76:7F:A8:1B:BC:1E:13
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01C1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/n55MC7_XnBXT7ZQtd3Z_qBu8HhM.roa
Signing time:             Sat 01 Nov 2025 01:31:18 +0000
ROA not before:           Sat 01 Nov 2025 01:31:18 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        211.2.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 16:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Nov  1 01:31:18 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=9F9E4C0BBFD79C15D3ED942D77767FA81BBC1E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:08:29:f6:12:2d:c7:9e:80:46:dd:49:cc:
                    b5:7f:77:ce:9e:e0:d2:07:bd:d2:98:7f:24:78:09:
                    bb:29:30:a3:b0:ee:26:d0:00:32:41:de:14:76:4a:
                    d3:e5:6c:9c:0c:f1:75:dd:44:eb:cf:6a:b4:df:7c:
                    3a:5e:1f:6c:a3:d7:ec:96:ec:51:00:45:63:92:80:
                    bd:4a:75:0b:f6:41:68:ed:38:5f:84:c8:2d:eb:02:
                    ee:d8:fa:e6:b6:06:b2:82:68:26:77:57:85:c9:e9:
                    b8:ca:ca:19:32:66:3b:2d:b4:40:60:f4:4a:54:fd:
                    59:09:cc:88:68:91:bb:73:41:c0:cb:d2:b4:4c:54:
                    4b:e3:52:ac:eb:1c:66:96:82:b0:c0:86:39:17:b2:
                    cd:fd:31:2c:62:67:bd:4c:00:4f:74:86:60:6d:bd:
                    10:dc:56:01:dd:78:a8:ac:ca:c3:86:92:bd:9d:94:
                    7e:8e:16:a8:86:4c:f5:f7:d4:bb:83:15:cd:b0:86:
                    32:05:d8:3b:7e:99:f3:4e:63:4f:57:f4:72:56:21:
                    6a:c7:a6:a6:7b:5c:8b:2a:3e:aa:99:aa:16:6c:0c:
                    b4:c2:0a:a6:1c:ae:f8:98:fc:4b:c8:67:78:eb:45:
                    6e:c7:f7:cf:7b:b0:b3:ea:74:30:88:17:55:a0:dc:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9E:4C:0B:BF:D7:9C:15:D3:ED:94:2D:77:76:7F:A8:1B:BC:1E:13
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/n55MC7_XnBXT7ZQtd3Z_qBu8HhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:30:4b:c8:6f:27:f7:c2:04:95:85:bd:93:47:ad:72:6d:
         db:9f:cb:74:0b:ce:79:24:56:2a:1c:8d:53:24:66:4f:19:45:
         04:45:c8:29:f5:85:53:f3:88:be:30:fa:d0:80:a4:05:e8:9b:
         4a:14:e7:19:08:c2:a9:6d:92:eb:8f:b3:ce:71:29:3f:a3:76:
         31:3a:0b:86:7f:a5:b5:f7:3f:bb:63:96:b7:82:b3:0d:d8:0c:
         d4:32:6d:bb:9f:4d:0a:e6:76:56:3d:93:e2:1d:98:6a:19:ab:
         42:4e:89:ba:98:74:e2:f8:8b:59:75:9c:a7:77:c1:a2:9a:7c:
         17:72:b6:78:5d:55:8f:10:a4:1a:81:76:8c:6c:e5:ed:ef:f3:
         d8:9d:bd:ca:24:ef:9f:c1:2e:74:0b:bc:17:e6:74:ef:31:42:
         1f:c1:8d:bd:f2:8e:88:0e:b0:87:d2:c8:4f:dc:6c:4d:ea:78:
         df:ba:d9:31:aa:12:9b:59:f4:87:7e:1a:5a:5c:47:9e:0a:7c:
         03:a8:68:75:74:a0:0f:5c:e5:cd:19:6a:cc:6b:c6:39:96:93:
         ed:48:7a:e6:33:51:16:00:8a:b3:45:9e:6d:db:37:08:0d:07:
         8e:ed:be:d9:33:9b:a0:f3:47:d4:ad:ea:63:65:2f:a9:83:ef:
         1c:e1:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:09:13 2025 by rpki-client