Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/QvpcKyetZKDpr2rHl_6qknZKb74.roa
File:                     QvpcKyetZKDpr2rHl_6qknZKb74.roa (raw, json)
Hash identifier:          5OY15LPSIYnpikLCXY6zWiD626+7jrrVo+h8C4EOq/4=
Subject key identifier:   42:FA:5C:2B:27:AD:64:A0:E9:AF:6A:C7:97:FE:AA:92:76:4A:6F:BE
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       72
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/QvpcKyetZKDpr2rHl_6qknZKb74.roa
Signing time:             Sat 01 Nov 2025 01:31:32 +0000
ROA not before:           Sat 01 Nov 2025 01:31:32 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     10011
IP address blocks:        219.106.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 16:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov  1 01:31:32 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=42FA5C2B27AD64A0E9AF6AC797FEAA92764A6FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:01:95:9a:96:69:c8:f5:a3:43:91:fe:b8:
                    4d:16:a0:b1:d2:b9:f6:e2:64:32:6a:bd:27:59:d6:
                    5d:d6:6e:20:ee:6d:19:fe:cd:ec:7a:00:50:0e:8a:
                    dd:fc:40:f5:4f:32:e1:cf:e9:ce:fb:94:02:38:a8:
                    c2:30:6c:ff:c7:ca:04:aa:21:cc:95:3b:ba:29:cf:
                    f3:c4:37:b5:5a:dd:a2:b6:da:f4:fa:b2:18:8e:58:
                    3b:19:e2:d1:72:34:41:76:81:1c:6d:de:09:fc:a5:
                    73:fb:d2:83:f5:35:cd:76:67:48:df:93:e5:9e:23:
                    ab:06:fb:a1:02:de:3b:67:2f:34:5e:b8:62:40:3a:
                    4d:20:fc:0f:c8:69:aa:05:3b:9a:b1:5c:f0:b4:93:
                    cd:bb:b8:a3:7c:e0:a7:05:21:36:ac:b0:41:b5:2b:
                    2d:d8:9a:1f:8f:c6:0f:28:0e:2d:0d:0c:99:5c:9e:
                    77:5d:4d:90:76:ab:cb:44:f1:92:52:85:ef:72:bd:
                    26:84:3a:10:3c:ec:69:c1:61:29:22:7d:60:6a:18:
                    64:56:4c:b0:d7:ce:00:b7:c4:5f:8b:c1:e6:2f:80:
                    d8:3c:27:87:05:b1:d9:6f:02:4a:28:dc:2e:80:35:
                    b6:a9:f9:16:e4:65:27:af:08:6f:c2:06:7d:cb:08:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:5C:2B:27:AD:64:A0:E9:AF:6A:C7:97:FE:AA:92:76:4A:6F:BE
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/QvpcKyetZKDpr2rHl_6qknZKb74.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:29:f0:ee:00:1f:3f:e0:37:58:9e:f6:e5:68:53:5f:ca:
         d8:93:af:6c:7e:20:2a:ec:dc:7d:6c:55:de:e1:4e:30:0e:6f:
         95:b5:11:ae:1d:f4:b5:32:5f:ff:67:e0:a2:5f:5d:2c:d2:48:
         e8:ef:41:26:77:c4:68:35:6d:1a:57:61:a5:12:fd:44:75:b7:
         80:f6:8c:2d:2b:c2:80:a3:70:eb:8f:83:f6:7b:7e:70:c8:dc:
         56:5d:0f:9c:e3:02:c4:db:08:b6:47:d2:75:44:c1:71:e5:56:
         28:2d:16:2d:ed:db:f9:00:5f:87:45:b6:92:f3:8a:44:16:e8:
         76:08:ca:da:4c:34:00:40:15:fe:e1:c1:90:99:62:8a:98:47:
         a5:c6:66:cb:6a:24:46:5a:8d:5c:41:43:69:3e:15:c4:a7:33:
         2c:ee:18:67:a1:42:da:8a:2a:ad:52:a6:bc:3c:f8:52:cc:ac:
         03:0a:4d:1b:80:b5:9d:dd:e0:fb:58:7f:c0:78:65:a7:49:4c:
         0f:5f:8f:c4:25:8a:c1:70:4a:92:85:38:f1:ec:cc:8f:61:9d:
         55:d3:f5:45:dd:20:81:dd:e3:8f:6f:79:d9:0e:87:7e:51:30:
         fb:8f:92:78:26:79:56:fb:8e:9f:c2:6e:6f:da:57:73:df:61:
         48:67:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:09:00 2025 by rpki-client