Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
File:                     RlVoUcWg1XP8hMDasBCVj7ygwwk.roa (raw, json)
Hash identifier:          wDApKJVDyimvuOw6FQbzI9kF3OvrGTNSgQ29nsuH+Xk=
Subject key identifier:   46:55:68:51:C5:A0:D5:73:FC:84:C0:DA:B0:10:95:8F:BC:A0:C3:09
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       73
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
Signing time:             Sat 01 Nov 2025 01:31:32 +0000
ROA not before:           Sat 01 Nov 2025 01:31:32 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     10011
IP address blocks:        223.27.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov  1 01:31:32 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=46556851C5A0D573FC84C0DAB010958FBCA0C309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:5e:d7:ec:37:0f:02:cd:97:6a:52:a6:c4:
                    98:05:6e:0c:b7:1d:75:87:98:be:3e:e6:86:1d:fa:
                    49:42:54:71:3d:82:6c:80:34:4c:16:9c:c0:22:53:
                    c3:93:54:a4:f0:10:f8:fd:9b:50:1e:d0:db:89:f1:
                    3d:b8:1c:15:75:1b:cd:eb:df:cb:e3:9e:a2:52:79:
                    33:18:4a:a1:e0:f1:4c:62:d8:fb:5d:98:d7:71:a3:
                    fb:d9:c5:19:6e:ff:36:ad:0f:b3:14:28:8c:a8:a7:
                    ca:c0:8c:b5:f5:05:ba:e5:40:b9:9f:6a:e3:9b:3f:
                    07:da:a8:00:d3:ed:8b:f7:73:90:f7:78:10:aa:ae:
                    dc:2b:85:86:fe:8c:d2:3b:48:e3:cd:c4:6e:47:fb:
                    4c:60:58:61:60:50:42:47:74:03:f2:97:79:14:d9:
                    9d:2a:01:c3:2f:60:6b:8e:c6:f3:48:fa:ec:e3:f8:
                    74:f2:64:fb:00:97:c5:fc:ee:9e:61:0d:d7:a2:e7:
                    af:5a:18:39:22:c3:3a:b5:6d:c9:af:e9:72:2a:5c:
                    43:db:2c:69:cf:d3:70:3e:59:13:17:bc:e5:7c:69:
                    17:6d:74:99:12:2b:ce:71:74:d6:ad:ea:58:64:cf:
                    eb:db:6e:22:50:a6:36:dd:9b:a1:81:b2:21:41:1f:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:68:51:C5:A0:D5:73:FC:84:C0:DA:B0:10:95:8F:BC:A0:C3:09
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/RlVoUcWg1XP8hMDasBCVj7ygwwk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:db:b8:5b:06:c3:4a:db:a0:e6:27:3c:e3:03:9f:78:d9:7a:
         ad:d5:f1:2b:58:17:24:68:5d:67:a5:a6:7b:6f:dc:11:ea:a5:
         f9:c7:a8:4b:00:f8:28:1c:6c:e0:15:46:f4:e7:ba:6b:cd:62:
         20:19:51:2d:dd:7f:42:0c:04:77:51:ae:72:fa:fc:95:6a:5a:
         bc:5b:1f:30:7e:7d:1c:1b:69:8f:00:bb:23:94:aa:70:74:af:
         96:7b:55:8b:71:4b:d5:e9:a8:d9:aa:f6:36:92:a7:18:7a:8b:
         9a:8e:49:98:df:5e:aa:03:51:3e:0f:95:c8:33:7f:3f:f0:2c:
         22:1e:d8:c3:e6:3e:cc:a6:70:72:63:a5:7e:60:c3:96:6f:31:
         85:84:c1:ea:55:4d:18:65:4d:cd:fb:9c:b3:dc:e6:a8:4e:ed:
         d7:ed:3a:4b:22:55:e8:fc:88:5a:98:72:23:5a:9c:d8:5e:55:
         5a:c2:81:70:41:b9:4d:70:2e:f5:5d:b2:1e:08:22:9f:96:42:
         8d:1f:0e:a9:12:0e:23:3e:1c:84:49:a9:85:0c:70:40:1c:4d:
         d6:b4:be:7a:6e:b4:9e:1d:3e:43:70:4e:08:81:70:75:79:5a:
         1a:58:c3:30:57:08:82:7b:9d:d5:d6:1a:93:2f:fc:e2:ef:25:
         8b:5c:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:48:34 2025 by rpki-client