Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VTXydKA09KTarZSpL6I_pP38ZjA.roa
File:                     VTXydKA09KTarZSpL6I_pP38ZjA.roa (raw, json)
Hash identifier:          SZnn+ha9hwIEdKC5gyj6hU/Xv3eVZjGeo5J0qO3/8hM=
Subject key identifier:   55:35:F2:74:A0:34:F4:A4:DA:AD:94:A9:2F:A2:3F:A4:FD:FC:66:30
Certificate issuer:       /CN=557A7467D8581336E27A3C4D52256C7931DC8636
Certificate serial:       23
Authority key identifier: 55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VTXydKA09KTarZSpL6I_pP38ZjA.roa
Signing time:             Sat 01 Nov 2025 01:33:07 +0000
ROA not before:           Sat 01 Nov 2025 01:33:07 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131976
IP address blocks:        218.100.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Nov 2025 02:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557A7467D8581336E27A3C4D52256C7931DC8636
        Validity
            Not Before: Nov  1 01:33:07 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5535F274A034F4A4DAAD94A92FA23FA4FDFC6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:ad:58:8f:89:42:31:c3:a3:f5:a0:6d:1d:
                    51:a5:ff:7c:7b:36:d3:74:56:fb:ee:41:f3:70:15:
                    38:e5:97:38:cf:dc:7e:08:fe:70:ed:16:2f:31:67:
                    74:97:b3:3e:14:c1:0c:8c:d9:87:a9:43:36:97:e0:
                    4a:32:9a:e7:54:e3:f8:e0:c0:1b:29:01:15:fc:6c:
                    f4:c5:d6:30:7e:3c:e9:c4:9b:4d:b1:03:b2:61:36:
                    d3:98:3d:f0:41:7f:f2:2c:cd:8b:73:b3:4d:50:57:
                    aa:7b:2f:86:6e:19:85:ea:f3:f5:01:30:f7:3f:d2:
                    90:68:7c:21:af:41:ec:09:d9:18:fb:4e:f4:d2:bc:
                    42:d9:7f:c5:d2:72:bc:bf:b5:1b:e5:b5:a9:92:1f:
                    85:24:48:16:94:bf:0c:15:67:f4:d5:2a:26:5a:2e:
                    fb:e2:a2:a6:bf:5a:25:c3:fa:5b:63:26:5b:ed:54:
                    b9:3b:02:c7:7d:c0:5d:69:2c:1a:d8:c7:f1:2e:9a:
                    7f:a6:29:bc:af:e6:fd:77:9a:84:98:bb:7e:c6:1a:
                    6a:0f:6b:7c:f1:54:c9:31:b2:e1:a1:10:d4:00:78:
                    23:6b:d6:87:68:61:2c:33:29:25:55:21:dc:d5:84:
                    c3:39:43:97:b8:33:42:4c:c8:c5:de:17:26:f3:fa:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:F2:74:A0:34:F4:A4:DA:AD:94:A9:2F:A2:3F:A4:FD:FC:66:30
            X509v3 Authority Key Identifier:
                keyid:55:7A:74:67:D8:58:13:36:E2:7A:3C:4D:52:25:6C:79:31:DC:86:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VXp0Z9hYEzbiejxNUiVseTHchjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VXp0Z9hYEzbiejxNUiVseTHchjY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4664/VTXydKA09KTarZSpL6I_pP38ZjA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:fe:52:f1:7f:e0:81:67:ac:b2:67:c9:5d:36:13:64:60:
         3a:c3:c4:4c:c9:a2:bb:94:07:bb:42:c2:39:dd:d1:76:d3:ab:
         51:af:fa:8f:6c:94:ca:ef:16:83:71:52:0e:e3:30:c7:2d:c2:
         71:b7:a4:d4:df:b8:dd:70:df:d4:6c:c9:13:6a:d7:56:29:61:
         8a:4d:70:cb:d6:92:dd:24:b0:08:50:61:d9:57:5f:8b:2a:9e:
         ab:89:9a:0f:9b:1f:9b:b7:fa:19:82:8f:b7:9c:cf:0c:c4:d2:
         3f:6c:47:df:ef:ca:68:71:6d:4b:40:12:8c:be:f5:bf:54:3c:
         ba:6b:43:2e:d6:47:cf:92:8a:30:9f:cb:05:69:7f:be:d5:8c:
         cd:38:a3:01:33:82:1b:e4:02:b0:20:4f:d8:63:b3:ca:72:9d:
         6a:99:25:e1:28:58:6f:70:31:23:90:82:81:c4:b6:72:e5:1a:
         08:da:72:72:74:69:3d:4a:0f:3c:30:3b:d1:bc:24:8d:97:69:
         22:da:21:ce:15:2f:3c:3c:28:e0:a7:c4:f8:c3:0a:62:6b:53:
         9f:14:1f:fb:e3:2d:37:49:c3:a1:d7:29:9c:30:60:f1:9e:74:
         43:d4:9e:fb:0d:42:4e:06:a8:76:27:55:26:2c:1b:ab:58:da:
         de:82:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:40:31 2025 by rpki-client