Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/l83DqPUYtir87Bby3iJUv4L8gSY.roa
File:                     l83DqPUYtir87Bby3iJUv4L8gSY.roa (raw, json)
Hash identifier:          sln741bjmP1A6wlgzlD53TWWc2OjDMQUduXn5J9ncok=
Subject key identifier:   97:CD:C3:A8:F5:18:B6:2A:FC:EC:16:F2:DE:22:54:BF:82:FC:81:26
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       D0
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/l83DqPUYtir87Bby3iJUv4L8gSY.roa
Signing time:             Sat 01 Nov 2025 01:32:53 +0000
ROA not before:           Sat 01 Nov 2025 01:32:53 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     4685
IP address blocks:        124.155.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov  1 01:32:53 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=97CDC3A8F518B62AFCEC16F2DE2254BF82FC8126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:70:d3:6a:ca:c1:e4:f8:d1:f3:c8:42:93:
                    b5:4f:58:7e:14:96:3e:3c:dd:8d:88:5c:e5:c1:21:
                    a0:82:9d:fd:ad:16:9a:cc:a7:f9:39:69:bb:14:85:
                    db:b8:7d:85:94:03:55:de:97:b2:04:b4:ff:5a:c4:
                    24:e5:3b:94:9f:b2:33:1d:55:0f:1d:d7:bc:63:ea:
                    8c:85:8c:fc:af:09:b9:a8:ac:57:49:ef:72:fc:2a:
                    f7:fb:92:27:32:8e:5b:f7:5d:96:d2:39:59:06:67:
                    09:a2:c6:92:a1:3f:24:1b:e7:88:9c:48:db:5d:9d:
                    09:c6:59:09:a4:9d:5a:30:16:56:31:ca:19:a0:21:
                    4e:63:ef:58:87:a2:d7:5a:cd:1d:9d:3d:4b:2b:98:
                    d1:9e:02:55:f8:86:0c:8e:c6:cd:9d:d0:80:86:08:
                    92:ad:57:05:40:75:44:04:ba:1f:31:e1:f1:20:6c:
                    e7:d0:5c:ff:b6:6e:3b:2a:fd:35:ee:8b:96:ba:95:
                    9b:02:5a:59:f1:0f:f8:fb:e7:76:68:f9:0a:c2:c5:
                    7c:90:13:e4:e0:1d:b2:a0:6a:ef:b3:f9:85:aa:d3:
                    fd:17:38:d8:1b:ae:96:1a:3f:a4:dc:8a:9a:05:e2:
                    f1:0e:22:07:58:b2:d1:56:6e:d2:ab:50:ce:dc:25:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:C3:A8:F5:18:B6:2A:FC:EC:16:F2:DE:22:54:BF:82:FC:81:26
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/l83DqPUYtir87Bby3iJUv4L8gSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:85:f0:e2:94:af:9d:b5:78:cf:72:b2:b2:13:89:63:c0:
         b1:65:b8:2e:13:58:66:a0:50:d1:3e:20:f8:9d:1e:90:77:7a:
         16:f4:a9:d4:eb:0d:94:2c:57:36:80:9d:2c:b8:0f:2f:d2:25:
         28:19:11:e4:c7:1c:2f:20:56:f0:73:bb:ed:99:b5:03:00:e2:
         75:2c:f7:6f:15:42:f8:63:57:6e:9a:33:28:dd:06:80:d5:03:
         07:a0:62:00:bc:31:61:b4:28:bd:ca:12:92:31:a9:c2:08:63:
         d5:f4:5e:90:59:c6:a2:86:b8:3d:06:81:f9:58:a1:f7:41:b1:
         12:aa:c2:e6:7d:78:e3:32:e9:8a:9f:0c:55:b5:7a:04:9d:82:
         87:6a:20:6d:19:aa:0e:51:3b:45:eb:1c:98:02:ee:14:84:e6:
         6b:b9:b4:f4:68:99:6e:ca:35:be:28:b3:1e:34:bf:1e:c8:b8:
         2a:1e:e5:55:70:4f:d6:36:bb:4f:9f:9e:73:77:e7:46:29:43:
         73:13:7f:c5:08:3e:83:86:9b:4c:40:de:38:00:be:00:d8:a0:
         7b:02:48:a7:f3:b1:ad:a6:fc:2e:e6:0c:25:66:07:e9:21:ca:
         c0:4e:d7:20:d6:2f:bc:42:35:36:1c:5f:9f:24:51:1e:04:03:
         9c:52:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:02:56 2025 by rpki-client