Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/oKeBifYzYStUnKFAADAnYStce2E.roa
File:                     oKeBifYzYStUnKFAADAnYStce2E.roa (raw, json)
Hash identifier:          JvG4XJhG2jrDaL95uCxDNqsOjs6gLiRK8cY8+O8bq48=
Subject key identifier:   A0:A7:81:89:F6:33:61:2B:54:9C:A1:40:00:30:27:61:2B:5C:7B:61
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       D1
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/oKeBifYzYStUnKFAADAnYStce2E.roa
Signing time:             Sat 01 Nov 2025 01:32:54 +0000
ROA not before:           Sat 01 Nov 2025 01:32:54 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     4685
IP address blocks:        124.155.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov  1 01:32:54 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=A0A78189F633612B549CA140003027612B5C7B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9a:81:5e:6e:10:a2:f8:23:f4:31:47:d8:9b:
                    63:6e:b3:53:26:f5:a6:d4:14:a5:14:79:be:27:e3:
                    f8:e6:7f:fb:21:33:e5:b0:01:4f:e4:67:ac:fe:21:
                    3c:c0:4d:f1:19:8a:d7:ca:d1:40:82:88:a5:cb:60:
                    f8:6a:60:f5:47:80:a5:1c:25:88:89:ac:14:78:be:
                    33:6f:36:46:ab:33:06:0a:9e:d5:87:7c:bb:47:e9:
                    c4:5f:b4:93:55:75:be:a5:1c:cc:6c:d6:cb:fe:3a:
                    0f:a0:4c:9a:e8:41:83:ac:88:24:2b:e1:77:8b:38:
                    24:57:11:cb:79:b7:eb:48:4b:91:c6:ec:c5:2e:22:
                    91:17:fc:36:a6:98:16:8e:c0:30:24:cd:74:ce:65:
                    ed:1c:cc:25:bf:f6:82:a9:d8:64:92:50:ca:bb:1a:
                    cd:d0:58:e4:e3:b9:b9:4c:d3:2b:97:77:ad:a9:2f:
                    e0:58:f3:84:d5:32:91:80:13:62:ee:0e:5f:83:18:
                    02:46:ab:6f:84:a4:cd:ae:37:d2:d3:7b:8f:78:d9:
                    bc:55:ed:4f:52:b1:37:85:31:c3:8b:25:0b:3c:8a:
                    10:b6:9c:af:76:d6:2d:27:9f:bb:a0:a1:f5:76:ad:
                    8b:6a:43:49:9b:ef:7f:61:01:73:6c:ce:a4:78:0b:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A7:81:89:F6:33:61:2B:54:9C:A1:40:00:30:27:61:2B:5C:7B:61
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/oKeBifYzYStUnKFAADAnYStce2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:47:a0:f4:90:eb:03:a0:4f:f3:04:b2:44:9f:06:34:2c:
         4d:70:50:fa:07:f3:77:8b:10:98:ff:67:34:7d:70:8d:4f:0f:
         24:dd:70:c1:17:5a:51:c7:c7:65:a7:f2:aa:3a:b9:2e:53:5f:
         fa:48:fe:60:5a:99:1c:c1:fe:c5:83:64:d3:09:73:c9:41:02:
         48:ea:e9:af:26:c1:44:07:58:eb:24:db:73:bd:d7:3d:8c:9c:
         a3:b7:4a:bd:c3:d1:ac:d0:06:1c:e5:62:06:c3:c4:04:ee:8b:
         93:05:f9:25:b1:82:d3:45:f3:0f:b2:dd:8f:db:5d:02:cc:c7:
         15:ba:fd:da:7a:74:3d:50:c1:b7:53:22:7a:53:9d:45:09:fc:
         2d:a9:75:a3:92:69:ec:17:50:cd:69:4b:03:44:30:7e:57:f0:
         8b:f0:9b:76:9d:fd:63:43:dd:09:01:68:9c:5a:23:5c:0c:ce:
         f4:40:18:f6:4f:63:95:07:92:64:11:e2:9d:c7:5d:3b:07:8c:
         65:4b:71:b6:2e:b1:75:dc:a0:4c:d3:d4:73:34:bc:17:bf:4b:
         e3:f9:60:8f:bb:51:f8:a6:7b:41:de:59:4d:ce:1b:14:00:53:
         90:1a:5b:ad:f8:f1:8d:dc:59:4f:03:c6:ae:51:80:53:be:51:
         2a:32:32:96
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTExMDEw
MTMyNTRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwQTc4MTg5RjYzMzYx
MkI1NDlDQTE0MDAwMzAyNzYxMkI1QzdCNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfmoFebhCi+CP0MUfYm2Nus1Mm9abUFKUUeb4n4/jmf/shM+Ww
AU/kZ6z+ITzATfEZitfK0UCCiKXLYPhqYPVHgKUcJYiJrBR4vjNvNkarMwYKntWH
fLtH6cRftJNVdb6lHMxs1sv+Og+gTJroQYOsiCQr4XeLOCRXEct5t+tIS5HG7MUu
IpEX/DammBaOwDAkzXTOZe0czCW/9oKp2GSSUMq7Gs3QWOTjublM0yuXd62pL+BY
84TVMpGAE2LuDl+DGAJGq2+EpM2uN9LTe4942bxV7U9SsTeFMcOLJQs8ihC2nK92
1i0nn7ugofV2rYtqQ0mb739hAXNszqR4C1yBAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUoKeBifYzYStUnKFAADAnYStce2EwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9vS2VCaWZZellTdFVuS0ZBQURBbllTdGNlMkUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQGfJtAMA0GCSqGSIb3DQEBCwUAA4IBAQCDm0eg9JDrA6BP8wSyRJ8GNCxNcFD6
B/N3ixCY/2c0fXCNTw8k3XDBF1pRx8dlp/KqOrkuU1/6SP5gWpkcwf7Fg2TTCXPJ
QQJI6umvJsFEB1jrJNtzvdc9jJyjt0q9w9Gs0AYc5WIGw8QE7ouTBfklsYLTRfMP
st2P210CzMcVuv3aenQ9UMG3UyJ6U51FCfwtqXWjkmnsF1DNaUsDRDB+V/CL8Jt2
nf1jQ90JAWicWiNcDM70QBj2T2OVB5JkEeKdx107B4xlS3G2LrF13KBM09RzNLwX
v0vj+WCPu1H4pntB3llNzhsUAFOQGlut+PGN3FlPA8auUYBTvlEqMjKW
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:03:14 2025 by rpki-client