Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10694/56qhTxPnzjMGUSmJ45At5vsLNk8.roa
File:                     56qhTxPnzjMGUSmJ45At5vsLNk8.roa (raw, json)
Hash identifier:          q074RiWXNQmBr6Z/AGNOPtwAtUu5Za4Cj1aJMV10muI=
Subject key identifier:   E7:AA:A1:4F:13:E7:CE:33:06:51:29:89:E3:90:2D:E6:FB:0B:36:4F
Certificate issuer:       /CN=713193D702C3122114F7CDE81FD5A58672720F84
Certificate serial:       26
Authority key identifier: 71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/56qhTxPnzjMGUSmJ45At5vsLNk8.roa
Signing time:             Wed 01 Oct 2025 01:32:26 +0000
ROA not before:           Wed 01 Oct 2025 01:32:26 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        101.50.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713193D702C3122114F7CDE81FD5A58672720F84
        Validity
            Not Before: Oct  1 01:32:26 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=E7AAA14F13E7CE3306512989E3902DE6FB0B364F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:ed:9a:66:62:76:91:39:e0:b2:83:1c:d2:
                    66:a1:e1:50:96:a9:d3:02:69:3e:20:48:47:4f:7c:
                    28:44:6f:e4:f6:24:6b:a6:63:71:8a:80:b0:f8:84:
                    75:e3:39:d5:22:43:66:52:fc:af:73:5c:5b:b3:28:
                    7f:36:53:37:d9:75:71:b9:a8:4d:e9:b8:29:57:26:
                    cd:b1:a9:7d:e6:a1:c7:a4:33:86:64:1b:53:c1:cd:
                    0d:10:d4:3b:e4:7c:a0:2c:34:db:6d:37:7d:4f:d7:
                    7e:52:01:ac:47:29:06:91:92:85:ee:5a:62:97:c1:
                    d6:96:46:39:49:ac:4f:c3:ae:c4:0b:a2:55:f2:b6:
                    75:e9:eb:0e:d4:03:3d:e4:fe:28:b0:26:5f:2c:de:
                    d4:69:41:7d:90:d9:cb:b6:8e:ec:ae:56:19:8f:59:
                    d7:a9:8f:1e:ad:ea:3c:29:2d:56:4b:0c:fc:4e:2e:
                    06:31:34:6d:c8:65:bb:d0:41:a3:3c:21:2b:f7:74:
                    27:a9:0a:27:fe:fb:3d:91:82:29:23:2c:4a:07:2e:
                    c4:09:26:22:fb:ee:99:d3:40:90:f1:52:ba:8f:18:
                    b8:9e:e0:1b:38:6d:26:61:e5:c1:06:3f:8e:aa:04:
                    e6:d2:3b:0f:ce:6d:96:1e:db:29:19:3d:54:1d:79:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:A1:4F:13:E7:CE:33:06:51:29:89:E3:90:2D:E6:FB:0B:36:4F
            X509v3 Authority Key Identifier:
                keyid:71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/56qhTxPnzjMGUSmJ45At5vsLNk8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:9a:33:c6:92:51:b7:a8:50:76:5f:e8:2a:67:b9:9c:31:ce:
         de:d7:6d:2d:b5:5f:1a:41:38:bb:5e:a7:38:49:4e:0f:12:50:
         19:a5:f3:63:66:fc:fa:22:29:68:c5:7a:e6:8e:8b:cc:cf:b5:
         2e:7b:d1:df:b0:0b:98:4d:34:52:0b:61:71:d6:c3:e7:db:d4:
         01:a2:66:2a:d5:72:2d:b7:62:90:30:46:65:99:cf:e8:1d:c1:
         3a:4d:0d:6e:83:39:d6:94:80:19:9c:81:c9:ab:7b:57:5f:93:
         48:63:71:cc:8a:eb:3b:88:05:9a:62:36:94:b4:ac:8f:ee:26:
         8d:b5:2b:7c:8e:2d:fc:9e:4e:bb:53:6e:a9:67:69:9c:0f:e0:
         cc:e3:04:2b:26:2c:ef:b3:57:80:cd:97:dc:d2:96:b5:44:83:
         bd:61:71:91:b3:d6:4a:76:3c:d8:a4:69:45:8a:9b:cf:e1:6f:
         ac:50:60:5f:0b:5b:a3:9d:bb:02:1d:69:e7:99:cb:5e:3f:81:
         5f:08:e0:5a:bb:fc:4e:63:c1:4f:c5:31:c0:e7:5c:2c:2b:a6:
         77:bf:76:49:10:98:1e:e7:2f:c1:e3:97:6e:54:43:c8:1e:bc:
         8d:e7:16:f2:ac:30:36:37:53:6c:8c:bd:6c:0b:ca:19:fd:4c:
         99:e1:9a:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:32 2025 by rpki-client