Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
File:                     ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa (raw, json)
Hash identifier:          hVGTg+OmLKO+0GYTlNSpq8jXb9vUgjgHPlvila2/JxQ=
Subject key identifier:   AE:2F:15:85:B6:E7:C5:A5:E3:AA:13:9D:0F:86:63:76:05:0E:F6:C6
Certificate issuer:       /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial:       25
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
Signing time:             Wed 01 Oct 2025 01:32:03 +0000
ROA not before:           Wed 01 Oct 2025 01:32:03 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     23783
IP address blocks:        193.116.32.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 14:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
        Validity
            Not Before: Oct  1 01:32:03 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=AE2F1585B6E7C5A5E3AA139D0F866376050EF6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:d7:1e:8b:33:77:75:56:6e:dd:27:72:fe:
                    5c:df:25:3c:c9:82:0a:05:46:ef:7e:62:85:99:3a:
                    3a:d2:00:36:37:86:c7:58:20:ef:44:1f:d8:a3:f6:
                    7f:38:d1:cc:af:22:c3:e4:95:97:e8:d4:ef:82:e6:
                    e0:9a:a9:c5:8c:1d:1d:dd:a9:ea:89:11:79:13:c1:
                    59:13:e9:d0:e3:ca:e3:81:ec:b4:b7:1a:8a:28:e2:
                    b1:04:c4:5e:f4:12:93:2a:cc:d6:03:38:03:6d:fb:
                    cf:12:67:a6:dc:61:36:2a:25:7b:2f:63:2c:27:64:
                    5a:d3:e3:2a:50:40:5a:a5:bd:8e:2b:94:07:52:f3:
                    c5:c7:c2:62:5b:94:f5:7f:a7:fa:5e:ac:ed:00:16:
                    51:fc:bd:cc:9c:fd:47:30:d8:c5:3a:4b:ff:82:d2:
                    8b:44:92:be:0d:95:f7:8f:7f:5c:89:68:44:39:f4:
                    07:e2:33:79:80:04:03:22:93:57:00:74:61:ea:ea:
                    12:8a:a9:df:6b:fd:1a:d3:10:9d:87:67:14:9c:ac:
                    46:29:9a:98:f9:05:68:98:ee:7c:8d:b4:46:ba:d1:
                    1e:67:bf:50:69:87:d2:c6:a6:04:8e:33:9e:9f:71:
                    34:ca:f1:01:c9:47:9d:40:80:e2:c3:9c:85:3e:25:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:15:85:B6:E7:C5:A5:E3:AA:13:9D:0F:86:63:76:05:0E:F6:C6
            X509v3 Authority Key Identifier:
                keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/ri8VhbbnxaXjqhOdD4ZjdgUO9sY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:27:dc:87:80:cb:a8:87:fe:92:c3:18:3a:07:dc:8d:f1:30:
         44:2d:62:ea:c6:25:f7:e9:90:43:32:5a:0d:e2:50:c0:9e:67:
         6d:82:64:58:4d:54:a2:1f:06:84:cd:c6:70:17:47:c3:29:1b:
         7b:4a:2b:d7:ae:76:10:71:6e:35:3b:13:3f:96:95:cd:db:80:
         6a:30:aa:10:7f:4e:c1:70:3d:88:c7:6b:9b:5f:6b:7f:08:5c:
         96:dc:84:7b:d5:70:96:22:1b:0d:3f:b5:68:5f:37:f3:f5:6d:
         04:0e:06:48:88:b9:c8:d4:bf:df:ae:88:db:89:10:f9:5b:ab:
         e5:f2:36:4d:5e:4d:e3:1d:f1:1b:50:cc:76:b9:aa:14:60:9d:
         d3:73:f3:a7:0a:26:53:29:d8:67:03:6a:b5:c3:e2:31:f9:e8:
         67:df:6b:b1:27:8e:da:30:23:7f:82:5d:b7:4c:f4:21:ce:d2:
         20:9f:a7:41:76:e3:4d:f9:0d:5d:85:a6:e2:b1:75:79:05:46:
         b0:13:10:a5:5a:f6:b0:68:bf:99:4d:2c:59:88:28:71:f0:88:
         5c:4d:f3:00:b2:c3:b9:1f:32:dd:4e:34:3e:fa:27:85:53:42:
         46:cb:fe:54:38:4b:f7:5c:67:f7:de:cd:77:8f:2f:02:c8:70:
         09:45:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:28:49 2025 by rpki-client