Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/tD6QqXNxf_ErZe1DKWfe0rHus7k.roa
File:                     tD6QqXNxf_ErZe1DKWfe0rHus7k.roa (raw, json)
Hash identifier:          OO/Et/kprxJ7mkcUAdMb56CHpYWzgeAZLWn7j5QZK6E=
Subject key identifier:   B4:3E:90:A9:73:71:7F:F1:2B:65:ED:43:29:67:DE:D2:B1:EE:B3:B9
Certificate issuer:       /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial:       26
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tD6QqXNxf_ErZe1DKWfe0rHus7k.roa
Signing time:             Wed 01 Oct 2025 01:32:04 +0000
ROA not before:           Wed 01 Oct 2025 01:32:04 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     23783
IP address blocks:        193.116.32.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 14:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
        Validity
            Not Before: Oct  1 01:32:04 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=B43E90A973717FF12B65ED432967DED2B1EEB3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:57:77:53:05:a3:c3:42:24:db:95:6f:cd:
                    cb:ba:6a:43:50:c1:04:c7:74:10:42:84:bf:aa:dd:
                    2d:0c:1d:de:66:6a:de:6e:9d:50:f1:c6:45:53:ea:
                    4a:c9:c8:08:ad:14:8d:bb:dd:df:55:e1:3e:ec:7d:
                    f6:d5:ea:ba:9a:35:0f:55:c2:e0:90:76:32:4b:57:
                    35:fc:3c:1f:22:05:e1:81:f7:a8:2c:53:41:dc:73:
                    74:97:c5:86:5d:78:60:b0:12:d5:27:5f:4e:be:cd:
                    f8:66:f2:e0:7f:fa:91:66:d1:0f:c1:80:1c:61:ab:
                    b3:8a:6a:b1:0d:06:d4:e6:eb:1c:34:11:eb:5b:1b:
                    13:49:6b:02:47:a5:88:3b:49:e2:39:16:41:30:1c:
                    a6:44:fb:e2:6d:fe:d8:c0:8f:66:69:a6:7b:c8:a9:
                    64:8f:93:b3:e9:4c:a6:fd:a7:26:73:59:dc:7c:e3:
                    95:00:77:b6:e2:19:d4:83:7a:96:19:2d:d8:2b:c2:
                    ff:5e:cd:d3:2a:dd:cd:f6:5d:b7:1d:0e:16:fc:08:
                    60:f4:42:c4:07:c6:a8:45:a3:ab:96:22:7c:09:b6:
                    ec:fd:e2:2b:9a:75:bf:20:f2:04:8c:6a:18:d8:77:
                    82:cd:c5:89:c8:01:b3:84:98:95:28:f3:5e:95:c7:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3E:90:A9:73:71:7F:F1:2B:65:ED:43:29:67:DE:D2:B1:EE:B3:B9
            X509v3 Authority Key Identifier:
                keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tD6QqXNxf_ErZe1DKWfe0rHus7k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:13:e1:f6:75:07:9e:5a:c4:44:eb:61:94:9a:25:b5:4f:75:
         2c:6a:1a:b4:c7:fa:13:fd:d9:c7:43:a6:95:02:ba:ab:59:55:
         6c:94:31:72:3d:66:cb:83:a1:31:40:07:91:b9:f3:eb:86:65:
         d5:dc:63:f6:25:61:3a:b3:22:c0:dd:c7:e2:33:29:66:ec:28:
         cb:c6:7b:2f:0e:71:f7:da:bc:f3:ef:9d:bf:69:c8:64:d3:51:
         fb:94:f7:b7:f6:46:ff:d2:37:4f:a1:c3:e4:d2:c7:35:fa:8b:
         b8:47:fa:a3:e8:23:5c:c5:df:60:9e:fc:5f:0e:92:b2:00:c2:
         ed:e0:89:b8:19:c9:ee:9b:b9:95:ce:6a:ce:c0:8c:5f:b1:4a:
         c3:f5:d4:64:f6:dd:1c:c7:95:02:06:3b:0f:aa:e6:58:70:5d:
         b0:8c:80:46:8a:69:2d:a5:23:88:80:07:46:00:98:0a:ef:26:
         79:80:c9:ee:39:5a:ab:55:cb:b5:02:6f:1f:f8:5e:8f:1d:46:
         1d:46:7d:40:2c:0a:71:92:39:2f:84:61:d9:97:43:e6:15:9f:
         dd:86:51:74:6c:8c:c4:aa:64:38:86:3b:f2:af:55:88:bf:9a:
         90:93:0d:ce:f2:1d:16:e0:24:34:e3:98:13:c9:d7:3a:e0:67:
         0d:87:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:36 2025 by rpki-client