Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/526/eB8bvQaCRhVm1Pa-5BQjjMN5p-k.roa
File:                     eB8bvQaCRhVm1Pa-5BQjjMN5p-k.roa (raw, json)
Hash identifier:          yGDUWpyhq3iFrK9y8fRSU396UqLGCfQ0Zy/AFkeNY6I=
Subject key identifier:   78:1F:1B:BD:06:82:46:15:66:D4:F6:BE:E4:14:23:8C:C3:79:A7:E9
Certificate issuer:       /CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Certificate serial:       02
Authority key identifier: 8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/eB8bvQaCRhVm1Pa-5BQjjMN5p-k.roa
Signing time:             Fri 26 Sep 2025 04:44:07 +0000
ROA not before:           Fri 26 Sep 2025 04:44:07 +0000
ROA not after:            Sat 26 Sep 2026 04:32:34 +0000
asID:                     55393
IP address blocks:        119.15.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
        Validity
            Not Before: Sep 26 04:44:07 2025 GMT
            Not After : Sep 26 04:32:34 2026 GMT
        Subject: CN=781F1BBD0682461566D4F6BEE414238CC379A7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:7e:0d:a8:6b:3e:b8:57:04:aa:8a:a7:30:
                    0b:2c:ee:ec:e9:d2:86:c5:d3:bd:54:03:43:f5:37:
                    59:ed:46:87:dc:94:82:cb:25:fa:b5:20:c3:70:29:
                    ce:2c:13:8e:36:c1:3f:85:40:80:8f:5b:2e:cc:78:
                    5f:58:42:ef:6a:c7:aa:9f:2e:fb:bc:5b:ee:f0:35:
                    c0:f0:ac:b4:18:f9:65:97:01:97:58:52:78:65:21:
                    93:28:71:18:0f:70:5b:5e:f3:e1:7a:aa:bb:26:c2:
                    44:a5:8b:a0:7f:ce:a1:9f:7e:31:f3:c9:10:6f:c8:
                    e0:17:1d:91:c9:b8:ac:88:c9:e6:4d:37:9e:c2:a7:
                    93:83:b4:86:ef:58:27:81:a0:d3:7e:3b:fb:47:f7:
                    55:eb:c5:28:5d:0e:2d:88:7d:d6:09:9d:f1:da:0e:
                    10:c4:73:e8:a5:73:75:9f:85:af:51:20:22:d9:68:
                    6a:31:06:8d:05:8b:b5:d7:a8:6f:c0:a1:81:58:af:
                    46:35:a0:53:89:7d:25:63:c0:43:78:4a:0d:8c:88:
                    d6:eb:b0:74:9e:73:34:93:30:f6:2a:60:64:1e:4e:
                    5d:fc:1c:6a:a0:1f:d5:09:f2:bc:b9:2d:d0:f6:ed:
                    25:04:96:38:f4:be:4a:b1:48:52:3e:55:5e:dd:8a:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:1B:BD:06:82:46:15:66:D4:F6:BE:E4:14:23:8C:C3:79:A7:E9
            X509v3 Authority Key Identifier:
                keyid:8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/eB8bvQaCRhVm1Pa-5BQjjMN5p-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:b6:71:e8:15:05:12:15:e1:85:c9:bc:c9:a1:08:32:d5:
         5f:2f:06:62:c9:d1:39:46:c0:e4:20:af:ac:6e:e4:e6:b3:61:
         7f:1c:58:83:fa:6f:db:ea:8d:0c:c6:44:3e:0c:cf:11:8b:2c:
         b8:30:cd:0e:08:e7:3c:a1:ce:a5:6a:2f:d9:32:1c:4a:07:95:
         e7:84:01:a0:b7:e9:97:95:f6:64:d2:e4:94:07:69:2f:10:c3:
         b2:03:44:d4:1b:9f:72:77:ac:49:ec:f7:e0:2a:82:e6:cf:74:
         fc:88:70:f6:3c:8b:d7:24:28:d1:fc:67:d5:ed:8e:0f:41:28:
         28:3b:22:c3:b4:c3:b6:c9:2e:98:14:a7:f1:4d:4e:af:7d:65:
         1c:b0:a4:34:1d:13:7d:4b:dc:e4:8a:57:cd:64:8b:82:c3:81:
         48:d8:f5:a7:00:41:11:80:a9:71:bb:2d:c5:a1:24:7d:55:8e:
         fb:4d:4a:b8:8e:9a:d1:a6:1f:19:c2:38:c5:c3:13:a1:ae:a0:
         65:d1:87:1b:2c:4d:5a:49:9e:75:5c:3d:3b:92:06:5d:5a:b5:
         14:d4:8a:af:e7:44:5f:73:65:13:c0:30:2c:9e:7d:27:4f:46:
         d8:09:22:63:c1:ee:c1:b7:fd:8c:91:04:cd:65:cc:19:87:8a:
         a7:0c:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:34:31 2025 by rpki-client