Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/wc5lF7KvljLd2cELNKI-qEhSbis.roa
File:                     wc5lF7KvljLd2cELNKI-qEhSbis.roa (raw, json)
Hash identifier:          vb4zNPPWYjlyqaH0oWjHMtjItqakcYwrEK2xf/zICyg=
Subject key identifier:   C1:CE:65:17:B2:AF:96:32:DD:D9:C1:0B:34:A2:3E:A8:48:52:6E:2B
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       81
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/wc5lF7KvljLd2cELNKI-qEhSbis.roa
Signing time:             Mon 01 Sep 2025 01:30:28 +0000
ROA not before:           Mon 01 Sep 2025 01:30:28 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:30:28 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=C1CE6517B2AF9632DDD9C10B34A23EA848526E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:2d:84:5a:c6:59:f3:a8:6f:e2:cc:e8:6b:
                    6f:30:a1:42:40:f9:42:b0:3f:89:c8:22:71:c9:d0:
                    c9:44:0d:0e:ad:1c:05:45:d1:87:d9:00:65:ee:83:
                    46:5e:12:d8:8e:10:e8:f3:46:82:ed:3c:34:69:9a:
                    55:cb:3c:c5:4f:77:35:60:16:85:18:7c:0f:76:4c:
                    e1:cd:bd:14:cb:66:d6:6a:56:81:f8:2a:34:32:ff:
                    37:a4:06:58:f9:c8:bf:68:69:c8:2e:46:a8:7c:55:
                    a3:cc:5d:4c:28:6a:6b:c0:c8:db:1b:2d:07:cd:53:
                    96:95:dc:5b:30:a3:9c:18:86:5e:59:10:6e:7b:0f:
                    54:ab:cb:6a:e9:7a:f1:1b:bb:25:90:98:22:88:ea:
                    67:ca:24:56:cf:3c:cb:e9:d7:6e:6e:58:fc:5f:54:
                    ba:94:7f:1e:fa:b6:dd:42:c2:fd:fd:d2:82:8e:87:
                    b7:22:45:f3:1a:8b:13:f2:9b:e8:7a:44:b9:c9:73:
                    ef:ca:d7:d8:dc:a1:30:10:0f:7c:16:2f:06:82:ff:
                    64:b2:e7:38:a0:fb:8c:23:1e:94:d1:d4:e6:2c:3a:
                    2b:40:a0:f8:48:49:2d:bc:8c:df:6d:7b:4e:9f:24:
                    32:f7:74:2c:29:38:8f:c4:19:6b:a5:fe:f0:12:1d:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:65:17:B2:AF:96:32:DD:D9:C1:0B:34:A2:3E:A8:48:52:6E:2B
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/wc5lF7KvljLd2cELNKI-qEhSbis.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:27:2c:43:bc:5f:09:76:2d:4d:64:8a:72:2d:9c:2c:53:
         96:15:17:23:aa:b4:3c:89:e0:90:4c:4c:a2:5a:dc:24:0f:2f:
         a9:62:c3:f8:bb:c4:5d:59:18:f5:70:c7:48:a5:ea:6d:c9:40:
         77:7a:e4:9d:92:d1:f3:3f:a4:1e:e8:6f:ec:57:b4:bc:13:4a:
         f8:11:3c:21:16:79:32:2b:02:43:3a:ab:76:98:94:15:7f:cb:
         a5:0a:22:a7:9d:14:ba:08:7f:d1:59:d0:05:4d:83:7a:7a:76:
         68:e0:9c:94:28:cb:82:93:4d:14:94:26:e8:70:ae:fb:c9:8e:
         00:84:73:c2:4d:88:ea:0e:2c:c6:64:46:c1:cb:80:61:0c:e9:
         47:5f:ca:2b:e0:5c:e9:05:1b:20:d6:f2:43:45:0e:c5:95:27:
         b2:da:cb:50:bd:a8:b7:4d:da:58:00:47:3d:bd:da:73:50:37:
         20:be:eb:00:10:98:a6:f9:92:9e:81:7b:6e:10:d2:e2:31:cf:
         62:6f:8a:96:20:5d:94:96:2f:fb:1f:b6:a5:3f:79:1c:5a:09:
         23:73:4c:c5:55:7c:96:5d:c1:20:5e:48:e3:fb:6e:8a:12:05:
         cf:6f:62:17:8e:d5:26:90:6b:22:1d:31:e4:68:6e:ea:fd:2c:
         b2:56:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:19 2025 by rpki-client