Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/Mh4EgfS-igMIYgg9qvTtwZF5kY4.roa
File:                     Mh4EgfS-igMIYgg9qvTtwZF5kY4.roa (raw, json)
Hash identifier:          duTrGxs2JrXSdY+ftYtU3SPx0T0+dQOxiuEgeC78SF8=
Subject key identifier:   32:1E:04:81:F4:BE:8A:03:08:62:08:3D:AA:F4:ED:C1:91:79:91:8E
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       4B
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/Mh4EgfS-igMIYgg9qvTtwZF5kY4.roa
Signing time:             Wed 01 Oct 2025 01:30:57 +0000
ROA not before:           Wed 01 Oct 2025 01:30:57 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18094
IP address blocks:        103.15.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Oct  1 01:30:57 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=321E0481F4BE8A030862083DAAF4EDC19179918E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:47:6b:07:b8:ea:ec:64:24:1d:5e:16:0a:
                    dd:a0:53:f9:a6:60:1b:2b:c3:0f:48:51:db:5d:cf:
                    d6:bb:42:35:cf:d4:58:df:82:df:95:13:3b:37:48:
                    a5:e3:08:15:d5:c8:94:a2:f2:63:58:57:ab:f4:f8:
                    1b:e3:53:4d:97:17:0f:18:22:45:7b:d5:c5:17:f0:
                    38:d2:ce:9a:3a:51:7f:bd:c6:5f:27:6a:51:0b:18:
                    e9:a0:36:50:f5:fd:89:be:73:e7:cc:3d:bd:ef:fe:
                    55:01:55:ee:e5:2b:8a:b0:43:09:ba:e8:c6:90:0e:
                    41:12:1d:a1:e3:f9:80:04:17:5f:3e:dc:3b:4b:f4:
                    4f:84:17:ba:bc:6a:e1:07:6f:c9:b3:58:68:29:6f:
                    0c:7d:ec:2d:72:a9:76:cd:bd:68:62:9e:86:d4:bf:
                    54:b4:2a:48:68:d4:58:02:44:69:85:84:9c:55:2c:
                    65:8b:08:e9:08:86:d9:e4:25:d9:66:87:77:b5:84:
                    0e:9f:cf:ed:96:f6:07:5c:9e:92:f3:66:f1:a6:5a:
                    b3:c0:d5:25:ac:2e:34:42:f5:8c:12:13:06:a3:69:
                    bd:b2:3c:35:bb:ff:96:6b:68:f9:05:23:b3:35:21:
                    c0:76:34:08:e0:75:eb:e2:95:18:73:1e:81:aa:a6:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1E:04:81:F4:BE:8A:03:08:62:08:3D:AA:F4:ED:C1:91:79:91:8E
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/Mh4EgfS-igMIYgg9qvTtwZF5kY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:3b:da:de:0c:a0:a4:88:c6:20:42:2a:81:7e:3a:d9:64:
         73:ea:ec:44:9f:bc:4e:b6:55:6a:d5:e4:a1:8b:87:9c:97:22:
         ea:79:02:8d:03:64:8d:f1:ff:dc:6b:30:20:56:bf:7b:a2:e0:
         b6:04:5f:00:e0:54:a9:57:df:a2:86:93:0c:e5:13:a3:7c:61:
         1b:51:a1:25:82:74:cd:86:08:8b:68:df:7d:b1:94:93:b4:a7:
         b3:3e:7e:48:07:01:02:17:04:19:be:00:bf:70:af:6c:5f:cc:
         b8:f0:32:77:d2:53:f2:1e:12:21:c8:f2:d2:43:69:d0:73:ad:
         72:18:d8:54:da:eb:25:a4:47:ba:11:79:67:5a:58:51:07:5c:
         ae:aa:f8:18:8b:6c:37:8e:5c:f0:06:13:57:23:db:5a:d8:cb:
         ff:73:e5:0c:ff:9b:38:69:2e:4b:83:c2:0c:06:21:c2:c3:17:
         29:e5:d3:17:27:51:11:18:a1:3c:07:5c:43:70:d3:ac:62:15:
         fb:4e:1e:1e:c5:eb:ed:5f:ba:a7:9b:33:ef:ff:e1:0e:6a:30:
         a4:7b:d2:88:d9:6b:24:17:f7:61:10:79:87:b2:47:3d:a6:81:
         b5:e0:b4:d7:56:d8:70:4f:04:48:6a:41:e6:9d:52:7f:57:e5:
         9a:83:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:30 2025 by rpki-client