Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/1FXXIBexKMG3IQOeRHqPYdW4z7Y.roa
File:                     1FXXIBexKMG3IQOeRHqPYdW4z7Y.roa (raw, json)
Hash identifier:          Z7Yw3kZYROYkDI2wyF/WCiZd5VfibX5or1bN/J/q0f4=
Subject key identifier:   D4:55:D7:20:17:B1:28:C1:B7:21:03:9E:44:7A:8F:61:D5:B8:CF:B6
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       82
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/1FXXIBexKMG3IQOeRHqPYdW4z7Y.roa
Signing time:             Fri 19 Sep 2025 03:27:43 +0000
ROA not before:           Fri 19 Sep 2025 03:27:43 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     63804
IP address blocks:        101.78.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Sep 19 03:27:43 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D455D72017B128C1B721039E447A8F61D5B8CFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:8f:07:57:9d:1d:f1:ce:bb:31:30:4b:dc:
                    5f:2e:d6:2f:68:21:84:f7:59:10:bd:f3:d3:ba:96:
                    58:86:cb:54:b4:ca:16:7d:55:02:6b:42:21:f1:7e:
                    23:1f:4e:e4:7c:28:46:28:13:3f:cc:a8:a7:63:68:
                    31:b6:fa:d8:ec:2b:17:17:39:47:ea:d8:69:b9:09:
                    c5:6d:a8:1d:63:09:bd:05:64:dd:1e:5d:3d:49:61:
                    4e:69:d2:41:ab:72:c4:6a:12:f6:a2:f3:1b:58:37:
                    d5:18:e9:af:6d:e8:78:93:6e:f3:87:db:5d:dc:9c:
                    4f:72:e3:50:c6:12:c2:c4:0c:a7:f0:6f:36:d0:9d:
                    8a:cc:0b:87:13:eb:df:fc:ed:14:39:30:f9:e5:10:
                    22:8b:29:ab:7a:b8:ea:4e:20:3a:5c:72:d5:f1:13:
                    d3:82:b0:b9:4a:c2:1e:e6:72:1a:cd:34:bb:4e:44:
                    5a:ac:84:2a:e2:e5:26:dc:dd:ce:d9:18:ea:58:9e:
                    3d:a5:f9:44:7d:88:20:1e:3e:d3:a6:f1:51:45:e5:
                    35:98:70:c5:49:3e:02:1a:8a:f7:f1:a8:26:43:d5:
                    cb:13:96:e8:5b:e8:b9:ba:cd:7a:24:04:bf:44:02:
                    31:0e:09:31:f5:1b:d9:0c:2b:9d:09:2e:3d:4a:07:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:D7:20:17:B1:28:C1:B7:21:03:9E:44:7A:8F:61:D5:B8:CF:B6
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/1FXXIBexKMG3IQOeRHqPYdW4z7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:dc:a1:29:e0:11:55:3f:8a:7b:8d:f6:46:b4:ed:1e:06:18:
         6c:6e:c8:a1:91:66:69:3d:d9:6e:12:c8:fc:fd:a4:bb:a9:8a:
         54:56:42:01:67:9e:4e:1a:5b:33:73:d0:d4:91:0b:2d:9c:4d:
         fe:a5:46:1a:d2:27:f7:de:28:9a:98:8a:b9:0e:40:d2:c9:bb:
         a3:0b:6a:3d:31:0f:52:5f:de:dc:0e:94:9c:c4:0b:73:73:54:
         cd:33:f9:10:27:6b:13:bd:c5:c5:b5:46:72:e4:4c:a9:59:21:
         5a:66:ca:99:8a:ae:ac:9c:82:0c:69:ec:a5:61:53:62:8e:34:
         bf:fa:92:f2:28:4e:d0:2e:d8:d2:07:4e:f8:7f:b0:30:50:d2:
         4b:11:76:0f:8f:0e:60:22:0b:2c:61:2a:b5:14:80:bf:68:55:
         5b:67:56:b2:44:9f:9e:4a:7e:d3:dc:7d:0a:37:52:d0:d6:7f:
         8d:73:d7:d2:5b:1d:06:b9:b7:b4:bd:2c:d8:5a:09:7b:1d:b6:
         09:ed:6c:7f:04:24:4f:1c:7a:51:64:81:a1:60:21:db:b4:ad:
         f6:4d:24:c2:1e:c6:f9:c2:7a:87:df:00:bc:e9:bc:10:f9:31:
         af:e7:98:2a:57:09:ee:95:7b:09:43:0a:ae:87:55:c0:77:a7:
         c6:26:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:29 2025 by rpki-client