Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/FGN2VPRD-nLp3BW1PNv5FBPgj6c.roa
File:                     FGN2VPRD-nLp3BW1PNv5FBPgj6c.roa (raw, json)
Hash identifier:          zrnboJ3fA8u5LfhMvh00qX3ic1ui1iq22pq9OtfBRZw=
Subject key identifier:   14:63:76:54:F4:43:FA:72:E9:DC:15:B5:3C:DB:F9:14:13:E0:8F:A7
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       5C
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/FGN2VPRD-nLp3BW1PNv5FBPgj6c.roa
Signing time:             Fri 24 Oct 2025 10:26:57 +0000
ROA not before:           Fri 24 Oct 2025 10:26:57 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     396982
IP address blocks:        103.123.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 20:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Oct 24 10:26:57 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=14637654F443FA72E9DC15B53CDBF91413E08FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:13:e2:50:88:2f:4c:42:0a:98:1c:e1:1c:
                    d7:42:c0:f3:38:e5:79:b9:7d:90:4d:92:5a:53:84:
                    b5:b0:da:48:6f:a4:81:62:9b:c9:dd:fb:af:76:9d:
                    61:e8:e9:f4:a1:58:13:ca:99:7c:2a:8a:17:97:49:
                    6a:25:b6:71:b6:3f:cf:59:4b:fe:0e:41:f2:49:2d:
                    5d:b9:2d:c5:22:71:0b:bd:33:f6:d9:31:0a:aa:04:
                    91:58:22:4a:4f:5c:55:51:f8:17:8a:30:d8:7e:bc:
                    48:37:e2:87:05:10:fd:5f:31:8d:1c:bf:39:27:6f:
                    a5:2b:fd:5d:7b:48:12:97:39:8f:2e:fd:c1:bb:15:
                    d2:9a:6e:ba:18:f4:a4:b3:ca:ad:e8:12:78:6c:0c:
                    ee:e9:df:a3:58:30:2e:f7:ce:f8:ed:bb:4e:8d:b8:
                    cd:84:2f:55:32:96:37:73:2e:ed:51:97:b7:5a:3d:
                    24:d8:d4:b6:94:13:29:33:0a:ff:f7:10:22:60:b6:
                    73:a4:bb:bf:a5:37:21:35:52:12:8d:90:8f:b0:a7:
                    b7:34:69:5d:75:64:53:5a:04:43:36:61:4d:8c:23:
                    99:cd:97:73:3a:21:43:9a:fb:63:44:a2:3f:1a:8d:
                    54:6c:4a:85:c8:d5:ec:91:d2:7c:52:b2:7f:e6:10:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:63:76:54:F4:43:FA:72:E9:DC:15:B5:3C:DB:F9:14:13:E0:8F:A7
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/FGN2VPRD-nLp3BW1PNv5FBPgj6c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:e1:88:5e:62:66:03:30:78:be:38:dd:d0:0e:b9:f3:9d:
         15:fc:be:ac:b3:02:e2:5e:f5:50:39:c8:3b:21:48:c3:bb:71:
         fb:51:3d:74:ed:84:ec:8a:be:12:50:10:d6:df:ef:77:5a:e6:
         c0:16:20:ef:58:3b:27:18:14:8d:0d:6f:1a:33:27:55:5e:53:
         cf:42:6c:16:56:ea:f4:49:bb:9d:1a:ad:52:b7:70:40:e9:e8:
         47:12:6e:07:0f:99:35:d0:29:5f:99:38:34:b8:20:07:4f:19:
         bd:26:3f:bf:39:ab:c1:29:4c:c7:82:68:56:8c:c6:d9:e6:5d:
         06:96:a5:04:71:91:16:69:99:7b:cd:a0:5d:a3:e7:df:9c:c9:
         00:3a:7c:76:e6:53:c7:53:2d:8f:90:83:02:fb:09:84:e6:91:
         06:6f:bb:15:7c:0b:e1:c8:87:67:10:43:03:ab:2b:29:4a:cd:
         6d:5b:e7:57:54:82:4f:51:ea:6a:fd:3b:16:9b:f0:b5:01:8a:
         5e:dd:73:9a:e0:8e:14:6d:e3:46:57:bf:22:1c:8a:15:0b:5d:
         24:24:60:87:bc:6c:6d:a6:f9:20:06:50:94:7b:84:dc:eb:1a:
         51:69:0b:f9:5e:53:3e:bd:92:b4:a1:db:79:a5:bf:8a:a6:b3:
         0a:04:4f:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:00 2025 by rpki-client