Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WsMEYYUP84oOGNf57nlTJbpb9G0.roa
File:                     WsMEYYUP84oOGNf57nlTJbpb9G0.roa (raw, json)
Hash identifier:          arbhTK0ltDKiuLROzIBKBFvLG0xh2ECpW1ZMvZ9FzhA=
Subject key identifier:   5A:C3:04:61:85:0F:F3:8A:0E:18:D7:F9:EE:79:53:25:BA:5B:F4:6D
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       9B
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WsMEYYUP84oOGNf57nlTJbpb9G0.roa
Signing time:             Fri 24 Oct 2025 10:27:19 +0000
ROA not before:           Fri 24 Oct 2025 10:27:19 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131898
IP address blocks:        219.100.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Nov 2025 22:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Oct 24 10:27:19 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5AC30461850FF38A0E18D7F9EE795325BA5BF46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:2f:ac:77:8f:bd:57:8b:d7:8e:7f:10:0e:
                    0f:5f:5e:4b:48:d1:74:fc:2a:d5:46:84:d9:b8:76:
                    25:46:6b:b3:b3:e2:d2:0a:aa:e9:bb:b5:99:74:8b:
                    a2:79:e9:9f:53:b5:ae:4c:20:69:77:13:79:7a:59:
                    74:06:e8:57:03:14:58:5f:56:73:c5:32:1c:af:92:
                    34:d6:9f:0e:c4:a4:0f:d5:5d:81:96:c0:a2:e6:7e:
                    65:d1:f2:0a:63:8d:3c:64:10:b8:c3:63:35:9b:65:
                    18:00:28:35:9f:a4:27:80:39:fd:b4:26:e4:2c:97:
                    6d:a4:1d:72:f6:9c:03:59:e7:7a:79:ea:4a:47:98:
                    65:8c:75:35:76:1d:72:17:2e:81:8b:c6:f1:d3:3b:
                    5e:ef:e7:9b:6d:84:a6:31:31:98:57:f9:24:78:e6:
                    5c:1f:94:5a:a8:02:74:d0:be:06:89:6c:ff:46:be:
                    09:a5:10:81:41:c3:17:2f:6e:2f:29:75:d0:75:8d:
                    7c:aa:d2:47:7f:3d:db:07:b6:03:0c:f6:13:17:72:
                    d9:1d:95:66:86:d7:02:46:45:74:be:e0:c4:8d:e6:
                    99:7e:ba:a7:fd:e9:8e:ec:d0:85:44:85:4c:b0:f8:
                    05:13:bb:ae:46:b9:25:4a:2d:38:08:1b:cf:43:f7:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C3:04:61:85:0F:F3:8A:0E:18:D7:F9:EE:79:53:25:BA:5B:F4:6D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/WsMEYYUP84oOGNf57nlTJbpb9G0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:b8:54:7e:af:24:d9:68:5d:76:ee:81:4b:e8:8a:d9:ff:
         ae:e3:45:85:3c:bf:25:fc:e4:3d:69:9c:dc:61:c0:72:54:d2:
         bc:8f:22:ea:2a:92:74:2a:3d:7d:dd:22:fb:16:8d:29:16:64:
         57:2a:47:52:9b:a6:dc:c9:92:d6:d9:f3:89:9c:56:69:31:35:
         0a:0e:f5:79:7d:e6:4c:92:7a:4c:f5:b5:d8:a9:dd:62:53:7d:
         70:dc:b6:c8:27:f2:a8:17:d4:7c:18:90:37:ac:ce:95:0f:30:
         16:aa:1c:d4:52:fe:79:a7:7c:62:fe:f9:7f:3a:07:76:cc:37:
         20:1b:a4:a7:90:18:99:6f:b9:a9:97:e3:94:56:cb:f0:15:ee:
         d5:60:eb:d6:ab:f9:fb:f1:cf:87:24:31:55:7c:8f:e2:63:d8:
         c4:58:b8:57:82:20:42:4c:20:9b:ea:7b:35:2d:8b:b6:df:9c:
         79:c9:91:d7:94:97:62:69:f1:70:5e:11:36:7e:42:42:a3:f3:
         77:e2:ef:ad:c2:fa:d2:16:5b:6d:04:83:c3:ac:bb:38:02:35:
         a2:87:6d:09:bf:e7:5a:f8:6e:52:68:e7:d3:a7:70:bc:f3:81:
         69:b8:35:ca:87:bd:4b:c5:9e:a4:5c:ae:9c:68:33:1b:87:b7:
         bc:d8:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 01:29:47 2025 by rpki-client