Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/8-FtJZyc33tyi1ErBmKML8gni4Y.roa
File:                     8-FtJZyc33tyi1ErBmKML8gni4Y.roa (raw, json)
Hash identifier:          snWUMcVXZqnX2l1AhxUWqtbxNa6sWExT9F4UHmliem8=
Subject key identifier:   F3:E1:6D:25:9C:9C:DF:7B:72:8B:51:2B:06:62:8C:2F:C8:27:8B:86
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       86
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/8-FtJZyc33tyi1ErBmKML8gni4Y.roa
Signing time:             Wed 01 Oct 2025 01:34:14 +0000
ROA not before:           Wed 01 Oct 2025 01:34:14 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7514
IP address blocks:        210.155.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct  1 01:34:14 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=F3E16D259C9CDF7B728B512B06628C2FC8278B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:ab:c8:10:39:97:88:60:86:08:fc:3d:8c:
                    61:04:de:dd:d8:a7:c0:d8:4a:00:04:fd:c8:8e:0f:
                    46:94:c3:19:43:07:78:e0:70:42:3c:17:39:0a:7f:
                    75:32:3b:e5:c2:98:59:ec:96:19:6f:16:3c:e2:e1:
                    10:b6:51:c6:ae:1b:75:95:98:d1:6c:22:71:9e:92:
                    b7:78:00:dd:4c:39:f7:76:32:57:8e:70:d2:08:c4:
                    c8:d6:76:c1:9b:a2:7e:c1:4a:5c:ff:e9:f8:15:ea:
                    ee:50:a3:e2:52:36:80:ef:9c:f0:45:c6:09:72:9e:
                    c6:aa:f9:3e:00:6f:89:83:6f:bb:88:b5:00:be:46:
                    1c:9b:6a:5d:f4:69:2f:f3:d7:50:b7:a9:06:b9:ba:
                    86:c8:94:17:14:9d:3b:89:45:29:d8:1f:e4:04:bb:
                    db:10:24:41:1d:66:fb:2a:83:7c:c3:d5:db:b1:99:
                    cb:5e:bf:67:aa:e4:0c:6b:2a:84:f7:24:6a:29:f2:
                    68:c2:8a:8e:df:e1:44:54:c0:b3:d1:42:2b:f1:cd:
                    cb:74:71:99:b0:7b:11:1e:d7:68:ca:a7:9e:5d:cb:
                    eb:b4:6d:b4:3c:63:29:a9:69:17:fc:cd:ab:70:8c:
                    c5:7d:ed:3f:3a:1e:b5:8c:9e:30:0a:f2:d4:38:e4:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:6D:25:9C:9C:DF:7B:72:8B:51:2B:06:62:8C:2F:C8:27:8B:86
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/8-FtJZyc33tyi1ErBmKML8gni4Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:84:53:4b:4e:77:c7:e5:aa:84:36:91:00:8f:69:71:99:1b:
         d1:6b:e4:56:ef:60:16:15:fb:f1:9a:51:63:7e:66:7a:41:fd:
         74:55:55:a0:b6:17:ec:9f:0f:f5:13:f1:ab:0f:6a:4a:de:67:
         fd:fb:7e:01:c3:71:87:ab:4f:14:39:c4:26:a1:55:a3:73:4c:
         6c:0b:17:24:ec:92:3f:fa:c9:0b:d9:6d:32:c8:2c:56:51:84:
         39:13:81:e0:c3:22:4b:c3:7d:aa:6a:64:44:39:80:65:02:2f:
         2a:b1:52:a9:3e:a5:cd:e1:14:c2:c9:11:29:54:d4:5b:42:4d:
         ab:59:5f:61:52:22:06:da:7c:68:5c:f5:4e:86:ac:e3:25:96:
         d5:12:33:48:69:d4:11:f9:91:12:bb:8a:7e:d1:ba:c1:a0:47:
         05:4b:89:ca:3e:d0:16:f8:92:fc:ce:74:9d:31:46:1d:fe:c4:
         c0:fe:b7:1a:77:0a:22:46:91:87:38:6c:d0:e2:71:92:32:69:
         12:e9:9b:5a:da:3d:73:c5:84:d4:49:54:58:d1:d7:ed:5f:81:
         b0:fc:29:08:2f:ea:9e:f0:79:c7:83:b1:98:fe:a3:02:99:b4:
         49:70:af:24:9f:19:ba:a6:c6:01:74:c6:c5:a1:b7:9b:58:50:
         64:5d:d8:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz
OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNTEwMDEw
MTM0MTRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYzRTE2RDI1OUM5Q0RG
N0I3MjhCNTEyQjA2NjI4QzJGQzgyNzhCODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCspavIEDmXiGCGCPw9jGEE3t3Yp8DYSgAE/ciOD0aUwxlDB3jg
cEI8FzkKf3UyO+XCmFnslhlvFjzi4RC2UcauG3WVmNFsInGekrd4AN1MOfd2MleO
cNIIxMjWdsGbon7BSlz/6fgV6u5Qo+JSNoDvnPBFxglynsaq+T4Ab4mDb7uItQC+
Rhybal30aS/z11C3qQa5uobIlBcUnTuJRSnYH+QEu9sQJEEdZvsqg3zD1duxmcte
v2eq5AxrKoT3JGop8mjCio7f4URUwLPRQivxzct0cZmwexEe12jKp55dy+u0bbQ8
YympaRf8zatwjMV97T86HrWMnjAK8tQ45OatAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU8+FtJZyc33tyi1ErBmKML8gni4YwHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu
JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI
TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDc2Mi84LUZ0Slp5YzMzdHlpMUVyQm1LTUw4Z25pNFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQF0puAMA0GCSqGSIb3DQEBCwUAA4IBAQBmhFNLTnfH5aqENpEAj2lx
mRvRa+RW72AWFfvxmlFjfmZ6Qf10VVWgthfsnw/1E/GrD2pK3mf9+34Bw3GHq08U
OcQmoVWjc0xsCxck7JI/+skL2W0yyCxWUYQ5E4HgwyJLw32qamREOYBlAi8qsVKp
PqXN4RTCyREpVNRbQk2rWV9hUiIG2nxoXPVOhqzjJZbVEjNIadQR+ZESu4p+0brB
oEcFS4nKPtAW+JL8znSdMUYd/sTA/rcadwoiRpGHOGzQ4nGSMmkS6Zta2j1zxYTU
SVRY0dftX4Gw/CkIL+qe8HnHg7GY/qMCmbRJcK8knxm6psYBdMbFobebWFBkXdjv
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:08 2025 by rpki-client