Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/FuxGLaA94WhfEvoz_O4eFKXg77k.roa
File:                     FuxGLaA94WhfEvoz_O4eFKXg77k.roa (raw, json)
Hash identifier:          y9dHa+dbvX6SMmCbiHozamHBhC78HFFSM+nDuH6u0WQ=
Subject key identifier:   16:EC:46:2D:A0:3D:E1:68:5F:12:FA:33:FC:EE:1E:14:A5:E0:EF:B9
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       87
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/FuxGLaA94WhfEvoz_O4eFKXg77k.roa
Signing time:             Wed 01 Oct 2025 01:34:15 +0000
ROA not before:           Wed 01 Oct 2025 01:34:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7514
IP address blocks:        210.166.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct  1 01:34:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=16EC462DA03DE1685F12FA33FCEE1E14A5E0EFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:38:10:ab:3b:33:e3:42:f2:54:a8:93:c5:
                    00:7b:94:b5:8b:d8:b0:84:0d:63:3f:56:4d:19:43:
                    c5:b0:19:30:38:c3:42:6a:41:6b:38:24:72:35:9b:
                    dc:2d:b2:21:e5:ad:c9:59:fa:76:63:82:13:df:be:
                    d8:24:69:cc:a2:0f:52:07:7d:94:cb:35:98:51:09:
                    f2:5a:50:47:f2:39:58:d7:b9:89:7e:83:d2:c7:3e:
                    a9:ba:4d:d4:07:61:c4:77:ed:c0:b9:01:10:3e:da:
                    a7:66:81:76:e9:00:8b:64:cf:bc:10:cc:f6:1f:36:
                    84:78:ec:e5:69:97:11:f6:36:80:5d:f8:d7:77:99:
                    0a:3d:44:56:38:aa:2f:29:ff:35:ff:3d:06:74:29:
                    e7:0e:14:d8:28:c7:76:69:13:f2:9d:30:db:0f:a7:
                    e4:1a:66:ad:f9:2d:0c:a3:a1:63:a7:cc:4e:24:6b:
                    43:b6:e1:5a:58:f7:c1:07:02:33:66:c2:73:87:ee:
                    8f:69:28:de:fb:f9:1e:cb:eb:89:5d:7f:e9:4d:a0:
                    68:26:da:f2:9b:ec:88:01:07:e0:3c:68:fa:e7:f1:
                    8d:34:b5:68:0b:9e:03:db:ba:cc:48:c5:0b:21:69:
                    e0:38:fe:06:e4:62:37:ca:72:cc:21:a8:74:dc:23:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:46:2D:A0:3D:E1:68:5F:12:FA:33:FC:EE:1E:14:A5:E0:EF:B9
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/FuxGLaA94WhfEvoz_O4eFKXg77k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:54:37:62:44:09:ff:a6:51:f4:3f:b2:eb:06:0a:14:8a:
         9a:ad:50:ae:20:bf:4b:fa:b6:6a:57:20:76:56:a7:fd:2c:03:
         05:b5:2b:91:2f:21:2c:6f:21:e5:00:bd:f4:98:41:4a:83:54:
         f2:24:d4:e9:b4:bf:8a:3b:35:72:2f:ac:04:13:f6:f9:a1:6c:
         f6:e0:06:03:5c:3e:22:e6:20:db:c8:36:18:04:a1:96:bc:3d:
         d8:47:45:95:fa:fb:6d:d4:84:ae:a3:9d:ee:d7:ec:40:95:af:
         74:59:8e:f3:d6:48:a1:5c:e2:21:f0:6e:b7:6d:1c:2b:1a:e2:
         be:34:00:74:f6:bf:40:55:41:61:06:a4:a5:10:43:bd:3a:a5:
         82:b2:42:76:09:3f:43:45:9c:0b:fd:d8:e6:d2:f3:39:5a:88:
         da:fa:0a:91:07:22:a0:33:9b:89:f8:ad:ac:26:78:e1:b4:0a:
         2a:ee:92:44:79:de:18:e7:ae:96:1e:89:33:74:02:77:10:d9:
         cc:81:55:fa:0c:96:55:c3:f6:35:b2:c9:4b:cd:a4:57:1d:e1:
         18:e4:eb:c8:f8:23:6b:57:d0:3e:1a:cf:03:a2:19:34:44:b6:
         c4:9e:3e:b7:f1:cc:71:76:07:69:4b:6b:0a:b5:da:ac:01:88:
         ce:1e:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:05 2025 by rpki-client