Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W-E-RE1kW9xtWaAw5VLdNOl_ogM.roa
File:                     W-E-RE1kW9xtWaAw5VLdNOl_ogM.roa (raw, json)
Hash identifier:          alzCUj2VVUit+5t4ptmvtkMS2feTecDCgi9wQPlA/gY=
Subject key identifier:   5B:E1:3E:44:4D:64:5B:DC:6D:59:A0:30:E5:52:DD:34:E9:7F:A2:03
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       8A
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W-E-RE1kW9xtWaAw5VLdNOl_ogM.roa
Signing time:             Wed 01 Oct 2025 01:34:16 +0000
ROA not before:           Wed 01 Oct 2025 01:34:16 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7514
IP address blocks:        218.216.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct  1 01:34:16 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5BE13E444D645BDC6D59A030E552DD34E97FA203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:4c:6b:65:08:a7:56:48:5e:14:fb:14:e6:
                    da:41:b5:9b:21:5f:85:a2:7a:f4:cc:c3:5b:a1:26:
                    80:f4:67:03:bb:1e:27:f9:41:3d:03:8c:46:13:c3:
                    c9:33:f6:31:34:c0:22:a3:13:56:dd:a8:74:f3:1f:
                    20:61:4c:05:6d:37:8e:9e:4b:29:25:a2:d9:2e:ed:
                    23:ec:ca:e8:57:98:d6:a8:86:15:99:a5:46:71:b8:
                    c2:48:1c:d7:fb:42:59:db:75:fb:48:3c:79:c1:78:
                    f3:2e:c7:54:fa:e2:1a:f4:f0:62:96:33:09:dd:02:
                    4e:ac:e9:d7:79:5e:da:55:f5:9f:31:aa:6a:89:b6:
                    e7:0a:94:a6:92:9c:b1:aa:67:65:cd:56:3e:1e:f9:
                    8e:d9:49:aa:a7:52:fe:13:e5:47:c1:50:30:06:df:
                    ea:8f:72:6e:40:34:a3:58:ab:d8:53:68:24:c0:ce:
                    66:30:9a:fe:f9:34:0a:67:c1:b1:d3:0f:9b:8b:d1:
                    77:a3:cb:2e:db:b0:45:2a:d9:c1:a1:0c:7d:0e:82:
                    1c:55:9b:63:61:52:2a:e4:93:5a:e8:59:42:7a:96:
                    12:c8:f7:7b:25:cc:b2:dc:33:da:0b:38:fb:7c:68:
                    3f:ab:80:a1:4d:0d:7a:fe:cd:c0:2a:3c:22:d9:48:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E1:3E:44:4D:64:5B:DC:6D:59:A0:30:E5:52:DD:34:E9:7F:A2:03
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/W-E-RE1kW9xtWaAw5VLdNOl_ogM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:19:68:44:90:75:03:58:da:25:22:54:d1:a6:f4:c7:46:
         a6:c7:e0:56:90:d9:ec:95:a1:f7:fa:ff:58:3c:e0:39:6e:7e:
         29:9f:58:ed:21:ba:db:b1:a4:ed:3b:b8:ed:f6:fb:d5:a2:c2:
         d8:bf:6d:e3:84:f7:a8:c5:ff:fd:6a:7b:21:0e:4e:75:04:f4:
         cc:63:91:d4:7d:94:16:b2:06:00:c6:23:b7:ca:77:74:4d:f5:
         bf:ca:3f:5d:5d:f0:8f:c4:b0:8f:fe:44:00:54:33:22:fd:7a:
         1a:b7:d0:93:01:32:ec:7f:dc:18:bc:a8:73:49:f1:08:ec:68:
         ba:1c:db:c7:30:fa:4b:50:fb:68:92:19:43:8d:0d:b5:15:06:
         7d:84:30:05:91:a0:50:75:f1:83:55:4a:68:f6:dc:70:75:8b:
         3b:45:b9:1c:a8:97:3d:13:f6:b4:4a:92:36:23:7f:2e:7a:3f:
         53:87:df:b6:d9:47:51:a6:ea:47:d9:b4:75:44:81:f9:25:ca:
         fd:7e:26:39:f9:c5:92:ac:2f:34:8a:b6:59:57:23:dd:b2:36:
         ca:2c:f2:9a:32:f1:49:64:62:ae:ba:43:68:4c:8e:6c:57:6c:
         c6:f8:6d:87:26:af:8e:05:b6:30:72:0c:f5:72:94:c1:4b:68:
         a5:30:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:13 2025 by rpki-client