Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/cv23H8c22hb43u8pKgiZ_jYkjUI.roa
File:                     cv23H8c22hb43u8pKgiZ_jYkjUI.roa (raw, json)
Hash identifier:          ct1tPmO/G2HUyW9BnBKAE2lNqkyP8NLsFjzu2zgvYBE=
Subject key identifier:   72:FD:B7:1F:C7:36:DA:16:F8:DE:EF:29:2A:08:99:FE:36:24:8D:42
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       98
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/cv23H8c22hb43u8pKgiZ_jYkjUI.roa
Signing time:             Wed 01 Oct 2025 01:28:15 +0000
ROA not before:           Wed 01 Oct 2025 01:28:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     131898
IP address blocks:        219.100.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Oct  1 01:28:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=72FDB71FC736DA16F8DEEF292A0899FE36248D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:17:90:fa:b4:1b:eb:e0:1e:ae:21:04:a3:4a:
                    17:32:10:1a:66:1f:67:40:64:7f:0e:a2:04:d2:71:
                    c6:42:6f:df:98:c8:4e:a8:9d:0d:2c:bc:b8:2c:d9:
                    4f:4b:f5:80:6e:32:8e:ae:bf:68:bb:ce:73:b5:ca:
                    12:34:33:4a:7c:ed:cc:db:c1:29:e3:ed:6a:58:cc:
                    0a:65:1a:e0:4b:1d:68:b8:27:a0:55:6e:0b:99:f7:
                    f7:ba:99:b9:c4:74:19:fa:bd:2d:b1:0d:9f:b3:16:
                    be:e2:0b:d1:42:97:aa:59:9b:08:28:7b:a2:01:2e:
                    83:a2:7d:82:50:74:c4:a0:40:7b:70:73:3f:50:27:
                    06:ef:ff:2b:ee:ed:4f:98:f7:a2:0a:5a:94:c3:f7:
                    f6:52:bd:e6:4e:20:7c:a5:39:fc:64:74:c8:3a:c9:
                    08:9c:13:45:b1:28:7e:74:d3:ce:84:1a:9f:86:7d:
                    a0:2b:1f:91:77:0d:b5:af:37:29:3e:55:e3:7f:80:
                    8c:47:17:99:5c:da:18:89:cf:55:22:78:0f:45:49:
                    45:51:9f:91:e8:c2:48:9a:9b:78:c7:a8:04:f0:c4:
                    cc:57:e5:b6:f4:61:30:7a:2b:10:5f:01:cb:96:b9:
                    20:20:06:5d:2a:8c:3d:87:f6:7a:c4:19:d7:3f:c1:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:B7:1F:C7:36:DA:16:F8:DE:EF:29:2A:08:99:FE:36:24:8D:42
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/cv23H8c22hb43u8pKgiZ_jYkjUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:b8:e0:75:83:8c:2a:e5:53:5d:b7:3e:3e:99:c5:fc:e2:
         e9:df:f4:c8:4f:bf:5d:0c:e0:a9:d7:7c:26:ce:45:8a:8e:e6:
         a7:9c:b1:a5:ef:b6:0f:9d:6c:bf:82:c7:39:55:34:98:e0:cc:
         c0:4d:2f:e5:b6:62:fb:55:7a:60:93:20:19:bd:db:a5:e4:70:
         3e:ed:59:39:5c:f2:30:de:bb:9c:0d:9f:87:8f:19:97:04:50:
         45:0a:14:86:e7:06:7b:bb:c5:4f:f1:42:93:23:57:de:50:fc:
         8b:47:af:6c:e1:fd:62:d1:16:0e:6f:1c:1e:12:a6:9f:22:6d:
         87:17:e4:d2:57:59:d6:ca:e1:39:ad:1a:66:3d:cd:92:1a:da:
         61:f2:a7:b1:d1:1e:19:6b:42:7f:0e:76:77:c4:98:12:c2:49:
         49:6e:24:a3:4b:1c:5d:59:fe:cb:5b:87:82:43:ea:d9:1f:4a:
         af:f3:1a:55:3e:98:27:ca:ea:81:17:c1:82:41:ad:e6:cc:ef:
         28:cc:e6:b3:9d:7c:a2:ae:ad:74:c7:ba:8c:a1:6d:6b:d2:1b:
         dd:4a:cf:cd:42:a8:85:be:18:d9:24:8b:71:5d:53:66:06:e9:
         93:56:e7:58:fb:6a:b4:31:fd:db:d8:48:40:63:15:54:19:53:
         14:0c:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:17:01 2025 by rpki-client