Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AnowDGAW3QlTWkO5t0IGZGEXf5A.roa
File:                     AnowDGAW3QlTWkO5t0IGZGEXf5A.roa (raw, json)
Hash identifier:          nUVng4wo5pXJ91FVcj2N6jM5HEiRHXvTYW/MQ0fue0M=
Subject key identifier:   02:7A:30:0C:60:16:DD:09:53:5A:43:B9:B7:42:06:64:61:17:7F:90
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       DE
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AnowDGAW3QlTWkO5t0IGZGEXf5A.roa
Signing time:             Wed 01 Oct 2025 01:28:10 +0000
ROA not before:           Wed 01 Oct 2025 01:28:10 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     55888
IP address blocks:        202.47.27.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Oct  1 01:28:10 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=027A300C6016DD09535A43B9B742066461177F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:ee:f1:7d:f4:dd:47:d1:ff:9e:e0:3b:1c:
                    d6:30:c3:ba:af:1f:d4:fd:8b:b4:95:99:9a:af:54:
                    cb:ce:1f:8a:e9:df:98:60:4c:c7:93:ed:3e:69:93:
                    b2:ec:35:ff:b9:e2:35:77:ac:c0:17:20:df:66:b4:
                    c5:ba:0c:de:ed:c1:47:99:a2:03:c7:f6:37:97:d3:
                    d4:18:aa:7b:56:e3:a3:f4:b7:5c:98:03:13:a3:72:
                    46:5e:38:cc:a7:07:a1:19:1b:ce:9d:43:66:20:81:
                    53:59:3c:69:27:98:12:46:23:24:8e:69:79:48:56:
                    08:b6:05:72:ca:66:5a:ad:2e:d4:e4:01:51:b6:65:
                    53:ce:30:b8:53:9f:fa:fc:9f:ad:51:01:0f:91:75:
                    58:12:ba:13:f0:d5:59:84:7a:76:44:6e:af:89:db:
                    90:1b:90:cc:3c:0c:0b:9e:75:ec:99:d2:57:43:0f:
                    af:c2:68:c2:c0:8d:27:4b:73:d2:57:e4:e1:78:d3:
                    9c:30:72:bc:2a:21:1b:70:27:58:fe:0d:57:6c:9a:
                    c1:a9:93:80:9a:da:45:71:12:e6:f4:13:47:9a:09:
                    93:92:a3:63:2a:9a:b7:54:a7:50:e1:3c:de:57:ff:
                    54:fe:f2:51:a9:8f:eb:d7:a7:a3:e5:e7:89:e4:45:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:30:0C:60:16:DD:09:53:5A:43:B9:B7:42:06:64:61:17:7F:90
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/AnowDGAW3QlTWkO5t0IGZGEXf5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.27.64/26

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:cd:e2:39:52:a8:0b:7c:dd:10:65:15:b9:b7:fb:f7:91:
         07:6a:46:6c:f2:0e:27:ed:f3:6f:66:85:dd:79:08:87:e1:69:
         94:6a:f4:1a:71:28:cd:8e:ec:b8:e8:90:8a:ec:d5:19:0b:18:
         4c:6d:a1:5a:fe:e6:7a:1b:70:4a:18:69:2f:44:aa:f4:05:67:
         59:ab:ca:e0:7f:36:f8:14:2d:71:15:04:98:ce:79:3c:50:93:
         b0:0c:55:c8:a5:19:6a:07:f7:d3:df:79:1c:60:eb:84:60:66:
         0f:80:c3:36:26:f8:c3:db:b8:22:10:ed:7f:8d:e7:eb:84:d9:
         aa:1d:5a:44:3d:96:8a:76:89:0f:74:80:29:a3:aa:1e:4d:8c:
         bc:95:14:11:43:21:9d:1b:69:08:dc:86:2f:e4:b6:b5:6a:6e:
         db:9b:f5:60:39:23:b0:f8:b4:09:34:c7:99:6f:a2:6c:01:b0:
         b0:a6:36:8d:55:89:0e:3b:77:62:d2:28:ac:7c:26:98:5a:e2:
         6f:fa:92:22:6f:89:7c:5e:02:ae:10:4a:48:47:6d:ae:02:97:
         5c:64:ee:48:18:75:53:ff:19:fb:41:fb:63:04:34:54:a2:a6:
         7c:cf:d0:54:9a:d0:0d:d7:9a:d6:b4:1f:9e:52:d3:35:e3:20:
         05:fb:dc:ed
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMDEw
MTI4MTBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyN0EzMDBDNjAxNkRE
MDk1MzVBNDNCOUI3NDIwNjY0NjExNzdGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnZ+7xffTdR9H/nuA7HNYww7qvH9T9i7SVmZqvVMvOH4rp35hg
TMeT7T5pk7LsNf+54jV3rMAXIN9mtMW6DN7twUeZogPH9jeX09QYqntW46P0t1yY
AxOjckZeOMynB6EZG86dQ2YggVNZPGknmBJGIySOaXlIVgi2BXLKZlqtLtTkAVG2
ZVPOMLhTn/r8n61RAQ+RdVgSuhPw1VmEenZEbq+J25AbkMw8DAuedeyZ0ldDD6/C
aMLAjSdLc9JX5OF405wwcrwqIRtwJ1j+DVdsmsGpk4Ca2kVxEub0E0eaCZOSo2Mq
mrdUp1DhPN5X/1T+8lGpj+vXp6Pl54nkRRO3AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUAnowDGAW3QlTWkO5t0IGZGEXf5AwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9Bbm93REdBVzNRbFRXa081dDBJR1pHRVhmNUEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUGyi8bQDANBgkqhkiG9w0BAQsFAAOCAQEAClDN4jlSqAt83RBlFbm3
+/eRB2pGbPIOJ+3zb2aF3XkIh+FplGr0GnEozY7suOiQiuzVGQsYTG2hWv7mehtw
ShhpL0Sq9AVnWavK4H82+BQtcRUEmM55PFCTsAxVyKUZagf30995HGDrhGBmD4DD
Nib4w9u4IhDtf43n64TZqh1aRD2WinaJD3SAKaOqHk2MvJUUEUMhnRtpCNyGL+S2
tWpu25v1YDkjsPi0CTTHmW+ibAGwsKY2jVWJDjt3YtIorHwmmFrib/qSIm+JfF4C
rhBKSEdtrgKXXGTuSBh1U/8Z+0H7YwQ0VKKmfM/QVJrQDdea1rQfnlLTNeMgBfvc
7Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:42:43 2025 by rpki-client