Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/RisEaGUszvBitTswSB7Lcpe4jVo.roa
File:                     RisEaGUszvBitTswSB7Lcpe4jVo.roa (raw, json)
Hash identifier:          DbAzC77e7PNiafBYRkhaxAq5FDrvZJyLouY2AH8obA0=
Subject key identifier:   46:2B:04:68:65:2C:CE:F0:62:B5:3B:30:48:1E:CB:72:97:B8:8D:5A
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       B2
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RisEaGUszvBitTswSB7Lcpe4jVo.roa
Signing time:             Wed 01 Oct 2025 01:31:07 +0000
ROA not before:           Wed 01 Oct 2025 01:31:07 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        107.153.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Oct  1 01:31:07 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=462B0468652CCEF062B53B30481ECB7297B88D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:80:ab:58:a1:40:53:b9:f9:bf:3e:89:64:
                    7a:28:38:31:6f:0f:cf:f8:f4:11:9b:04:0a:d7:9c:
                    6e:43:f0:04:68:3d:e1:be:fe:7c:f3:cf:27:98:9e:
                    77:a9:85:cd:94:8c:5e:04:ef:1a:e7:02:a1:03:d8:
                    f1:c6:38:c4:4f:8d:3d:11:1a:1a:22:37:6d:53:67:
                    7d:0b:91:2c:14:6a:f3:20:e5:1c:ec:ad:65:b2:c7:
                    59:e7:7b:4b:04:0a:c9:71:55:7b:f9:98:99:d5:f5:
                    54:42:c4:f1:4e:21:6b:4d:28:bd:d0:3c:65:0a:5e:
                    b4:52:ca:e8:e4:79:77:fa:a9:53:23:bc:41:1b:a0:
                    50:63:1e:6c:0d:42:49:71:96:fd:90:90:ee:2c:54:
                    c4:14:28:8e:2f:4e:a0:2d:43:d3:0e:51:40:ad:7c:
                    6b:9e:5d:0a:4b:bf:ae:37:67:eb:46:48:bd:bb:c9:
                    83:9d:13:db:e1:4b:6c:65:ac:32:17:3b:9d:4f:4b:
                    1d:ce:e8:14:3b:3d:19:c6:74:fa:18:c3:43:ea:c9:
                    7f:f8:9f:70:af:82:bf:e2:33:80:a0:06:00:67:fa:
                    97:31:e4:3c:5d:68:76:de:18:f8:7f:f4:34:39:10:
                    80:f3:a3:37:d5:12:1b:4d:78:9d:d4:9f:41:03:88:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:04:68:65:2C:CE:F0:62:B5:3B:30:48:1E:CB:72:97:B8:8D:5A
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RisEaGUszvBitTswSB7Lcpe4jVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:d8:a8:c8:8b:86:f3:7d:97:6f:36:3d:70:b8:71:f6:8b:c7:
         f8:96:82:c0:87:47:c0:ec:4d:73:ba:4f:af:56:6c:92:90:0a:
         5f:a6:8d:78:e5:21:bb:35:7b:87:c3:10:c2:a4:28:9f:68:0f:
         02:a7:3c:35:e5:e8:6e:e0:5d:fa:09:6d:8e:90:5c:38:ef:97:
         12:12:5c:c7:55:bf:77:69:bc:85:a4:ea:94:34:53:74:9e:c9:
         f0:f7:f4:d1:39:17:6b:ca:dc:61:c1:ff:b8:c5:3a:c0:66:02:
         bb:64:75:1e:ed:53:7e:ca:65:ee:b6:50:9b:31:b9:7e:ee:db:
         07:25:fc:93:4d:3a:e1:ec:77:e4:64:eb:02:60:d7:81:b3:24:
         90:fc:9e:ea:e8:7c:a1:e8:58:e3:e7:57:db:1a:1a:4a:bd:0c:
         22:8f:0e:64:f9:0b:2a:4b:a2:fe:66:de:90:ac:a4:6c:38:04:
         21:4a:22:43:e9:22:7d:46:98:3b:01:58:8f:37:04:6f:f6:9d:
         f4:a8:0b:9a:d1:44:79:18:f1:aa:12:25:6c:1d:3e:30:27:39:
         47:44:0b:cb:71:7e:8c:04:cf:16:31:8d:04:bc:eb:9d:10:69:
         d2:00:47:f4:41:0f:18:f9:ca:94:4f:7d:86:48:44:bc:dd:fa:
         07:97:09:40
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTEwMDEw
MTMxMDdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2MkIwNDY4NjUyQ0NF
RjA2MkI1M0IzMDQ4MUVDQjcyOTdCODhENUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRwICrWKFAU7n5vz6JZHooODFvD8/49BGbBArXnG5D8ARoPeG+
/nzzzyeYnnephc2UjF4E7xrnAqED2PHGOMRPjT0RGhoiN21TZ30LkSwUavMg5Rzs
rWWyx1nne0sECslxVXv5mJnV9VRCxPFOIWtNKL3QPGUKXrRSyujkeXf6qVMjvEEb
oFBjHmwNQklxlv2QkO4sVMQUKI4vTqAtQ9MOUUCtfGueXQpLv643Z+tGSL27yYOd
E9vhS2xlrDIXO51PSx3O6BQ7PRnGdPoYw0PqyX/4n3Cvgr/iM4CgBgBn+pcx5Dxd
aHbeGPh/9DQ5EIDzozfVEhtNeJ3Un0EDiJoxAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQURisEaGUszvBitTswSB7Lcpe4jVowHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS9SaXNFYUdVc3p2Qml0VHN3U0I3TGNwZTRqVm8ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAa5kwDQYJKoZIhvcNAQELBQADggEBAJTYqMiLhvN9l282PXC4cfaLx/iWgsCH
R8DsTXO6T69WbJKQCl+mjXjlIbs1e4fDEMKkKJ9oDwKnPDXl6G7gXfoJbY6QXDjv
lxISXMdVv3dpvIWk6pQ0U3SeyfD39NE5F2vK3GHB/7jFOsBmArtkdR7tU37KZe62
UJsxuX7u2wcl/JNNOuHsd+Rk6wJg14GzJJD8nurofKHoWOPnV9saGkq9DCKPDmT5
CypLov5m3pCspGw4BCFKIkPpIn1GmDsBWI83BG/2nfSoC5rRRHkY8aoSJWwdPjAn
OUdEC8txfowEzxYxjQS8650QadIAR/RBDxj5ypRPfYZIRLzd+geXCUA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:04:33 2025 by rpki-client