Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
File:                     Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa (raw, json)
Hash identifier:          aTlsM+FXDB7BRb4/IBs28eXQvyQY5gJlVAa+nY6sz6c=
Subject key identifier:   56:FE:58:DF:12:BD:30:84:4C:8D:FB:4A:C4:B4:57:EA:14:7B:9E:43
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       25
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
Signing time:             Wed 01 Oct 2025 01:29:11 +0000
ROA not before:           Wed 01 Oct 2025 01:29:11 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        125.2.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Oct  1 01:29:11 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=56FE58DF12BD30844C8DFB4AC4B457EA147B9E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:d4:7c:5f:1c:a4:8e:53:57:71:aa:67:ce:
                    ca:42:8a:c4:57:d6:52:49:7e:39:62:b9:f2:aa:40:
                    7c:ad:2c:3a:dc:54:da:24:46:fe:15:6a:40:5a:a3:
                    2f:df:d0:ce:c4:21:d0:f0:24:7c:cc:14:c6:b6:9a:
                    d0:2c:77:7c:25:7f:6e:6d:f0:31:8c:a3:06:72:1c:
                    f9:ab:01:01:13:c0:f3:87:5e:29:a0:2e:63:67:02:
                    fd:b0:ab:f8:d8:15:cb:60:3a:ba:17:66:51:e4:58:
                    11:89:cc:18:9a:dd:40:c0:68:3f:40:86:73:7f:d4:
                    d8:1a:79:1f:8f:54:e5:65:38:d9:9d:92:3a:80:ee:
                    c3:1b:13:9d:e9:99:de:8e:52:11:5d:30:1c:42:7b:
                    94:78:ba:2e:7b:c1:c2:66:26:d3:d3:32:a7:e7:93:
                    b3:b3:aa:66:6f:d6:47:50:76:71:02:21:ea:98:f4:
                    68:85:29:97:9a:86:80:aa:a7:9f:00:a8:48:fd:21:
                    b9:a1:b2:c1:4d:3a:60:c2:07:fe:40:5c:1d:f1:68:
                    a8:d0:67:cf:4b:69:b7:0b:e0:27:19:c3:75:cc:da:
                    b9:77:79:f4:2d:f9:f6:41:e0:17:d8:b1:33:d9:37:
                    6f:8a:d2:1c:5c:91:79:dd:ac:9f:d2:02:db:f1:bb:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FE:58:DF:12:BD:30:84:4C:8D:FB:4A:C4:B4:57:EA:14:7B:9E:43
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Vv5Y3xK9MIRMjftKxLRX6hR7nkM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:58:90:d5:61:f9:a0:b5:f9:4a:dd:f6:35:6b:29:82:9e:92:
         04:f4:73:d3:ff:0e:e0:4b:a1:85:b5:ff:ce:b1:54:b0:1e:1a:
         19:51:8f:b9:ce:9b:55:ed:91:9f:f4:2c:2f:39:d4:0b:a1:25:
         af:d1:da:db:82:e5:cb:b5:08:ad:e1:0e:d1:45:00:c2:e6:ae:
         c0:4f:e2:cb:34:2b:a2:ff:80:46:74:f1:0d:ad:d4:5f:8d:a9:
         72:27:43:c3:37:4c:1c:ad:33:6c:e7:0b:56:15:59:5d:d3:2d:
         a2:05:a0:9e:3d:8c:e1:c4:7a:2e:be:c5:32:32:ab:84:78:52:
         ed:dc:3d:c9:90:24:75:b4:a4:cf:c4:66:80:c5:f1:95:3e:5c:
         86:47:9f:79:ed:ea:62:d3:74:ae:ab:1d:cb:63:e5:b8:00:e0:
         f1:75:49:44:21:85:8d:04:e8:1d:cf:72:f6:72:93:41:5d:de:
         74:96:3e:46:32:78:73:4c:4e:d8:59:a7:d2:17:60:6e:e5:f4:
         09:b6:9e:9f:dc:db:e5:53:15:bd:db:53:35:00:d6:33:7a:c3:
         2c:c1:ec:9a:23:84:49:42:d7:2e:56:a6:87:c5:f5:fd:76:b9:
         ed:b6:32:fa:46:91:98:1e:f7:d4:51:20:11:a1:b3:3f:04:3d:
         f1:30:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:37:49 2025 by rpki-client