Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ScVVxU-xE6R_vVKQk_naovtyt80.roa
File:                     ScVVxU-xE6R_vVKQk_naovtyt80.roa (raw, json)
Hash identifier:          BO9VfeJgPuMSMLLziBPydsFeGu7fBL9l1ofjf32F96w=
Subject key identifier:   49:C5:55:C5:4F:B1:13:A4:7F:BD:52:90:93:F9:DA:A2:FB:72:B7:CD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0489
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ScVVxU-xE6R_vVKQk_naovtyt80.roa
Signing time:             Wed 01 Oct 2025 01:39:55 +0000
ROA not before:           Wed 01 Oct 2025 01:39:55 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:55 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=49C555C54FB113A47FBD529093F9DAA2FB72B7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:f3:2d:4d:b0:7d:a2:99:ae:a0:f7:10:18:
                    54:b1:9f:5f:35:ac:61:8c:a6:7a:ef:30:5a:f4:52:
                    7c:93:2e:fe:9f:ec:6a:0a:a4:68:7b:f5:c8:25:ec:
                    52:98:b2:71:a5:bb:25:62:ff:09:56:39:c2:7a:b5:
                    ad:41:a8:31:99:cc:f9:97:02:bc:e8:3b:3b:15:29:
                    1c:8d:9d:8b:75:aa:42:66:b0:b2:90:8c:f2:11:31:
                    61:b4:e6:3a:07:4a:65:d2:ed:ac:d4:27:64:03:77:
                    fa:65:b5:2d:a8:62:9e:6d:a6:cf:ad:99:1e:30:29:
                    06:2a:a3:f0:be:e0:f7:62:3a:28:fc:e3:9c:49:6f:
                    86:ac:f1:20:09:da:d7:95:27:58:f9:70:55:b2:3a:
                    d1:28:05:26:11:7b:6d:cf:85:97:aa:ce:46:4f:62:
                    b9:8f:97:91:4b:cc:f8:6d:c8:0b:82:37:65:6b:5b:
                    84:38:22:0c:53:af:03:52:9c:21:e0:ba:86:39:98:
                    49:c8:e7:03:8b:47:4f:b3:46:7c:42:a8:6e:8d:98:
                    d1:fe:69:47:7d:a2:83:c6:91:a0:f4:ab:5a:99:81:
                    fe:73:2e:a4:5e:79:80:ec:92:dd:33:dc:fc:44:fd:
                    7f:05:28:2e:71:69:73:76:6f:85:68:d5:fd:76:9b:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C5:55:C5:4F:B1:13:A4:7F:BD:52:90:93:F9:DA:A2:FB:72:B7:CD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ScVVxU-xE6R_vVKQk_naovtyt80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:6a:16:1d:6c:f4:06:eb:24:32:eb:b6:2b:c7:dd:a9:c2:7d:
         b6:6e:e9:9c:4e:44:68:b5:03:c3:65:8a:59:0b:b9:f5:9b:c1:
         77:df:4f:02:f8:d7:e6:1d:88:e0:12:f5:4f:66:0e:ec:69:ad:
         ea:ba:f9:47:fa:bd:ee:44:c3:23:77:49:9b:c8:3c:93:be:e2:
         4c:5c:8b:c3:b1:a7:d7:03:eb:1d:84:c7:5b:48:b3:d8:50:86:
         7c:3b:a0:74:f3:d7:0b:23:b7:b4:83:8c:52:8e:6f:af:dc:c3:
         5f:55:8e:56:af:2a:0e:d6:9e:f8:6d:2a:07:e1:16:cd:8f:3c:
         b3:1c:d8:5b:5f:22:fe:de:cd:46:ab:a2:79:12:27:cd:47:02:
         60:44:6b:c7:b8:bd:bc:a3:9b:fa:f6:43:d7:ae:d0:37:1a:46:
         8a:66:ba:9f:92:8e:da:69:22:36:64:c0:4c:60:1d:7f:c8:5b:
         43:d8:9b:f1:5b:2c:66:09:97:21:0a:13:12:68:74:0a:b2:28:
         b5:4f:f3:6e:30:ea:b5:62:90:ff:59:04:aa:a7:65:a5:9c:1d:
         45:88:da:da:0c:e4:84:13:9f:4b:5c:ba:83:b0:dd:6f:eb:37:
         65:71:03:c7:0e:34:94:3b:07:69:36:a3:7a:32:96:ca:3a:2e:
         2f:2c:ef:7b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw
MTM5NTVaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5QzU1NUM1NEZCMTEz
QTQ3RkJENTI5MDkzRjlEQUEyRkI3MkI3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4W/MtTbB9opmuoPcQGFSxn181rGGMpnrvMFr0UnyTLv6f7GoK
pGh79cgl7FKYsnGluyVi/wlWOcJ6ta1BqDGZzPmXArzoOzsVKRyNnYt1qkJmsLKQ
jPIRMWG05joHSmXS7azUJ2QDd/pltS2oYp5tps+tmR4wKQYqo/C+4PdiOij845xJ
b4as8SAJ2teVJ1j5cFWyOtEoBSYRe23PhZeqzkZPYrmPl5FLzPhtyAuCN2VrW4Q4
IgxTrwNSnCHguoY5mEnI5wOLR0+zRnxCqG6NmNH+aUd9ooPGkaD0q1qZgf5zLqRe
eYDskt0z3PxE/X8FKC5xaXN2b4Vo1f12m2A1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUScVVxU+xE6R/vVKQk/naovtyt80wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1NjVlZ4VS14RTZSX3ZWS1FrX25hb3Z0eXQ4MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC27A0wDQYJKoZIhvcNAQELBQADggEBAIJqFh1s9AbrJDLrtivH3anCfbZu
6ZxORGi1A8NlilkLufWbwXffTwL41+YdiOAS9U9mDuxpreq6+Uf6ve5EwyN3SZvI
PJO+4kxci8Oxp9cD6x2Ex1tIs9hQhnw7oHTz1wsjt7SDjFKOb6/cw19VjlavKg7W
nvhtKgfhFs2PPLMc2FtfIv7ezUaronkSJ81HAmBEa8e4vbyjm/r2Q9eu0DcaRopm
up+SjtppIjZkwExgHX/IW0PYm/FbLGYJlyEKExJodAqyKLVP824w6rVikP9ZBKqn
ZaWcHUWI2toM5IQTn0tcuoOw3W/rN2VxA8cONJQ7B2k2o3oylso6Li8s73s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:19:26 2025 by rpki-client