Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wpHFiaZU3yAnGwSzlFBbEetCKAI.roa
File:                     wpHFiaZU3yAnGwSzlFBbEetCKAI.roa (raw, json)
Hash identifier:          /MtiNdpKbgKv3ViO5uyjh3Ukn7rGinSK0C0f5RZ2IA4=
Subject key identifier:   C2:91:C5:89:A6:54:DF:20:27:1B:04:B3:94:50:5B:11:EB:42:28:02
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0467
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wpHFiaZU3yAnGwSzlFBbEetCKAI.roa
Signing time:             Wed 01 Oct 2025 01:34:44 +0000
ROA not before:           Wed 01 Oct 2025 01:34:44 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        61.87.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:44 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C291C589A654DF20271B04B394505B11EB422802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:47:2a:38:c0:f9:a8:cd:0c:af:19:ed:80:
                    c3:d1:c9:4b:7d:9c:19:61:b5:25:be:0b:74:fc:da:
                    e6:69:0e:c2:86:b3:f3:58:cb:ba:6a:b6:b5:e1:d8:
                    89:02:9a:20:1a:d4:df:60:1c:29:b5:8c:dc:43:09:
                    d4:e1:fc:32:d6:b0:12:28:0a:b3:df:f3:02:d1:d1:
                    e0:35:ea:ed:62:f9:ad:bd:1c:28:20:46:5a:ea:7c:
                    2b:1a:02:a8:55:50:05:a6:9b:96:e3:5f:0b:64:df:
                    e9:3a:2d:3b:b7:03:08:4e:92:09:13:37:2b:84:d2:
                    93:1c:ba:14:35:b3:51:34:f6:ef:e4:ba:ec:5b:35:
                    29:eb:e4:33:93:54:fb:16:e7:da:42:30:2f:6c:6f:
                    ff:65:c8:58:4b:f9:e8:10:c2:1a:10:07:94:26:28:
                    8e:e0:fd:26:c6:aa:1d:1e:a3:e8:f6:2a:2a:0c:e4:
                    f7:dc:5c:4b:84:1c:ed:9f:b8:c9:25:b4:79:4e:29:
                    58:a9:39:91:fe:d4:dd:28:e2:73:49:ea:e8:ae:01:
                    db:f1:91:5f:65:ff:ef:f4:3d:3b:4e:94:7a:c0:7e:
                    f1:ed:0d:da:13:be:20:a7:7f:95:b2:dd:80:64:70:
                    da:a6:f6:f0:bc:3a:2d:80:6f:99:37:a9:62:2a:3f:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:C5:89:A6:54:DF:20:27:1B:04:B3:94:50:5B:11:EB:42:28:02
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wpHFiaZU3yAnGwSzlFBbEetCKAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:9a:04:e3:d4:fc:54:e3:c6:50:22:24:a3:ff:0f:16:2a:
         2f:99:1e:38:71:19:f8:18:c1:89:69:46:b4:58:82:49:2e:71:
         81:76:35:a2:cc:0b:dd:48:66:76:16:87:c3:37:6b:b0:b4:f7:
         e1:4c:07:fd:da:46:6d:72:d6:ca:f9:40:90:22:3d:93:a6:9d:
         8e:a7:a3:c9:f9:cd:a4:ed:d2:77:8e:22:03:18:f0:c4:b6:d6:
         b4:0a:3c:a8:95:4b:f9:f1:24:8a:dc:ec:80:8f:bf:23:78:ec:
         8e:e5:9a:1e:f2:0e:ea:f2:c5:e9:21:c8:4a:80:74:c5:4b:67:
         f3:5f:b5:88:6f:a2:fd:78:f7:9a:91:fc:45:69:0e:54:9f:76:
         aa:52:88:f3:d3:a3:de:99:1a:e1:fd:a8:e8:64:a3:88:80:9c:
         06:e1:ea:bd:ad:ab:db:34:01:0f:da:3f:db:ac:98:f8:2c:12:
         e9:1b:8d:44:9d:a7:e4:ac:85:4d:7f:7c:1e:ed:ae:78:45:ca:
         74:5c:32:2b:05:48:16:35:20:ce:d5:b1:e1:2b:b6:c0:52:0b:
         ab:35:56:c1:82:0f:8c:ba:1e:8c:ee:08:16:3d:e7:71:aa:e9:
         8e:e7:1b:a9:7b:64:e0:ed:01:bf:1d:ff:40:f7:16:45:02:c2:
         32:cc:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:19:55 2025 by rpki-client