Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
File:                     0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa (raw, json)
Hash identifier:          RJ+FVY0BEmzxO6/i0X8eIV7USCi5xuOnAYVgsTOe0MY=
Subject key identifier:   D0:46:FD:15:79:B6:16:4F:B7:1F:9B:6D:99:B7:B7:3C:EA:05:81:20
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       B1
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
Signing time:             Wed 01 Oct 2025 01:38:38 +0000
ROA not before:           Wed 01 Oct 2025 01:38:38 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        131.213.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct  1 01:38:38 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D046FD1579B6164FB71F9B6D99B7B73CEA058120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:39:41:cd:a0:92:e0:a1:42:0c:dc:7f:f6:
                    9c:e0:9e:f2:61:df:4a:44:02:00:0e:94:c4:d8:bf:
                    ed:de:42:30:2b:bb:88:8c:3e:cd:b8:fc:c9:2c:17:
                    d7:04:9e:ea:c9:5d:99:45:6d:31:2a:3f:9d:d2:00:
                    d4:e7:3b:ef:8f:74:5c:76:43:6b:41:e0:e2:27:83:
                    95:73:ac:c9:8b:90:a5:62:e1:b5:cb:03:5a:57:27:
                    d5:17:89:83:d4:4a:8c:81:35:f8:b8:e7:16:c8:5d:
                    5c:53:6d:80:59:b8:6a:d7:64:92:a7:c1:cf:0f:3b:
                    df:b2:f7:67:7f:8d:37:61:c0:1e:ac:7b:7d:fe:3b:
                    1a:e9:a4:3f:21:23:45:41:a1:ea:5a:ec:21:e2:39:
                    ff:3b:98:98:26:59:21:32:27:ce:a4:1d:86:86:8f:
                    dd:ed:fb:54:c0:d6:7e:80:42:0f:20:83:91:ff:43:
                    6a:a7:71:c7:3e:0d:0c:58:3c:09:65:b0:9f:3a:53:
                    69:f5:eb:d4:c6:eb:bc:aa:4d:84:73:2b:f8:5d:24:
                    00:43:38:83:22:a5:71:8e:dd:ee:66:98:ef:ba:2e:
                    a5:13:85:c7:cd:4c:61:bf:ef:fd:e9:5d:eb:84:7d:
                    79:a9:b6:e4:4a:3a:37:8a:6a:1a:1c:db:33:48:20:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:FD:15:79:B6:16:4F:B7:1F:9B:6D:99:B7:B7:3C:EA:05:81:20
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0Eb9FXm2Fk-3H5ttmbe3POoFgSA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:69:1d:a0:ca:0c:3d:11:d7:e3:db:63:60:bf:bc:5b:a8:
         38:00:16:9e:d2:f3:6a:5b:7f:54:bc:da:b5:fb:ef:f0:f4:07:
         f0:fe:f5:75:42:35:9f:2c:ac:a1:93:03:25:34:9c:6b:9c:df:
         fe:e1:29:f3:00:96:51:2f:e3:01:e9:5c:3f:1c:44:ab:ed:ea:
         92:12:bd:2b:3a:b1:09:87:41:50:e5:4f:c4:78:9f:db:f3:aa:
         a7:44:e5:01:6f:da:16:54:3a:8e:23:12:39:07:92:ad:06:0a:
         40:67:47:e3:cb:0b:36:88:fb:ec:af:46:56:90:91:d1:7a:98:
         82:4c:70:14:45:be:f5:e6:4e:e1:31:57:fb:b8:0a:6a:6e:a9:
         9c:8a:45:5e:ba:00:c3:ff:7a:68:5e:6a:17:82:bc:13:45:91:
         9e:f7:74:e0:dc:08:c5:c7:d5:d7:70:e9:15:91:eb:2b:19:1c:
         a7:42:ac:ca:51:7a:6d:fe:41:83:d7:77:bb:0a:cd:24:e4:57:
         a3:c9:f0:a4:6f:be:00:d5:08:48:f4:99:a2:f0:8b:0c:42:e4:
         de:f6:b4:6b:6d:1a:f2:c0:45:2b:4e:f2:2b:c5:5d:b5:7b:04:
         6f:0c:32:49:13:6c:f7:ac:41:fb:70:0b:0e:80:75:89:44:a0:
         11:64:13:a2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw
MTM4MzhaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwNDZGRDE1NzlCNjE2
NEZCNzFGOUI2RDk5QjdCNzNDRUEwNTgxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQColzlBzaCS4KFCDNx/9pzgnvJh30pEAgAOlMTYv+3eQjAru4iM
Ps24/MksF9cEnurJXZlFbTEqP53SANTnO++PdFx2Q2tB4OIng5VzrMmLkKVi4bXL
A1pXJ9UXiYPUSoyBNfi45xbIXVxTbYBZuGrXZJKnwc8PO9+y92d/jTdhwB6se33+
OxrppD8hI0VBoepa7CHiOf87mJgmWSEyJ86kHYaGj93t+1TA1n6AQg8gg5H/Q2qn
ccc+DQxYPAllsJ86U2n169TG67yqTYRzK/hdJABDOIMipXGO3e5mmO+6LqUThcfN
TGG/7/3pXeuEfXmptuRKOjeKahoc2zNIIPL3AgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQU0Eb9FXm2Fk+3H5ttmbe3POoFgSAwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My8wRWI5RlhtMkZrLTNINXR0bWJlM1BPb0ZnU0Eucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAg9UwDQYJKoZIhvcNAQELBQADggEBAHyMaR2gygw9Edfj22Ngv7xbqDgAFp7S
82pbf1S82rX77/D0B/D+9XVCNZ8srKGTAyU0nGuc3/7hKfMAllEv4wHpXD8cRKvt
6pISvSs6sQmHQVDlT8R4n9vzqqdE5QFv2hZUOo4jEjkHkq0GCkBnR+PLCzaI++yv
RlaQkdF6mIJMcBRFvvXmTuExV/u4CmpuqZyKRV66AMP/emheaheCvBNFkZ73dODc
CMXH1ddw6RWR6ysZHKdCrMpRem3+QYPXd7sKzSTkV6PJ8KRvvgDVCEj0maLwiwxC
5N72tGttGvLARStO8ivFXbV7BG8MMkkTbPesQftwCw6AdYlEoBFkE6I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:26:23 2025 by rpki-client