Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5B8MdI_b9Y_iylU2jL_xvXOi--c.roa
File:                     5B8MdI_b9Y_iylU2jL_xvXOi--c.roa (raw, json)
Hash identifier:          fJuwrgItxwXXhFiyUtB7V8qmamlBaGxJipQkcwPp2Nk=
Subject key identifier:   E4:1F:0C:74:8F:DB:F5:8F:E2:CA:55:36:8C:BF:F1:BD:73:A2:FB:E7
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       019A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5B8MdI_b9Y_iylU2jL_xvXOi--c.roa
Signing time:             Wed 01 Oct 2025 01:33:52 +0000
ROA not before:           Wed 01 Oct 2025 01:33:52 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        219.111.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:52 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=E41F0C748FDBF58FE2CA55368CBFF1BD73A2FBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:76:09:c6:41:e8:f4:5c:f1:93:d1:1f:e1:
                    4a:d0:46:96:91:db:a9:a4:dd:b3:ec:e8:e1:76:58:
                    66:6c:39:a2:57:fd:ec:80:a7:a8:1f:1b:fb:98:f3:
                    9e:9f:46:37:1e:e3:19:91:13:ac:63:2b:5c:ed:3b:
                    df:9a:f5:23:49:60:7c:ed:9d:61:90:d7:b0:35:e1:
                    88:6b:94:3c:3f:c2:2e:f8:98:6e:48:c2:46:fe:c3:
                    07:fe:5f:9a:fc:ab:12:c5:36:55:35:91:e4:85:e1:
                    7b:8c:1e:3f:7b:f5:c6:08:f6:e6:84:66:af:ad:2d:
                    44:90:fa:f3:cb:48:85:44:db:ee:ad:33:98:a2:81:
                    3a:04:1a:a2:7b:fe:67:2e:2f:d6:c5:c0:80:46:63:
                    b3:01:0f:a9:8d:9d:a4:d1:41:bc:9c:58:10:7e:9a:
                    8b:ce:35:99:03:01:fb:af:8a:a6:f7:b2:c8:8b:89:
                    c3:6c:22:03:58:74:46:77:dc:35:b3:51:3f:e7:c4:
                    53:9a:af:c7:1b:65:6f:bc:ab:2f:7e:c5:ac:fd:86:
                    86:e5:cc:f0:4c:28:f2:de:4a:f5:52:88:1c:40:cc:
                    6d:97:60:b0:77:72:7d:d4:cd:0d:a1:29:ac:c7:9d:
                    aa:26:3b:92:45:27:a2:2f:dc:99:f6:b5:47:87:07:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1F:0C:74:8F:DB:F5:8F:E2:CA:55:36:8C:BF:F1:BD:73:A2:FB:E7
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5B8MdI_b9Y_iylU2jL_xvXOi--c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:71:98:56:9a:2c:52:b9:23:2f:32:17:4d:28:d4:07:61:88:
         bf:76:88:9b:0c:fb:e7:70:18:73:16:87:cc:2e:b7:a1:f9:ae:
         1b:6f:43:7d:ea:7e:45:a7:50:14:7c:5f:9e:d4:94:e1:cf:03:
         ff:f6:9f:e6:91:14:c7:37:0d:3b:8a:c1:34:76:0e:7a:46:41:
         fb:9e:c1:64:ff:32:de:48:8e:bf:1d:a0:42:1d:b8:29:68:38:
         d7:d9:6a:18:34:02:a7:a7:20:96:4a:5f:86:f9:5f:74:03:0e:
         0c:8b:d6:13:ba:22:72:00:f4:f5:d5:c1:b6:1d:16:f6:a0:a4:
         31:99:a2:01:54:2c:6c:ac:a7:ed:1b:00:f1:4d:a2:b7:16:fd:
         86:8c:3a:e2:7c:c8:b8:d0:d7:cd:23:2d:d5:8a:68:5a:25:0d:
         96:13:5c:cc:38:f6:ab:1b:f8:af:a7:aa:d4:b3:af:7c:d1:36:
         3c:a1:6a:e0:2d:b5:13:2a:02:55:b9:b0:d2:e0:fc:f6:c4:ef:
         33:0e:84:db:10:15:73:da:60:17:f2:9f:c3:47:37:06:e4:b3:
         15:e3:b4:0a:a3:ef:e1:7e:75:11:fa:f8:2f:2e:8b:a3:93:19:
         fd:88:bb:08:9b:9b:44:34:64:76:77:2a:d4:c7:dc:9c:78:b7:
         a5:f9:9d:7f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTEwMDEw
MTMzNTJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU0MUYwQzc0OEZEQkY1
OEZFMkNBNTUzNjhDQkZGMUJENzNBMkZCRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCTnYJxkHo9Fzxk9Ef4UrQRpaR26mk3bPs6OF2WGZsOaJX/eyA
p6gfG/uY856fRjce4xmRE6xjK1ztO9+a9SNJYHztnWGQ17A14YhrlDw/wi74mG5I
wkb+wwf+X5r8qxLFNlU1keSF4XuMHj979cYI9uaEZq+tLUSQ+vPLSIVE2+6tM5ii
gToEGqJ7/mcuL9bFwIBGY7MBD6mNnaTRQbycWBB+movONZkDAfuviqb3ssiLicNs
IgNYdEZ33DWzUT/nxFOar8cbZW+8qy9+xaz9hoblzPBMKPLeSvVSiBxAzG2XYLB3
cn3UzQ2hKazHnaomO5JFJ6Iv3Jn2tUeHBy4XAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU5B8MdI/b9Y/iylU2jL/xvXOi++cwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My81QjhNZElfYjlZX2l5bFUyakxfeHZYT2ktLWMucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQG22+AMA0GCSqGSIb3DQEBCwUAA4IBAQAhcZhWmixSuSMvMhdNKNQHYYi/doib
DPvncBhzFofMLreh+a4bb0N96n5Fp1AUfF+e1JThzwP/9p/mkRTHNw07isE0dg56
RkH7nsFk/zLeSI6/HaBCHbgpaDjX2WoYNAKnpyCWSl+G+V90Aw4Mi9YTuiJyAPT1
1cG2HRb2oKQxmaIBVCxsrKftGwDxTaK3Fv2GjDrifMi40NfNIy3VimhaJQ2WE1zM
OParG/ivp6rUs6980TY8oWrgLbUTKgJVubDS4Pz2xO8zDoTbEBVz2mAX8p/DRzcG
5LMV47QKo+/hfnUR+vgvLoujkxn9iLsIm5tENGR2dyrUx9yceLel+Z1/
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:04 2025 by rpki-client