Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/KqzQYO7fRmbVLq2NtsolIF-z17c.roa
File:                     KqzQYO7fRmbVLq2NtsolIF-z17c.roa (raw, json)
Hash identifier:          2qiMWyqMjcNgFt45sobdJxV/1Krfzvz9JZG4mo7Qkfg=
Subject key identifier:   2A:AC:D0:60:EE:DF:46:66:D5:2E:AD:8D:B6:CA:25:20:5F:B3:D7:B7
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01B0
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/KqzQYO7fRmbVLq2NtsolIF-z17c.roa
Signing time:             Wed 01 Oct 2025 01:38:35 +0000
ROA not before:           Wed 01 Oct 2025 01:38:35 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        218.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:35 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=2AACD060EEDF4666D52EAD8DB6CA25205FB3D7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:7c:07:70:76:0b:de:b9:b8:bc:55:54:20:
                    1a:93:37:40:3f:30:15:65:ba:f0:1a:89:13:8e:22:
                    e1:42:24:0a:42:85:ec:2c:1f:2e:00:d1:63:7e:f9:
                    38:35:c7:1b:d1:12:15:fc:fd:21:dc:a8:27:f0:e8:
                    21:be:66:bd:3f:3d:ef:9e:78:b0:f6:74:57:66:83:
                    83:95:10:69:38:d8:20:04:fc:25:77:03:2e:79:c4:
                    8b:89:32:3d:c0:23:f8:cc:e7:75:78:a4:47:ea:3c:
                    c3:54:9f:d1:bd:29:9a:fa:be:ab:53:dd:8f:67:d7:
                    28:2f:85:ba:72:a4:d2:78:62:ac:06:07:1f:92:53:
                    59:02:ca:00:bc:cd:ad:38:15:4b:a0:9d:42:1d:82:
                    2b:71:45:2f:11:cc:a0:27:64:ae:bd:ee:15:12:41:
                    6c:bf:26:5f:e6:85:38:d3:40:b7:81:8d:80:f3:05:
                    69:69:c9:18:d4:84:10:e3:1a:8a:dd:43:f2:63:6d:
                    54:14:2b:d7:12:5e:58:d9:00:eb:c8:f3:be:51:d8:
                    20:ae:3b:3b:bc:a6:61:98:a2:03:4f:8d:14:f0:77:
                    7c:82:10:75:b9:55:69:dd:97:bb:ca:6a:ec:fe:8e:
                    c9:89:7a:c9:1f:74:d9:0c:96:75:0c:e8:19:24:fd:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:D0:60:EE:DF:46:66:D5:2E:AD:8D:B6:CA:25:20:5F:B3:D7:B7
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/KqzQYO7fRmbVLq2NtsolIF-z17c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:c8:05:17:15:21:7c:0e:91:eb:57:ef:13:70:4f:95:24:
         09:35:5c:4e:e9:2e:12:ab:e7:11:ba:59:05:10:94:a4:8d:5d:
         f9:97:95:35:44:f4:12:ab:66:a9:5b:85:ee:13:13:d9:bb:6d:
         ff:74:ee:ef:4b:61:0d:70:7b:18:b8:3d:12:af:2e:05:b6:4f:
         75:11:2f:82:fc:ef:cd:21:6b:76:70:2a:7b:ef:47:17:f5:52:
         7e:2d:92:e2:86:77:b1:a1:a6:13:71:8b:48:bd:f6:ea:22:ec:
         c4:da:e4:76:0e:80:99:84:04:c0:e2:8d:8e:16:f4:c0:b9:99:
         6d:04:95:7d:a7:48:38:81:26:c7:9f:21:f7:13:56:a0:f8:b0:
         00:79:10:97:ce:33:66:28:10:dc:02:52:cb:85:ad:66:84:e6:
         a6:f8:1e:49:2a:fd:65:54:cb:ae:02:db:16:ae:37:a6:84:8b:
         52:4f:b6:4d:ff:3f:94:ae:7c:80:c1:23:ee:20:b4:b8:a1:12:
         e2:60:db:c0:7d:f2:9f:a3:1e:51:2a:59:e5:4c:8d:cc:cd:82:
         83:65:56:53:9e:cc:89:00:43:da:e6:12:1f:52:1d:bd:6d:da:
         c1:e1:c4:a0:68:a4:ac:4d:de:d2:16:6a:09:ac:02:b6:b6:bf:
         bb:0c:0a:62
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTEwMDEw
MTM4MzVaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBQUNEMDYwRUVERjQ2
NjZENTJFQUQ4REI2Q0EyNTIwNUZCM0Q3QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAqXwHcHYL3rm4vFVUIBqTN0A/MBVluvAaiROOIuFCJApChews
Hy4A0WN++Tg1xxvREhX8/SHcqCfw6CG+Zr0/Pe+eeLD2dFdmg4OVEGk42CAE/CV3
Ay55xIuJMj3AI/jM53V4pEfqPMNUn9G9KZr6vqtT3Y9n1ygvhbpypNJ4YqwGBx+S
U1kCygC8za04FUugnUIdgitxRS8RzKAnZK697hUSQWy/Jl/mhTjTQLeBjYDzBWlp
yRjUhBDjGordQ/JjbVQUK9cSXljZAOvI875R2CCuOzu8pmGYogNPjRTwd3yCEHW5
VWndl7vKauz+jsmJeskfdNkMlnUM6Bkk/axXAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUKqzQYO7fRmbVLq2NtsolIF+z17cwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9LcXpRWU83ZlJtYlZMcTJOdHNvbElGLXoxN2Mucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA2ikwDQYJKoZIhvcNAQELBQADggEBAG8XyAUXFSF8DpHrV+8TcE+VJAk1XE7p
LhKr5xG6WQUQlKSNXfmXlTVE9BKrZqlbhe4TE9m7bf907u9LYQ1wexi4PRKvLgW2
T3URL4L8780ha3ZwKnvvRxf1Un4tkuKGd7GhphNxi0i99uoi7MTa5HYOgJmEBMDi
jY4W9MC5mW0ElX2nSDiBJsefIfcTVqD4sAB5EJfOM2YoENwCUsuFrWaE5qb4Hkkq
/WVUy64C2xauN6aEi1JPtk3/P5SufIDBI+4gtLihEuJg28B98p+jHlEqWeVMjczN
goNlVlOezIkAQ9rmEh9SHb1t2sHhxKBopKxN3tIWagmsAra2v7sMCmI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:19:49 2025 by rpki-client