Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/RqoaMqYTDGQHrVLwzn5HS2uXLI4.roa
File:                     RqoaMqYTDGQHrVLwzn5HS2uXLI4.roa (raw, json)
Hash identifier:          xJHqAeKZQ3AjBbor/NT3TEI4TklZlouDDwhl113hFPs=
Subject key identifier:   46:AA:1A:32:A6:13:0C:64:07:AD:52:F0:CE:7E:47:4B:6B:97:2C:8E
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       AD
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RqoaMqYTDGQHrVLwzn5HS2uXLI4.roa
Signing time:             Wed 01 Oct 2025 01:33:55 +0000
ROA not before:           Wed 01 Oct 2025 01:33:55 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        147.192.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct  1 01:33:55 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=46AA1A32A6130C6407AD52F0CE7E474B6B972C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:05:d7:c7:5d:c1:57:4c:ae:9f:ee:79:bc:
                    44:b0:d4:f3:a7:57:26:c0:8b:21:eb:f2:eb:4a:ee:
                    a8:8d:11:51:c4:93:0d:d9:ff:64:ac:b7:dc:46:30:
                    90:a8:ef:54:61:4d:70:82:44:cf:2e:bc:0b:64:61:
                    cf:4b:f2:a7:89:02:31:c2:5f:b5:1e:f3:bb:e0:42:
                    4d:2c:2f:31:34:1c:65:de:ce:0a:ee:e3:dd:d8:ae:
                    9f:79:78:a0:db:23:43:c4:76:f9:1b:d9:7f:16:1b:
                    6e:cc:bd:c1:97:8c:36:81:8f:99:04:7a:99:e6:52:
                    2c:46:b2:b3:6d:84:36:26:c3:65:3e:f7:04:7d:f9:
                    1d:52:d0:4c:06:8f:d8:4a:c4:b8:4d:0f:b7:cc:33:
                    8b:6e:a2:89:3e:f8:7d:cf:13:38:6f:00:f7:86:e5:
                    b1:f3:14:ec:5a:b8:7f:43:90:79:f3:ac:1c:ec:5a:
                    6b:7c:42:ec:45:b5:e0:5c:8d:c6:95:1f:76:ab:50:
                    0f:3d:88:04:a1:2c:be:a8:a2:38:22:c8:bf:2e:a0:
                    7b:c7:06:3c:72:37:79:80:76:46:42:45:0e:d0:d0:
                    24:57:3b:b3:ab:a7:19:b4:7b:75:0f:31:31:e4:b0:
                    47:21:6b:6f:d0:3b:c0:78:e3:24:70:40:eb:a5:98:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AA:1A:32:A6:13:0C:64:07:AD:52:F0:CE:7E:47:4B:6B:97:2C:8E
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/RqoaMqYTDGQHrVLwzn5HS2uXLI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:95:41:e6:bd:e7:aa:5b:ec:10:34:2a:83:1a:8e:e3:1b:
         a1:78:e7:aa:9b:e4:4e:a7:9f:81:76:7b:8c:30:ca:4f:be:a4:
         41:b9:68:4c:f1:16:80:01:c8:ea:2f:ef:d8:71:43:dc:25:b2:
         7c:cf:2d:28:34:de:a2:b4:8e:eb:49:76:86:b3:f7:8f:38:4c:
         84:a8:2e:18:dd:78:a0:71:28:f8:c8:3c:ef:c2:37:16:90:ac:
         5a:9c:0c:4b:83:c0:45:71:10:e0:de:fa:19:a9:0e:85:8b:d7:
         d5:95:f0:2b:68:75:8f:9a:60:14:69:45:97:6c:89:72:5b:85:
         69:2f:e5:22:eb:c3:c1:a7:fb:2c:ea:5c:cb:a5:81:49:ea:16:
         e9:20:db:38:3b:ed:7f:9e:29:d9:5a:19:e1:2e:7f:74:64:a6:
         6d:65:0d:c3:07:aa:d7:99:4b:4a:69:2c:71:fc:1a:a9:12:f5:
         c1:04:b8:ef:f8:4f:e0:c4:64:bd:0e:d9:86:05:83:c1:be:8a:
         ce:16:c4:cb:fe:ed:70:ce:68:4d:75:49:ec:f0:4b:32:d1:c9:
         02:56:82:18:05:4d:71:b3:ab:60:92:f3:34:35:2c:cf:d6:97:
         c9:88:1c:c8:f4:4b:1f:13:29:7e:9a:2f:6b:8d:c3:0e:7f:70:
         27:5f:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:18 2025 by rpki-client