Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
File:                     WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa (raw, json)
Hash identifier:          pFVJSFTqerD1z7Tb59xXjGtHMsWc70CjlgOmxRRe7MA=
Subject key identifier:   58:42:B5:51:AD:0D:51:01:40:63:5A:74:BC:A1:61:C6:32:2E:D5:D4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0194
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
Signing time:             Wed 01 Oct 2025 01:33:48 +0000
ROA not before:           Wed 01 Oct 2025 01:33:48 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        110.232.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:48 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5842B551AD0D510140635A74BCA161C6322ED5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:c9:82:79:f9:9a:c2:2e:40:91:95:f9:74:
                    4c:07:61:ce:55:c0:51:d4:e9:b6:c0:41:ed:34:b1:
                    9c:93:93:0f:54:5d:f7:88:b6:55:3f:bf:ae:45:12:
                    3c:47:a8:c0:69:43:60:1b:4f:18:b0:57:d2:11:e0:
                    90:9f:2d:50:f4:c1:5b:a0:2a:f1:87:a6:ed:32:e0:
                    ec:de:6d:b1:61:59:5f:95:dd:21:da:92:11:88:6a:
                    1b:e2:8f:b8:18:9c:5f:a9:29:eb:5d:d6:83:c9:d6:
                    0f:2e:c1:23:a3:28:6c:1f:d0:42:61:e0:14:5d:cb:
                    ea:e8:bf:eb:b1:82:fe:bc:13:56:5e:ef:e7:f0:87:
                    99:c7:b1:55:ca:cf:82:42:44:46:a4:6a:67:11:f5:
                    51:fa:81:60:e8:be:f6:a8:68:56:c5:e9:9b:08:93:
                    a3:5d:aa:92:cc:5f:c5:be:8e:63:3a:f2:8d:e2:dc:
                    0d:55:78:44:74:9a:f8:ed:99:9d:09:de:52:a2:b4:
                    78:c0:3f:06:49:d0:d4:50:87:05:34:40:c2:50:37:
                    0f:8e:03:ca:78:09:3f:e4:4c:82:0e:e3:c5:7f:08:
                    5c:5e:32:f5:62:7d:41:82:9b:c3:a9:d1:5b:86:09:
                    50:db:64:5d:e2:bf:2c:81:3b:e3:45:3e:78:69:d3:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:B5:51:AD:0D:51:01:40:63:5A:74:BC:A1:61:C6:32:2E:D5:D4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WEK1Ua0NUQFAY1p0vKFhxjIu1dQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:38:db:47:12:14:83:28:b3:74:1c:2b:dd:53:bd:52:b1:30:
         89:8b:76:6a:55:dc:d7:ff:81:4b:73:bf:fb:0a:32:39:98:a9:
         ab:68:e9:20:e1:61:f7:e4:ff:19:3c:d0:be:c4:32:83:42:de:
         38:24:83:7b:63:d2:3c:3f:16:66:c3:44:1b:92:aa:6e:61:f8:
         d0:87:24:8b:f8:b7:09:5a:45:9e:b3:0d:f1:3b:48:7e:e6:d1:
         12:c4:41:81:f1:30:1f:11:7d:fa:0b:01:dd:43:49:06:23:b6:
         2c:a0:0a:53:de:c8:6f:c7:ae:c6:7a:37:31:fd:31:7f:e8:92:
         8d:70:64:c2:59:a9:f3:eb:61:b1:0e:c9:05:4c:5a:88:7a:b9:
         5b:f3:28:a9:c9:5b:a8:43:b6:77:13:1d:fc:07:1e:9f:54:6b:
         7c:28:1f:12:04:50:3c:84:e6:e5:de:ce:ae:57:c1:d8:8c:0f:
         fe:09:71:39:aa:9c:e1:71:f8:67:1e:5b:23:c6:b2:b9:47:dd:
         f1:ea:9c:19:5a:64:28:5b:20:99:c3:4a:f2:3b:d3:ee:86:54:
         6b:a3:d6:32:29:35:ac:48:8c:64:56:7e:ee:7e:b0:07:e3:7d:
         0c:72:3e:50:ae:c3:ec:d5:88:19:40:37:84:5b:09:7d:30:e8:
         f1:39:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:01 2025 by rpki-client