Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/X4v4WdFkgznqKKt8u2CJac1pq1U.roa
File:                     X4v4WdFkgznqKKt8u2CJac1pq1U.roa (raw, json)
Hash identifier:          6OckYexNQ5+6iz5hbp/HxrA637Kbv6IngK7SZbzN8Ws=
Subject key identifier:   5F:8B:F8:59:D1:64:83:39:EA:28:AB:7C:BB:60:89:69:CD:69:AB:55
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0191
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X4v4WdFkgznqKKt8u2CJac1pq1U.roa
Signing time:             Wed 20 Aug 2025 02:43:55 +0000
ROA not before:           Wed 20 Aug 2025 02:43:55 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        126.209.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Aug 20 02:43:55 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=5F8BF859D1648339EA28AB7CBB608969CD69AB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:38:5b:19:37:94:b2:93:df:87:6d:f9:98:
                    d5:d1:6f:e0:af:21:c3:0b:6f:49:58:1c:c6:78:18:
                    1f:c5:b1:ae:43:2d:2f:44:e5:6f:09:32:b8:12:98:
                    5a:be:4d:d4:b4:bd:ab:fb:aa:c9:76:41:39:0a:ad:
                    13:85:21:7a:5b:44:d5:a6:ea:95:f6:d9:12:1d:01:
                    6c:44:87:9b:db:19:ab:f2:0f:e2:3a:40:70:08:b5:
                    f3:e1:97:19:de:b2:67:0f:c5:71:c3:e6:bc:cb:7e:
                    f3:83:2a:3f:41:1c:7f:dc:3f:f9:17:4d:28:ee:c6:
                    40:14:be:db:83:b1:d0:1b:57:f8:cd:b7:4a:50:ad:
                    6d:74:39:2d:69:54:ed:6c:08:50:f6:5a:25:a1:d0:
                    90:ee:42:7c:16:db:b4:e3:03:4f:e6:da:4c:52:c3:
                    9d:e4:8f:50:d0:e3:55:17:54:ff:08:8c:6d:d6:9f:
                    5a:b3:38:44:01:b8:1f:de:de:24:a0:72:ad:f2:5b:
                    13:5d:92:af:38:ec:16:80:e1:28:08:b3:dd:42:99:
                    18:43:b5:33:f0:a9:bd:72:66:a3:c2:f4:13:4f:2c:
                    15:78:34:74:91:09:d6:5a:25:9d:f0:38:db:7a:87:
                    6a:89:b1:ee:12:38:f3:cd:11:94:28:63:1c:3d:2c:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:F8:59:D1:64:83:39:EA:28:AB:7C:BB:60:89:69:CD:69:AB:55
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X4v4WdFkgznqKKt8u2CJac1pq1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:75:ca:bd:f5:3c:bc:73:2d:fa:c4:b5:5c:a7:7a:87:6d:
         da:da:c3:98:a4:a0:db:24:cc:57:14:d0:b0:6b:97:7b:25:fd:
         c0:66:78:5b:8a:1d:66:50:ef:f8:f6:59:f8:52:e2:68:f4:92:
         e1:8b:78:09:a3:f5:3d:d9:b3:b6:11:da:f5:f7:d2:c6:1b:aa:
         10:87:24:d1:b6:97:40:1f:0a:fb:15:f5:2b:5f:bc:d7:13:eb:
         9e:61:63:06:5b:77:3c:28:72:71:15:a9:cf:c4:bf:c4:6f:4e:
         4e:86:1b:9c:af:90:e2:7c:09:21:77:e4:8e:6d:a2:da:bd:e8:
         59:26:f9:ae:a1:48:bd:ca:26:80:5f:42:c9:57:92:4f:dc:ad:
         c4:16:36:3b:54:3f:9c:28:44:36:3d:34:fb:0d:b7:f6:16:92:
         7a:79:f3:6c:77:b3:e6:27:cf:c0:a4:bf:91:18:25:98:90:a7:
         e3:b6:61:79:49:7e:9f:6a:2a:30:8d:c0:6d:a9:fc:ca:06:12:
         9c:a3:2c:98:74:33:ba:ec:72:86:d6:9a:68:d8:97:59:2d:aa:
         23:6e:fb:aa:87:98:6b:4a:ac:8b:50:e6:35:b4:90:86:2e:e2:
         fe:fc:97:15:73:f9:ea:d4:4a:86:d4:68:66:66:87:5f:9f:8c:
         da:4c:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:47:40 2025 by rpki-client