Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Y0uoQ_LnhvtZol9QK6_UByjw574.roa
File:                     Y0uoQ_LnhvtZol9QK6_UByjw574.roa (raw, json)
Hash identifier:          5JeQftAcmSbU2JV1RxX/DP4jUb+dZsUGsn6wy0VMDjw=
Subject key identifier:   63:4B:A8:43:F2:E7:86:FB:59:A2:5F:50:2B:AF:D4:07:28:F0:E7:BE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01AD
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Y0uoQ_LnhvtZol9QK6_UByjw574.roa
Signing time:             Wed 01 Oct 2025 01:38:33 +0000
ROA not before:           Wed 01 Oct 2025 01:38:33 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        118.238.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:33 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=634BA843F2E786FB59A25F502BAFD40728F0E7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:35:f4:78:05:6d:de:a4:05:c0:a4:6f:28:
                    2c:bf:36:93:27:78:53:9b:32:88:0f:ed:f1:18:73:
                    f3:a7:6c:ca:2b:28:44:72:62:2f:61:3a:8f:f9:17:
                    73:3b:dd:67:f6:d0:27:60:9f:9f:85:57:f7:ad:16:
                    0e:7d:d2:59:c0:30:fd:60:74:f9:12:3f:4b:85:c0:
                    60:9e:4b:41:e7:2e:02:36:c8:ae:33:81:e7:25:68:
                    1c:78:44:a7:03:39:dd:fd:cc:57:b4:ed:82:67:97:
                    f1:85:9c:bc:24:9d:a2:66:0b:10:74:c2:4e:39:ca:
                    c6:1e:f3:11:3b:ba:7a:46:bc:98:b7:f2:09:f7:ed:
                    28:02:b9:84:f8:4e:13:64:3f:19:eb:03:c6:95:20:
                    e6:51:1f:8c:8b:a6:58:ea:02:69:b3:77:44:66:99:
                    1d:ce:d2:64:75:13:59:c3:bc:9d:c2:e1:9a:67:1f:
                    77:91:39:2a:15:4e:22:62:8f:39:9a:bf:8c:a0:25:
                    42:19:01:fb:96:7a:52:c3:87:ec:fc:d9:70:5c:3a:
                    a4:2c:53:da:8b:4f:23:9d:3e:fd:f3:08:8c:a4:8a:
                    88:12:9f:5d:d0:c5:01:74:a9:81:6f:b4:27:65:22:
                    25:79:73:41:43:82:ee:29:d1:7f:83:ef:91:50:0c:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:A8:43:F2:E7:86:FB:59:A2:5F:50:2B:AF:D4:07:28:F0:E7:BE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Y0uoQ_LnhvtZol9QK6_UByjw574.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:05:44:26:4e:76:e4:0d:fb:19:fb:e0:c5:65:77:e7:29:
         ef:b8:61:a2:cd:20:29:b2:93:50:f3:30:eb:1f:2c:76:3d:62:
         a4:35:f3:b4:aa:28:6c:6e:c4:f8:2a:e6:02:57:0e:53:5d:01:
         9e:a2:9f:41:dc:6e:86:f5:ff:d0:7a:5b:32:7c:70:ed:82:1d:
         0a:4b:7f:75:db:6b:9c:83:d6:48:70:37:96:c7:f4:40:e9:bd:
         14:c5:d5:ca:c6:2e:0d:e2:3b:1c:ed:e3:e4:a3:3e:19:a9:15:
         e1:77:60:83:1b:10:39:dd:e2:5c:05:bb:8f:a0:41:ec:a9:5a:
         5f:d4:5c:ef:62:72:9f:16:2f:44:69:ee:d4:d9:28:8d:0d:50:
         0b:4e:d8:79:82:14:f2:34:74:21:62:57:b3:0c:0e:17:c9:05:
         14:40:61:1d:90:54:1d:56:bd:86:ef:b3:fb:9d:6f:10:38:6c:
         5f:90:43:40:90:b4:66:21:38:ce:67:f4:2c:e4:42:76:3d:8c:
         67:1a:a7:33:03:3d:45:e1:36:f8:bd:6c:2f:4d:0e:06:a6:96:
         40:b1:04:f6:21:43:60:e7:97:05:54:d6:af:7a:1b:8e:59:db:
         c8:55:84:9e:22:71:67:68:2c:9c:5f:04:7d:43:f3:3c:d9:9a:
         a0:d4:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:06 2025 by rpki-client