Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/d6yTfZ6t09h5du2wYWN7NxK0rjk.roa
File:                     d6yTfZ6t09h5du2wYWN7NxK0rjk.roa (raw, json)
Hash identifier:          Js3jUNQZloZ/bDiKbq1pfEDYsaRAQOhyV11fiLhLumo=
Subject key identifier:   77:AC:93:7D:9E:AD:D3:D8:79:76:ED:B0:61:63:7B:37:12:B4:AE:39
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01A2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/d6yTfZ6t09h5du2wYWN7NxK0rjk.roa
Signing time:             Wed 01 Oct 2025 01:33:59 +0000
ROA not before:           Wed 01 Oct 2025 01:33:59 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        58.87.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:59 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=77AC937D9EADD3D87976EDB061637B3712B4AE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:57:99:6f:eb:e1:0c:07:be:ef:3d:58:5e:
                    a8:b9:44:0f:db:9d:62:bf:b9:5e:38:68:4f:52:9d:
                    54:13:93:58:09:d3:3d:45:ad:24:81:6c:8d:56:49:
                    eb:a5:01:84:10:fc:b4:71:d3:48:64:11:a5:48:17:
                    77:97:4f:47:a8:ca:78:c4:4b:35:5b:74:bc:e2:fc:
                    70:f7:45:45:f2:8f:b7:c7:a0:18:e6:06:8c:cd:df:
                    9b:45:db:cf:12:24:e6:18:40:99:a5:96:c0:cf:76:
                    29:9c:fe:ec:96:bb:06:06:c0:8a:52:72:40:c8:c8:
                    52:bf:72:18:71:28:55:ee:a3:e8:a2:1a:b5:f3:1b:
                    95:9e:25:d5:6e:56:14:e0:ac:24:76:34:c8:eb:c8:
                    0e:96:a4:96:3e:ab:8f:40:6a:f3:94:81:b3:b3:dd:
                    12:43:61:de:39:c7:4a:0b:78:49:51:8c:93:2d:a0:
                    fc:a0:e5:04:49:c5:7e:af:04:84:d9:49:c4:52:c6:
                    ad:e9:4a:16:df:de:dc:47:e5:b5:d1:05:89:a6:4e:
                    61:56:f6:85:22:5a:d0:99:8e:64:98:76:00:80:67:
                    c1:2f:0b:8e:2c:f7:f9:c7:b6:2d:03:8e:cf:8b:38:
                    1d:1a:73:e2:d4:a8:2e:e5:f2:88:b0:6b:12:db:5e:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AC:93:7D:9E:AD:D3:D8:79:76:ED:B0:61:63:7B:37:12:B4:AE:39
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/d6yTfZ6t09h5du2wYWN7NxK0rjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.87.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:f9:3b:4a:c7:6f:4e:d5:97:a4:89:5c:45:e9:2d:04:66:
         c3:ac:f9:7b:e0:db:00:85:8b:e3:f0:b6:9d:b4:48:d7:33:46:
         f2:5d:6b:97:d2:f3:de:86:bb:85:36:1d:33:0f:f7:cf:fa:88:
         ef:b6:99:d3:c1:b7:a5:d6:3d:3f:12:c6:3d:fe:e6:e6:6a:2e:
         b4:dd:ae:d0:d8:d3:d8:b0:58:f5:9b:b8:c6:d7:eb:b3:31:a0:
         11:48:f9:79:f2:98:18:04:e8:22:e5:b5:83:ec:4b:1c:1f:9d:
         a7:d5:c2:03:4a:8f:d0:65:97:a3:c6:08:70:94:56:c4:c7:46:
         a7:ca:b6:59:3c:5b:39:97:67:32:9a:62:ec:bb:c5:03:6d:b5:
         5b:ca:c2:c7:6b:f2:65:13:96:56:41:5f:9c:2b:1e:c8:e3:49:
         ac:57:17:90:07:6e:6d:4f:0c:87:05:d7:f3:76:fe:83:09:7f:
         71:93:8d:20:e1:64:7e:11:b1:f1:a7:3b:40:5a:95:f3:6d:99:
         71:48:78:58:05:2d:a5:16:96:96:16:ac:37:5d:d4:b4:61:c2:
         31:a2:56:68:e3:87:f4:f8:4a:1a:55:9f:4f:10:df:e8:8c:8d:
         bd:12:8e:06:f6:f7:35:6a:1c:b4:e9:2f:14:23:cf:94:da:ef:
         a4:5c:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:42 2025 by rpki-client