Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/nEeCi20ZXvz4AMz3hw-6Y0lgRdc.roa
File:                     nEeCi20ZXvz4AMz3hw-6Y0lgRdc.roa (raw, json)
Hash identifier:          jENAl2eBCVdrZctWcj5pR/owTzI6mcJNO5dndi/7ptw=
Subject key identifier:   9C:47:82:8B:6D:19:5E:FC:F8:00:CC:F7:87:0F:BA:63:49:60:45:D7
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01AC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nEeCi20ZXvz4AMz3hw-6Y0lgRdc.roa
Signing time:             Wed 01 Oct 2025 01:38:33 +0000
ROA not before:           Wed 01 Oct 2025 01:38:33 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        59.146.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:33 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9C47828B6D195EFCF800CCF7870FBA63496045D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2b:4d:54:23:a5:56:ce:c5:ea:0e:07:3d:93:
                    4f:03:ec:18:e4:85:0c:16:8e:11:02:3f:e4:02:a2:
                    ad:bb:46:b6:b9:b0:af:f1:ce:22:21:4d:7d:8e:8e:
                    33:bc:14:63:96:d6:65:7f:3f:b1:7e:e7:c4:d8:82:
                    c2:6f:49:3f:39:81:76:44:71:79:b1:f5:cd:7a:a5:
                    14:e2:69:f5:cc:db:48:ac:ce:da:04:01:96:c6:45:
                    b8:e6:44:ad:5d:e7:60:ec:a0:9a:52:89:02:69:54:
                    ce:76:35:18:58:39:b7:2d:0e:32:6b:24:a7:ab:99:
                    69:ae:a3:8e:8f:2b:43:13:f1:78:ed:4d:32:c1:3a:
                    e9:07:1d:a0:88:3f:51:03:db:2e:fa:9a:96:48:a9:
                    98:1c:9f:d8:b2:d7:28:2a:52:f8:c6:5f:2d:b6:9d:
                    99:49:fc:94:dd:17:d1:09:25:8b:ae:d8:bd:31:09:
                    8a:30:19:f3:46:79:42:27:a1:ec:42:c1:65:d5:c6:
                    77:fa:48:0c:61:41:23:b7:4a:06:63:70:5b:c4:81:
                    d9:cd:3a:ce:77:13:ff:1c:4b:85:a0:1c:3d:62:ba:
                    5c:02:1a:48:df:2d:15:80:27:15:10:78:9e:5c:e1:
                    a8:59:52:8a:92:b7:80:e1:4c:74:93:ee:db:44:6d:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:82:8B:6D:19:5E:FC:F8:00:CC:F7:87:0F:BA:63:49:60:45:D7
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/nEeCi20ZXvz4AMz3hw-6Y0lgRdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         45:14:ec:7d:90:bd:46:ff:3f:38:73:d9:84:ff:8b:33:34:71:
         eb:b8:56:24:36:32:bc:5b:6e:b3:bd:ae:1e:13:0a:08:21:0e:
         09:30:6a:b5:53:bd:a9:b9:f7:c0:6e:41:7d:2e:8f:50:98:20:
         dc:7c:5d:b5:17:43:3c:b7:72:20:e9:67:8c:96:a6:9b:f8:df:
         7c:ce:6d:db:7e:c8:f8:bd:cd:6b:a8:4c:97:36:61:a1:f4:a4:
         c1:5a:9c:91:2b:d7:d3:3c:b4:ec:b3:42:41:d2:60:e3:71:ab:
         c8:08:86:3b:25:51:02:0f:d4:a2:69:0e:eb:8a:fb:e8:b7:3b:
         3e:c2:1d:76:11:5c:9f:f6:b9:f8:4f:03:6d:7d:ed:8b:f9:09:
         5c:d7:4b:1a:b6:7a:51:b5:b1:d8:21:b4:86:8c:57:3b:48:c8:
         8e:64:5b:ad:a9:33:d8:67:c9:4e:4a:95:ce:de:0d:ed:0f:ae:
         4c:28:df:47:00:55:fa:56:a7:3b:ac:17:93:1d:f1:e3:d2:f8:
         a3:5a:a2:c7:8d:61:95:bf:e2:c3:ca:6d:49:b7:0b:a4:a7:bd:
         5e:73:42:ad:50:1e:f4:d3:09:b2:db:96:34:04:a3:88:79:2b:
         4a:12:18:a4:f9:6c:5a:5b:b8:87:82:06:7e:42:7f:ad:b2:ad:
         2e:1b:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:01 2025 by rpki-client