Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qVqz7QjzehiXb-CXG3MIH7jKydQ.roa
File:                     qVqz7QjzehiXb-CXG3MIH7jKydQ.roa (raw, json)
Hash identifier:          l/wIL5R3m7ItZVWg77G1i6GayAzF7ZlksarH4JWKX6w=
Subject key identifier:   A9:5A:B3:ED:08:F3:7A:18:97:6F:E0:97:1B:73:08:1F:B8:CA:C9:D4
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01B9
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qVqz7QjzehiXb-CXG3MIH7jKydQ.roa
Signing time:             Wed 01 Oct 2025 01:38:41 +0000
ROA not before:           Wed 01 Oct 2025 01:38:41 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        150.246.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:38:41 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A95AB3ED08F37A18976FE0971B73081FB8CAC9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:25:ce:d9:18:59:b6:03:c2:99:85:af:6b:
                    96:62:dd:cf:27:29:4d:c2:d7:46:0b:74:8c:fc:73:
                    43:8c:7e:98:83:44:b3:9b:95:b0:ee:7a:ed:14:44:
                    10:9b:39:80:f3:9f:0a:be:64:64:37:5f:d2:30:3a:
                    6c:0b:b7:b6:16:b2:aa:64:14:2d:92:b0:2f:2e:5e:
                    ea:99:7f:99:a4:50:27:bc:6b:6a:65:00:fc:ab:c7:
                    f1:a6:9c:07:ff:12:e5:10:a5:59:f2:57:5d:c2:49:
                    e0:f5:85:d5:d7:5b:cf:32:91:13:d0:60:ad:5f:34:
                    9c:6e:0c:83:50:3a:ce:68:c9:72:10:50:53:d9:48:
                    1c:dc:57:27:74:c7:95:a5:af:f7:ed:cc:46:d8:b1:
                    73:5d:93:da:03:bf:b2:92:6d:79:77:aa:7b:90:f0:
                    75:d5:c1:38:c9:08:1f:a0:d5:6f:d8:51:a9:ac:9e:
                    b8:c8:d4:47:40:73:ee:78:df:3e:00:c0:d8:6b:2d:
                    bb:28:b4:45:7f:38:61:cc:ed:6e:7a:70:63:aa:45:
                    7f:1a:4e:9a:e7:fc:9f:b5:2c:54:e9:58:6c:42:19:
                    ed:ce:e9:a1:8e:41:c9:f6:07:e8:89:29:d6:18:cd:
                    93:ee:b8:61:f4:a1:fc:6b:c1:58:ab:42:5c:b6:53:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:B3:ED:08:F3:7A:18:97:6F:E0:97:1B:73:08:1F:B8:CA:C9:D4
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qVqz7QjzehiXb-CXG3MIH7jKydQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:5e:e3:00:24:8f:a0:06:b5:73:27:32:fb:45:2e:cb:e4:
         a4:4d:10:09:e0:3b:53:a4:46:6e:59:0d:19:7c:fd:9e:c1:64:
         85:31:41:a1:03:b2:ed:ae:5a:0a:ec:34:42:9a:90:e7:7e:9e:
         71:3e:ea:ee:13:e3:95:c4:ac:82:61:ac:a8:4c:05:5e:c2:f8:
         0d:30:ec:94:d3:cc:15:b4:d0:cd:05:ef:21:95:23:44:e1:18:
         c1:f5:3f:4e:4b:b9:aa:84:66:5e:0f:b6:b3:04:a8:1c:80:af:
         2e:ec:6b:79:45:47:f5:b9:c4:f3:e4:73:64:ab:f7:d1:0c:7d:
         48:19:f5:e2:39:a2:93:8e:18:96:da:a3:28:93:ef:a4:1d:50:
         eb:8b:ef:ad:02:cc:67:72:dd:f2:4f:e9:37:03:26:52:b7:32:
         fb:45:59:c1:73:79:e0:9c:42:be:ae:62:07:cb:f9:8d:e9:fc:
         81:ff:1a:87:61:73:8b:04:1a:3c:aa:0d:85:cd:9a:0c:58:a5:
         86:24:dd:54:f0:ca:b0:fa:2a:ce:2f:99:33:35:15:47:2c:78:
         45:03:fe:0c:3c:f8:36:4c:d8:2f:63:bf:f0:d8:cd:4d:87:c2:
         dc:28:00:05:10:5d:be:b1:44:fd:82:b6:4b:ff:4e:42:74:49:
         35:0f:bf:12
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTEwMDEw
MTM4NDFaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5NUFCM0VEMDhGMzdB
MTg5NzZGRTA5NzFCNzMwODFGQjhDQUM5RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaISXO2RhZtgPCmYWva5Zi3c8nKU3C10YLdIz8c0OMfpiDRLOb
lbDueu0URBCbOYDznwq+ZGQ3X9IwOmwLt7YWsqpkFC2SsC8uXuqZf5mkUCe8a2pl
APyrx/GmnAf/EuUQpVnyV13CSeD1hdXXW88ykRPQYK1fNJxuDINQOs5oyXIQUFPZ
SBzcVyd0x5Wlr/ftzEbYsXNdk9oDv7KSbXl3qnuQ8HXVwTjJCB+g1W/YUamsnrjI
1EdAc+543z4AwNhrLbsotEV/OGHM7W56cGOqRX8aTprn/J+1LFTpWGxCGe3O6aGO
Qcn2B+iJKdYYzZPuuGH0ofxrwVirQly2U55bAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUqVqz7QjzehiXb+CXG3MIH7jKydQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9xVnF6N1FqemVoaVhiLUNYRzNNSUg3akt5ZFEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAlvYwDQYJKoZIhvcNAQELBQADggEBAKlkXuMAJI+gBrVzJzL7RS7L5KRNEAng
O1OkRm5ZDRl8/Z7BZIUxQaEDsu2uWgrsNEKakOd+nnE+6u4T45XErIJhrKhMBV7C
+A0w7JTTzBW00M0F7yGVI0ThGMH1P05LuaqEZl4PtrMEqByAry7sa3lFR/W5xPPk
c2Sr99EMfUgZ9eI5opOOGJbaoyiT76QdUOuL760CzGdy3fJP6TcDJlK3MvtFWcFz
eeCcQr6uYgfL+Y3p/IH/Godhc4sEGjyqDYXNmgxYpYYk3VTwyrD6Ks4vmTM1FUcs
eEUD/gw8+DZM2C9jv/DYzU2HwtwoAAUQXb6xRP2Ctkv/TkJ0STUPvxI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:21 2025 by rpki-client