Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/ryWQ2-jFBGuzwwpg_xY4Eyblc64.roa
File:                     ryWQ2-jFBGuzwwpg_xY4Eyblc64.roa (raw, json)
Hash identifier:          Lup+uN/rsWV3d7JNrTIMP2uhHfRyAqBPpJSNnizSa9c=
Subject key identifier:   AF:25:90:DB:E8:C5:04:6B:B3:C3:0A:60:FF:16:38:13:26:E5:73:AE
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       B0
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ryWQ2-jFBGuzwwpg_xY4Eyblc64.roa
Signing time:             Wed 01 Oct 2025 01:38:37 +0000
ROA not before:           Wed 01 Oct 2025 01:38:37 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        216.153.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct  1 01:38:37 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=AF2590DBE8C5046BB3C30A60FF16381326E573AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:e9:23:b1:ce:31:43:cd:b2:0d:7e:f7:a3:
                    63:ee:3d:2d:4a:24:97:0b:7e:3b:d7:16:b8:c5:c8:
                    6e:10:dc:ad:ed:de:f9:e2:e9:a8:ad:58:96:69:20:
                    df:78:da:7e:a1:5f:71:51:af:99:a9:22:5d:f2:18:
                    9a:b0:0b:94:5f:37:30:88:5f:42:ae:04:d9:19:ea:
                    05:f0:69:6f:a8:fe:2e:8c:61:d6:fc:fa:cf:d4:9b:
                    30:d4:af:98:59:99:43:a4:f6:25:7f:82:9a:62:86:
                    5e:09:91:15:eb:7e:c3:e8:7d:08:da:90:29:b6:8e:
                    be:ea:95:a7:9e:30:95:5e:ff:76:47:b5:65:14:8d:
                    01:9a:17:52:0f:4d:8a:2d:f9:ed:5b:9e:21:00:2a:
                    93:f7:19:15:31:f0:c2:54:bd:78:4f:79:ba:c9:43:
                    8b:c5:86:c9:54:93:75:c0:85:0c:a9:54:93:43:ef:
                    bf:cc:7a:12:2e:2c:48:57:5a:b5:ce:9f:b0:eb:d9:
                    d9:f1:f8:e1:44:f6:fc:ba:09:7c:d8:22:84:28:57:
                    a9:cc:d6:b7:a0:fe:cb:10:64:fe:65:08:54:7f:fc:
                    10:20:83:d3:04:c3:fe:fe:4b:82:08:f0:a9:fd:09:
                    0b:19:52:01:e1:86:25:38:49:3e:68:e4:b5:4f:07:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:90:DB:E8:C5:04:6B:B3:C3:0A:60:FF:16:38:13:26:E5:73:AE
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/ryWQ2-jFBGuzwwpg_xY4Eyblc64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.153.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:d0:50:f2:ad:44:83:c7:c9:db:6b:e6:ec:a2:0a:23:b9:
         5a:f3:25:8f:a5:1d:c0:fc:88:d7:96:76:54:10:21:a3:5f:89:
         46:e9:37:07:39:7f:ff:e7:63:32:79:75:c1:eb:7d:51:d5:6b:
         8a:77:e1:ad:04:92:9a:aa:19:a8:65:e3:9f:bd:e1:b4:e6:61:
         b5:26:14:6a:4a:22:9d:fb:e9:06:58:87:a1:02:51:d3:2b:cc:
         8a:d5:0b:94:61:80:ab:a8:58:d7:64:12:9f:8b:b6:a2:5e:78:
         a6:40:96:44:ae:8a:81:a9:98:7e:5d:e0:80:77:e3:d2:2c:cb:
         4f:65:f6:be:63:03:21:cc:0e:18:39:32:fb:29:a1:a7:98:bb:
         05:f7:25:3a:7b:46:7a:34:b5:94:8a:5d:66:26:cd:c0:3b:aa:
         70:ff:91:b5:81:21:12:d4:3e:60:f7:12:c4:eb:87:5c:bb:b9:
         7a:21:4e:08:cd:4e:01:02:14:da:2c:51:ed:cb:10:c8:b5:03:
         98:da:97:b6:8d:7e:22:10:6a:ca:fb:22:14:1f:2c:89:88:42:
         44:07:22:79:70:19:72:51:4e:c3:2c:49:f6:81:1c:4a:24:90:
         fe:57:39:d2:5f:14:a5:75:cd:a4:5d:aa:7b:b7:28:9b:a1:63:
         cb:df:ca:16
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw
MTM4MzdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGMjU5MERCRThDNTA0
NkJCM0MzMEE2MEZGMTYzODEzMjZFNTczQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYW+kjsc4xQ82yDX73o2PuPS1KJJcLfjvXFrjFyG4Q3K3t3vni
6aitWJZpIN942n6hX3FRr5mpIl3yGJqwC5RfNzCIX0KuBNkZ6gXwaW+o/i6MYdb8
+s/UmzDUr5hZmUOk9iV/gppihl4JkRXrfsPofQjakCm2jr7qlaeeMJVe/3ZHtWUU
jQGaF1IPTYot+e1bniEAKpP3GRUx8MJUvXhPebrJQ4vFhslUk3XAhQypVJND77/M
ehIuLEhXWrXOn7Dr2dnx+OFE9vy6CXzYIoQoV6nM1reg/ssQZP5lCFR//BAgg9ME
w/7+S4II8Kn9CQsZUgHhhiU4ST5o5LVPB80xAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUryWQ2+jFBGuzwwpg/xY4Eyblc64wHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9yeVdRMi1qRkJHdXp3d3BnX3hZNEV5YmxjNjQucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQG2JlAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ3dBQ8q1Eg8fJ22vm7KIKI7la8yWP
pR3A/IjXlnZUECGjX4lG6TcHOX//52MyeXXB631R1WuKd+GtBJKaqhmoZeOfveG0
5mG1JhRqSiKd++kGWIehAlHTK8yK1QuUYYCrqFjXZBKfi7aiXnimQJZEroqBqZh+
XeCAd+PSLMtPZfa+YwMhzA4YOTL7KaGnmLsF9yU6e0Z6NLWUil1mJs3AO6pw/5G1
gSES1D5g9xLE64dcu7l6IU4IzU4BAhTaLFHtyxDItQOY2pe2jX4iEGrK+yIUHyyJ
iEJEByJ5cBlyUU7DLEn2gRxKJJD+VznSXxSldc2kXap7tyiboWPL38oW
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:23 2025 by rpki-client