Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa
File:                     wR8qk9oyHxaLtTWx767Glr3cIXM.roa (raw, json)
Hash identifier:          Jp61+3w0RAPqRj9jx5JOI51gCVsB50sFVP5zqjPIn00=
Subject key identifier:   C1:1F:2A:93:DA:32:1F:16:8B:B5:35:B1:EF:AE:C6:96:BD:DC:21:73
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       B2
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa
Signing time:             Wed 01 Oct 2025 01:38:39 +0000
ROA not before:           Wed 01 Oct 2025 01:38:39 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        159.28.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct  1 01:38:39 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C11F2A93DA321F168BB535B1EFAEC696BDDC2173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:36:2c:03:75:b7:52:ff:73:8c:8e:d8:ca:
                    11:d6:ce:ba:c9:58:db:ce:aa:61:72:68:e8:b2:71:
                    37:a7:83:87:3e:04:b7:4f:6e:27:9b:7e:76:e2:34:
                    b9:1e:dd:6d:5f:31:5f:65:b1:22:74:fd:0a:91:7c:
                    5e:48:29:06:e1:7a:b8:3c:ee:d5:19:3b:ca:54:cd:
                    b9:b2:66:83:a9:f9:8c:ec:d6:75:86:34:82:fd:9a:
                    03:9e:ea:2d:3c:c4:3f:c1:bc:6c:ed:43:5a:37:44:
                    23:67:17:73:96:36:81:3b:20:1a:04:b2:d8:a8:74:
                    53:9a:f1:f8:45:93:ea:f7:4f:b6:49:1b:8c:3a:45:
                    d4:ec:fe:26:50:3a:40:47:60:a2:1e:13:0e:44:43:
                    47:84:fb:31:4c:e0:47:3f:a8:a6:39:f3:c4:b9:15:
                    34:65:fd:6f:c3:87:57:e7:9b:2c:30:e9:c6:dc:39:
                    98:46:54:97:bf:9d:b7:85:f9:7e:ca:6f:5e:cc:dc:
                    7b:13:32:c4:1d:4a:d0:e1:ef:ba:01:13:f7:9b:83:
                    b1:94:2c:30:46:a3:2b:91:45:ec:3d:1b:3f:30:a3:
                    53:f2:3a:bd:26:3f:76:ea:c4:21:f7:d1:b9:ae:d8:
                    d2:6b:bc:b0:94:5d:97:06:02:ab:93:0c:db:40:bc:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:2A:93:DA:32:1F:16:8B:B5:35:B1:EF:AE:C6:96:BD:DC:21:73
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wR8qk9oyHxaLtTWx767Glr3cIXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:ef:74:e3:17:62:4c:86:0b:0d:6c:12:fe:ff:91:ea:ed:
         9d:d2:2a:6b:b1:9f:11:12:68:df:18:df:42:17:b1:24:0a:41:
         f4:44:60:1c:da:a2:c9:94:47:98:c2:0f:34:9c:f8:39:5e:09:
         2e:ef:3a:28:0d:5f:e7:a5:c5:f5:b8:e2:1b:90:ca:28:0d:52:
         8e:74:40:eb:72:de:c3:48:3b:35:38:e4:19:bb:19:08:67:03:
         71:2f:eb:60:73:5b:eb:b5:a9:cf:45:91:c4:f6:f2:bb:e4:9e:
         c0:77:d0:b6:46:0c:4f:8b:0d:0d:4a:f6:57:fa:08:3c:7a:e4:
         97:09:1d:af:d6:22:f7:6a:ed:86:23:74:57:7c:be:85:3b:dc:
         94:c7:7c:e2:92:98:88:e0:25:f7:e1:f5:8e:42:f0:6c:73:64:
         a4:31:57:76:70:99:af:99:89:66:c8:3d:b0:9a:88:72:fa:52:
         1a:3a:50:4f:1f:5b:fd:cc:92:7a:51:61:cb:2b:7e:f2:33:3a:
         ee:3c:f6:3d:00:2f:1a:40:5f:85:8d:5b:a3:47:d8:8b:ec:d3:
         7d:83:ce:a1:73:d4:9b:e2:0c:ec:f0:93:20:5d:5b:ed:d5:71:
         c1:9b:5e:23:5e:c0:75:a4:2a:cf:07:bb:27:67:47:d8:33:17:
         3b:0f:e4:31
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICALIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw
MTM4MzlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMxMUYyQTkzREEzMjFG
MTY4QkI1MzVCMUVGQUVDNjk2QkREQzIxNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYhDYsA3W3Uv9zjI7YyhHWzrrJWNvOqmFyaOiycTeng4c+BLdP
biebfnbiNLke3W1fMV9lsSJ0/QqRfF5IKQbherg87tUZO8pUzbmyZoOp+Yzs1nWG
NIL9mgOe6i08xD/BvGztQ1o3RCNnF3OWNoE7IBoEstiodFOa8fhFk+r3T7ZJG4w6
RdTs/iZQOkBHYKIeEw5EQ0eE+zFM4Ec/qKY588S5FTRl/W/Dh1fnmyww6cbcOZhG
VJe/nbeF+X7Kb17M3HsTMsQdStDh77oBE/ebg7GULDBGoyuRRew9Gz8wo1PyOr0m
P3bqxCH30bmu2NJrvLCUXZcGAquTDNtAvP7NAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUwR8qk9oyHxaLtTWx767Glr3cIXMwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My93UjhxazlveUh4YUx0VFd4NzY3R2xyM2NJWE0ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQHnxyAMA0GCSqGSIb3DQEBCwUAA4IBAQA72+904xdiTIYLDWwS/v+R6u2d0ipr
sZ8REmjfGN9CF7EkCkH0RGAc2qLJlEeYwg80nPg5Xgku7zooDV/npcX1uOIbkMoo
DVKOdEDrct7DSDs1OOQZuxkIZwNxL+tgc1vrtanPRZHE9vK75J7Ad9C2RgxPiw0N
SvZX+gg8euSXCR2v1iL3au2GI3RXfL6FO9yUx3zikpiI4CX34fWOQvBsc2SkMVd2
cJmvmYlmyD2wmohy+lIaOlBPH1v9zJJ6UWHLK37yMzruPPY9AC8aQF+FjVujR9iL
7NN9g86hc9Sb4gzs8JMgXVvt1XHBm14jXsB1pCrPB7snZ0fYMxc7D+Qx
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:47 2025 by rpki-client