Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/4vN4daQCi64ube8pulFVpMEim-w.roa
File:                     4vN4daQCi64ube8pulFVpMEim-w.roa (raw, json)
Hash identifier:          rRoK1H4gJ8YVEEXlbaprn4KFIUBDQ7h2sRzYPuwZI8A=
Subject key identifier:   E2:F3:78:75:A4:02:8B:AE:2E:6D:EF:29:BA:51:55:A4:C1:22:9B:EC
Certificate issuer:       /CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
Certificate serial:       14
Authority key identifier: 51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4vN4daQCi64ube8pulFVpMEim-w.roa
Signing time:             Tue 07 Oct 2025 01:24:35 +0000
ROA not before:           Tue 07 Oct 2025 01:24:35 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        157.5.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511E1CE89B3A407E5ACCEED8A55B2EF374FDF29C
        Validity
            Not Before: Oct  7 01:24:35 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=E2F37875A4028BAE2E6DEF29BA5155A4C1229BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:68:aa:d0:d4:8c:7d:f5:f7:f3:4d:0e:0a:
                    e6:b3:be:b5:7c:30:0b:88:13:47:cb:f3:ee:a7:3a:
                    c5:8e:0c:eb:df:c3:e4:5b:9f:d0:3b:d4:61:54:ed:
                    44:a6:8c:8a:32:e5:ea:8c:fc:50:db:e1:09:40:d1:
                    6f:0a:ec:12:65:bb:14:c9:77:fd:fd:af:a0:2c:f6:
                    9a:24:5c:1b:87:32:cb:ab:81:bd:99:36:e9:2d:b2:
                    de:c0:17:8e:a1:b4:cf:97:d3:14:62:ad:74:39:cf:
                    f1:e9:28:37:7a:f9:55:78:22:83:2f:c7:de:3a:b3:
                    72:62:83:dc:5b:b3:b5:68:94:59:7b:8d:71:71:65:
                    f3:0e:7f:cd:00:c0:2e:ac:e2:fd:74:d9:68:fc:46:
                    4a:ea:7f:90:a1:cb:24:e9:fa:86:b0:bf:b9:ad:43:
                    3e:29:2c:b7:da:e7:f1:49:25:22:21:a6:2c:af:4d:
                    31:2c:23:65:e5:e7:c9:e6:d5:3b:d0:4d:f6:98:c4:
                    67:63:e9:a9:4d:ea:a4:fa:1a:d3:b9:32:d5:54:07:
                    7f:ac:11:6d:b2:26:8f:31:14:7d:22:15:4f:f9:36:
                    1a:eb:fb:24:d5:27:a7:59:c0:8b:43:6e:07:c9:e8:
                    80:d0:7f:9d:11:03:70:3e:9c:81:e7:73:4c:f8:d1:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:78:75:A4:02:8B:AE:2E:6D:EF:29:BA:51:55:A4:C1:22:9B:EC
            X509v3 Authority Key Identifier:
                keyid:51:1E:1C:E8:9B:3A:40:7E:5A:CC:EE:D8:A5:5B:2E:F3:74:FD:F2:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/UR4c6Js6QH5azO7YpVsu83T98pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UR4c6Js6QH5azO7YpVsu83T98pw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4vN4daQCi64ube8pulFVpMEim-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:de:1d:bf:e0:a0:c7:f5:f5:69:00:c9:4a:56:1f:6c:62:80:
         7e:93:4f:52:a5:a4:12:1a:0e:de:ac:2b:23:91:42:bc:cf:fe:
         ef:d3:c0:7c:4b:71:4d:3c:84:60:b5:ca:2d:94:b4:bc:da:5a:
         ac:13:52:ff:ef:a2:8b:8b:f9:50:99:be:3f:cf:01:31:fa:29:
         73:52:58:0f:1e:cb:60:f6:b1:00:82:41:78:44:a9:27:08:ec:
         3d:5c:54:f6:05:9c:6a:d4:17:ad:be:29:2a:85:19:73:15:36:
         37:86:a8:60:dc:a5:05:ea:da:65:de:1c:80:ad:95:10:37:80:
         f3:59:db:ee:21:f3:c3:e3:dd:cb:32:64:f0:c1:d2:4b:e0:5b:
         ce:fc:93:4a:fa:1a:69:5c:0a:aa:7f:dc:b9:a9:4f:68:2b:61:
         c2:29:6c:0a:55:32:5c:68:7b:59:29:a7:34:c5:a9:25:97:20:
         7f:c1:80:31:24:7f:e0:db:7e:05:8c:89:a4:38:d1:b4:e5:78:
         9f:37:3f:10:26:4c:8d:e1:19:b2:a0:f5:a3:7e:95:11:91:71:
         86:f0:40:f4:cd:a9:55:3e:e0:ed:d5:7a:62:df:dc:22:9e:60:
         04:34:53:69:49:70:d8:dc:49:7f:1a:93:27:3b:a0:bc:ea:bc:
         9b:34:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client