Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa
File:                     cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa (raw, json)
Hash identifier:          az91/TW7neaOosGcmRgu+OWLKUCto1S7i+7TPXijYaM=
Subject key identifier:   72:A4:56:44:8E:5F:1A:55:74:94:28:AF:DB:56:52:9C:CC:9E:78:AE
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       54
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa
Signing time:             Wed 01 Oct 2025 01:35:11 +0000
ROA not before:           Wed 01 Oct 2025 01:35:11 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        106.72.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Oct  1 01:35:11 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=72A456448E5F1A55749428AFDB56529CCC9E78AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:a3:2d:01:74:04:8a:04:ea:8c:e8:a7:c8:
                    68:ba:be:76:be:0c:2d:64:7a:3d:52:52:ea:a6:39:
                    b1:45:66:67:71:42:fc:c9:37:61:46:e6:3e:a6:19:
                    72:34:10:e8:97:d4:b2:3f:42:05:7c:d6:97:df:2b:
                    49:c2:b6:ea:3a:00:2a:e4:c4:d0:77:a9:91:9c:72:
                    9e:2a:aa:d8:ec:fb:01:d6:54:c3:34:66:67:33:33:
                    b0:9f:bf:5e:36:36:d6:88:19:62:16:a3:21:e6:fd:
                    ed:6c:88:77:c0:dc:da:3c:89:9b:07:5a:cb:26:77:
                    bd:e8:8c:fa:f9:b7:cf:07:e6:9c:12:93:e1:e6:eb:
                    52:19:2f:fc:4e:4d:c6:12:2a:75:a4:b1:af:fa:ce:
                    a1:d2:63:44:a9:f2:c2:e5:85:1f:bb:92:61:63:ec:
                    d2:86:aa:45:d6:a5:6a:4d:25:63:88:ca:ec:e1:35:
                    86:95:25:f9:a0:8c:6e:03:87:d3:87:c0:42:60:ac:
                    58:78:8e:59:e6:aa:54:b3:52:c1:db:70:89:f5:3e:
                    a2:77:6d:75:72:0c:89:0a:ad:54:2d:88:19:74:c1:
                    14:e1:9a:d4:bb:38:4c:f9:c6:40:75:fd:ab:ae:b6:
                    55:70:a5:38:51:27:b6:89:49:25:10:62:45:ba:f0:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A4:56:44:8E:5F:1A:55:74:94:28:AF:DB:56:52:9C:CC:9E:78:AE
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/cqRWRI5fGlV0lCiv21ZSnMyeeK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.72.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:da:81:5e:ac:0c:67:f9:09:7e:a7:8b:e3:59:d5:9f:52:
         90:fc:63:d3:e1:74:25:05:ff:95:ca:28:94:97:76:01:10:8f:
         5c:42:97:ec:e2:e8:81:ef:33:9e:8c:a1:5c:f6:12:f9:16:58:
         b4:7b:2a:fe:2d:ca:5f:76:23:c4:31:b5:9d:66:1c:b6:9a:c2:
         4a:83:17:d2:39:a7:69:98:dc:d8:e5:20:52:29:ab:e2:8f:a5:
         0c:dd:5a:51:04:ac:06:30:52:91:45:ac:15:5d:8e:04:aa:3f:
         89:72:75:6b:b2:29:46:fb:ad:ce:9c:5c:d3:28:86:70:46:e2:
         cc:8c:63:d4:d2:dc:e2:ea:24:8c:39:fb:1d:6a:f4:66:c3:8b:
         3a:6f:2d:07:5e:da:09:07:d3:e4:ea:e5:aa:71:12:3a:5f:8f:
         1b:67:36:75:71:23:1d:8c:e0:0e:39:63:ec:4d:0f:a9:29:0f:
         4a:bb:80:bf:a1:a1:f0:84:f7:22:4c:5f:01:b5:25:26:b6:6f:
         f4:f8:b7:33:3b:57:8e:06:df:81:79:72:34:e6:a3:7f:25:50:
         a0:a3:82:2c:7a:9c:15:90:c7:93:06:cb:6e:d0:31:27:c5:3e:
         3b:1d:e0:7e:b4:bb:6a:34:20:9d:7e:1c:51:8e:1a:eb:d6:99:
         11:78:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:20:24 2025 by rpki-client