Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/W8d2_TI_Uile9jrfIENF-Dzd4m4.roa
File:                     W8d2_TI_Uile9jrfIENF-Dzd4m4.roa (raw, json)
Hash identifier:          DQYICp6nHddlqxi3UFuJClZh4bqJ5oN0lAxtubcBrXw=
Subject key identifier:   5B:C7:76:FD:32:3F:52:29:5E:F6:3A:DF:20:43:45:F8:3C:DD:E2:6E
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       6A
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/W8d2_TI_Uile9jrfIENF-Dzd4m4.roa
Signing time:             Wed 01 Oct 2025 01:29:45 +0000
ROA not before:           Wed 01 Oct 2025 01:29:45 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     131964
IP address blocks:        160.237.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Oct  1 01:29:45 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5BC776FD323F52295EF63ADF204345F83CDDE26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:e0:97:01:37:96:34:55:10:57:93:6d:07:
                    dc:b9:3c:22:02:90:9c:07:e4:cc:24:18:22:17:59:
                    01:e0:07:19:d2:ee:80:c6:51:c0:2e:96:74:25:98:
                    c7:bf:68:80:b8:b9:b7:8d:d4:0e:54:d4:8d:01:cd:
                    f8:87:64:ea:a6:b6:4b:8a:c5:0c:3c:2d:66:2b:8a:
                    d3:59:b6:d2:2a:68:1e:2f:93:28:02:2b:a9:d6:2f:
                    aa:bd:4f:a0:58:01:fa:5e:e2:1c:da:53:cf:a7:13:
                    08:b5:18:13:74:e9:16:61:f7:c3:48:0f:16:1f:28:
                    a7:8d:47:74:9b:1b:11:81:10:de:4d:83:42:f7:3e:
                    6e:8d:27:23:f4:96:64:87:0a:df:56:f1:0c:d5:64:
                    92:62:0f:90:01:2f:d7:8e:b3:a0:c0:de:6d:e9:29:
                    70:f8:0b:f8:1d:94:cb:0e:21:a1:13:2e:11:7e:36:
                    a8:b3:70:c0:d1:0e:35:09:e9:e5:21:72:09:70:71:
                    cb:ed:f9:9f:da:98:f0:5c:d9:95:89:5e:8e:50:ab:
                    13:b6:ad:5d:66:7d:e6:87:fa:3a:e1:fe:13:63:f2:
                    2e:f9:ef:39:f4:03:30:cb:fa:91:e6:0b:2b:da:b7:
                    6e:b3:4f:86:f8:a3:9d:2f:5b:40:96:31:2f:ac:06:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:76:FD:32:3F:52:29:5E:F6:3A:DF:20:43:45:F8:3C:DD:E2:6E
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/W8d2_TI_Uile9jrfIENF-Dzd4m4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:f5:de:8a:28:4c:a5:c0:df:5b:9e:30:71:3c:78:49:3c:e1:
         9f:b7:ea:b9:f4:00:aa:d7:e4:3f:f8:d4:ec:23:d2:e0:63:87:
         a8:e7:8f:20:df:9a:d4:2f:05:d0:07:c0:67:fd:34:f2:55:1e:
         22:d4:01:82:c9:4b:18:4e:ef:a7:c4:c7:60:8d:da:4f:ee:f9:
         1f:69:6e:e9:1c:21:7a:c4:ac:3c:8b:23:13:5c:ac:46:42:18:
         51:6b:e2:6b:67:6d:c5:be:48:b1:94:cd:ca:cc:7b:db:33:bb:
         bd:2d:15:7d:fe:20:38:da:4d:9d:5b:0f:63:a6:5f:5c:ee:aa:
         c9:2e:f8:ad:20:b4:74:10:d2:ec:1e:49:e7:26:70:be:6e:ea:
         69:70:54:69:c1:b9:61:12:55:dd:4f:d6:05:d1:f9:fa:70:01:
         f1:08:f3:07:74:9b:9c:b3:f1:6c:c8:aa:1f:b4:a7:4f:4e:28:
         a5:b8:3c:3c:cd:f4:bb:bb:a4:fe:cd:72:93:cb:7a:e8:a5:8f:
         33:6b:84:99:a4:94:21:dd:46:86:c9:41:40:1b:65:a9:b0:14:
         04:de:28:19:d7:a7:73:8e:1b:e1:81:82:22:93:68:c9:55:fd:
         22:22:64:2b:d4:34:07:dd:7e:15:91:4d:11:3f:46:48:84:cd:
         4b:b5:51:c3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy
MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI1MTAwMTAx
Mjk0NVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNUJDNzc2RkQzMjNGNTIy
OTVFRjYzQURGMjA0MzQ1RjgzQ0RERTI2RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANDq4JcBN5Y0VRBXk20H3Lk8IgKQnAfkzCQYIhdZAeAHGdLugMZR
wC6WdCWYx79ogLi5t43UDlTUjQHN+Idk6qa2S4rFDDwtZiuK01m20ipoHi+TKAIr
qdYvqr1PoFgB+l7iHNpTz6cTCLUYE3TpFmH3w0gPFh8op41HdJsbEYEQ3k2DQvc+
bo0nI/SWZIcK31bxDNVkkmIPkAEv146zoMDebekpcPgL+B2Uyw4hoRMuEX42qLNw
wNEONQnp5SFyCXBxy+35n9qY8FzZlYlejlCrE7atXWZ95of6OuH+E2PyLvnvOfQD
MMv6keYLK9q3brNPhvijnS9bQJYxL6wG8JkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRbx3b9Mj9SKV72Ot8gQ0X4PN3ibjAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF
F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD
d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzAvVzhkMl9USV9VaWxlOWpyZklFTkYtRHpkNG00LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAKDtvzANBgkqhkiG9w0BAQsFAAOCAQEA0fXeiihMpcDfW54wcTx4STzhn7fq
ufQAqtfkP/jU7CPS4GOHqOePIN+a1C8F0AfAZ/008lUeItQBgslLGE7vp8THYI3a
T+75H2lu6RwhesSsPIsjE1ysRkIYUWvia2dtxb5IsZTNysx72zO7vS0Vff4gONpN
nVsPY6ZfXO6qyS74rSC0dBDS7B5J5yZwvm7qaXBUacG5YRJV3U/WBdH5+nAB8Qjz
B3SbnLPxbMiqH7SnT04opbg8PM30u7uk/s1yk8t66KWPM2uEmaSUId1GhslBQBtl
qbAUBN4oGdenc44b4YGCIpNoyVX9IiJkK9Q0B91+FZFNET9GSITNS7VRww==
-----END CERTIFICATE-----
Generated at Tue Oct 21 08:04:36 2025 by rpki-client