Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/YltXz-V1rThFJdSAkDLbhW80gLg.roa
File:                     YltXz-V1rThFJdSAkDLbhW80gLg.roa (raw, json)
Hash identifier:          JIGqEoWJsnZ7PlsDTs1cWMt+vTzHVzaZsOixMk2E5jM=
Subject key identifier:   62:5B:57:CF:E5:75:AD:38:45:25:D4:80:90:32:DB:85:6F:34:80:B8
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       4B
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/YltXz-V1rThFJdSAkDLbhW80gLg.roa
Signing time:             Sat 01 Nov 2025 01:35:02 +0000
ROA not before:           Sat 01 Nov 2025 01:35:01 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131923
IP address blocks:        120.50.192.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov  1 01:35:01 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=625B57CFE575AD384525D4809032DB856F3480B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:88:01:6b:37:fc:04:96:0a:a5:04:2e:4a:
                    41:e2:1f:9c:68:a4:a6:67:54:67:22:2f:50:04:44:
                    93:30:70:5f:26:8f:5b:3d:4b:3f:16:bd:ca:07:67:
                    de:f6:01:7f:3e:83:d1:5b:cc:ae:25:84:50:07:1d:
                    2e:fb:5a:77:23:16:04:bd:18:6f:62:02:e3:5a:5e:
                    05:e8:57:cf:8a:bf:95:58:30:5e:68:b8:0d:f8:e6:
                    63:53:51:84:eb:81:cb:1f:0d:db:b2:21:af:1a:8b:
                    0a:86:20:84:8b:91:18:61:4f:27:13:a3:a0:63:2b:
                    cd:64:30:69:11:a6:15:07:4c:9b:71:4c:f0:31:44:
                    cd:76:c7:d9:27:88:e3:e2:cf:e2:76:80:be:ac:ce:
                    c4:fd:82:97:4e:88:ec:24:cf:fe:4f:29:7c:e0:b4:
                    ce:18:4c:99:bd:3d:90:19:94:06:c5:fb:f3:83:7a:
                    4b:4c:c0:54:cf:08:0a:11:e1:f6:17:ba:be:8b:be:
                    02:8d:04:b6:da:c3:7a:33:1e:12:a9:53:b4:44:02:
                    34:c9:87:0d:4e:1e:8a:39:0d:63:9c:64:c5:8f:8a:
                    30:6f:84:e9:12:d9:00:f5:ce:69:67:c9:ed:ba:fc:
                    46:c8:c5:4d:c8:cb:22:f5:fc:03:92:4d:de:7a:ca:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5B:57:CF:E5:75:AD:38:45:25:D4:80:90:32:DB:85:6F:34:80:B8
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/YltXz-V1rThFJdSAkDLbhW80gLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:92:ea:50:a1:e2:7b:34:ff:c2:2e:b6:99:bd:5b:10:40:3c:
         cb:2f:c5:23:cd:c7:b4:b1:ff:cd:0d:25:16:5e:d8:e7:87:ae:
         64:67:13:c1:3c:01:c3:a8:36:89:56:6a:18:84:b8:c9:69:df:
         ae:3f:c7:3c:e6:bc:bc:cc:f4:22:07:7b:3b:84:58:12:82:cd:
         6b:63:ed:1e:3e:4d:a2:09:d2:eb:ab:df:20:8e:34:98:01:1b:
         e5:c0:e8:aa:dd:92:58:75:74:ee:ee:9f:d8:44:f3:98:58:9a:
         8a:6d:2c:7f:5e:97:eb:a3:86:e5:fb:2f:0d:8b:f0:5b:50:a3:
         7f:dd:4c:a2:25:12:08:54:7d:1c:14:8f:36:fb:89:51:bb:df:
         c6:2d:4d:43:32:d5:9e:7d:aa:40:15:7a:14:fe:b7:4e:5d:7b:
         76:e0:d1:7e:36:f0:51:ee:02:85:cd:ab:d0:08:32:50:1e:48:
         3c:64:3f:14:44:34:c1:b5:8f:6c:98:7e:11:f5:69:d1:55:f0:
         c2:6e:ad:17:10:f3:38:6c:fb:bc:bb:0f:a1:b0:8b:26:3f:df:
         6a:cd:0e:34:4d:09:33:52:c1:c8:f0:2b:31:38:14:f3:99:b7:
         a0:f1:a3:8e:c4:c1:91:33:dc:b3:61:1a:41:84:be:55:0e:aa:
         30:5f:fe:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:10:55 2025 by rpki-client