Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QkzAsqwVjiVcyVBP7ZaTQ55RVzg.roa
File:                     QkzAsqwVjiVcyVBP7ZaTQ55RVzg.roa (raw, json)
Hash identifier:          hgA0BR/8qRZ++HL7LMMmP9gqSH1w1uQXwWycOb5LpRM=
Subject key identifier:   42:4C:C0:B2:AC:15:8E:25:5C:C9:50:4F:ED:96:93:43:9E:51:57:38
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0109
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QkzAsqwVjiVcyVBP7ZaTQ55RVzg.roa
Signing time:             Sat 01 Nov 2025 01:33:46 +0000
ROA not before:           Sat 01 Nov 2025 01:33:46 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     133900
IP address blocks:        124.40.50.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:46 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=424CC0B2AC158E255CC9504FED9693439E515738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:0a:50:3f:4a:d8:fc:d3:77:e6:66:41:86:
                    77:75:48:67:ff:a5:af:11:58:d1:7e:da:08:60:a8:
                    42:26:f1:fe:8a:3f:50:bb:25:eb:a3:c5:59:58:18:
                    62:8d:a7:bd:6c:9a:60:36:e4:4c:c5:f3:6f:05:1c:
                    e8:88:52:72:51:94:cd:11:fa:5d:2a:5b:46:a4:18:
                    85:f9:dc:06:b3:d1:bb:b0:57:a9:1e:2f:31:12:77:
                    91:97:6d:45:5d:e0:20:aa:61:c2:23:3f:06:eb:de:
                    68:d3:ba:54:34:3b:54:3c:fc:c4:82:11:4b:c0:8f:
                    99:4b:3f:f0:a6:cb:49:05:84:ca:45:95:54:7a:f2:
                    14:82:64:9a:07:e5:56:b8:4b:8e:63:65:17:dc:5f:
                    5d:e4:64:26:9d:eb:03:2b:ad:6c:39:01:33:0d:89:
                    b4:3c:48:2e:93:2c:41:b4:ab:a3:ec:65:4d:65:15:
                    a9:99:51:0f:73:f6:ae:74:f0:06:a1:72:b9:34:2e:
                    41:a4:53:8c:1b:3d:a4:ca:25:45:b1:65:20:40:42:
                    9e:72:73:b5:11:53:60:aa:80:ee:01:ad:8b:af:34:
                    9b:fb:53:35:35:6e:e4:f5:bb:7f:54:39:43:86:22:
                    50:b8:46:63:73:0e:22:e5:3c:ed:49:df:5d:bc:39:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:C0:B2:AC:15:8E:25:5C:C9:50:4F:ED:96:93:43:9E:51:57:38
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QkzAsqwVjiVcyVBP7ZaTQ55RVzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.50.0/25

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:15:ac:d5:8e:74:40:6e:e5:75:ea:d5:8a:c0:0e:95:35:
         2b:90:90:f5:9b:2d:af:50:09:26:9c:ac:38:21:7a:7b:98:e2:
         98:56:9e:02:93:34:21:c7:dd:f1:9d:af:8f:2f:5d:01:ad:08:
         20:d9:8f:b9:43:bd:99:3b:50:6f:06:c4:0a:d2:62:17:8a:39:
         82:16:d6:34:da:99:11:e5:2a:78:ea:fd:ab:76:30:6c:1d:42:
         30:da:b7:23:36:bd:be:0f:a0:79:ab:f9:8e:93:1e:8d:5b:fb:
         69:2e:fe:d1:d5:c5:a7:3a:10:a5:0c:47:ff:9e:8e:99:79:bc:
         4f:c4:6c:71:1c:97:de:71:36:17:70:6d:63:13:10:62:ed:67:
         09:7c:23:ed:7b:7c:52:a8:bf:a9:6c:8d:fc:c5:1d:63:0e:e8:
         6c:fc:13:2c:da:6b:e5:94:56:36:65:ba:97:83:96:64:77:1c:
         4a:b9:b3:1f:13:36:04:e0:21:78:80:16:51:03:c1:4e:38:7f:
         e2:d2:6d:2d:58:94:41:f4:96:ab:fd:1c:66:81:81:f9:ac:f1:
         d7:b7:83:62:36:35:e2:f7:2e:26:36:e6:4f:5f:81:df:05:69:
         4e:9a:30:cb:24:9e:a9:48:81:25:ed:1e:9a:6c:c5:a6:4e:94:
         3a:fb:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:13:19 2025 by rpki-client