Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QteiyYPOvtQLP3wX9KW71vjIqHw.roa
File:                     QteiyYPOvtQLP3wX9KW71vjIqHw.roa (raw, json)
Hash identifier:          F2Ou44Ob4y9+wqaFfStqg8VtcAaJiBKzQR+slXgKsYY=
Subject key identifier:   42:D7:A2:C9:83:CE:BE:D4:0B:3F:7C:17:F4:A5:BB:D6:F8:C8:A8:7C
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       010B
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QteiyYPOvtQLP3wX9KW71vjIqHw.roa
Signing time:             Sat 01 Nov 2025 01:33:47 +0000
ROA not before:           Sat 01 Nov 2025 01:33:47 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     50601
IP address blocks:        124.40.52.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:47 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=42D7A2C983CEBED40B3F7C17F4A5BBD6F8C8A87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:c3:58:67:27:9e:d9:df:38:9f:09:01:57:
                    30:11:3e:e7:b9:b0:9b:7d:ff:13:07:99:17:bc:8e:
                    28:31:6c:ba:db:6c:43:46:76:56:58:5b:0a:0b:fc:
                    6d:17:ae:3d:76:03:f8:04:fe:57:84:18:ec:91:87:
                    a3:ab:6e:c1:9c:fa:bd:b8:2c:c6:72:b9:3e:4e:19:
                    18:ab:d2:a9:d6:7d:31:ab:b2:2f:cb:fe:df:ea:38:
                    08:95:d7:92:3c:40:83:c5:c5:3b:9e:9f:fa:0d:be:
                    7b:85:dd:5f:f2:7e:a1:2c:cb:95:bf:e6:d0:b2:d4:
                    8c:e7:d2:d7:32:1e:50:a5:1f:76:6b:5a:34:4f:6b:
                    2c:f2:15:9b:b9:c5:d2:7e:2d:a8:86:28:83:a0:e7:
                    5f:79:53:c2:34:8d:99:31:c5:cd:27:2d:4f:63:4b:
                    71:9a:d1:dc:78:dd:99:20:df:cb:94:e5:1e:0b:ca:
                    80:4c:5f:e2:b6:dc:98:0f:0c:64:88:07:4c:e3:be:
                    79:03:28:18:4a:fd:bf:b4:13:b4:ab:68:0d:d0:b2:
                    5d:f2:40:b7:81:fa:d3:1d:94:53:8e:6a:ba:5a:7c:
                    32:4b:b2:4b:1d:84:66:4a:ec:52:24:a6:d0:d6:cc:
                    61:f4:4a:af:a9:9a:65:81:1b:e6:f8:39:c4:26:ef:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D7:A2:C9:83:CE:BE:D4:0B:3F:7C:17:F4:A5:BB:D6:F8:C8:A8:7C
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QteiyYPOvtQLP3wX9KW71vjIqHw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.52.128/26

    Signature Algorithm: sha256WithRSAEncryption
         88:42:f2:48:28:9e:1d:c3:80:f1:6c:b7:2f:84:13:36:a0:19:
         12:eb:71:89:3d:96:8a:da:f6:4c:28:e4:d8:7b:60:4f:a7:87:
         18:ac:cb:4e:51:58:c1:c8:63:b4:99:5c:8b:ba:25:3a:96:f7:
         21:ad:be:02:19:16:08:c7:d9:06:93:ef:67:78:25:40:60:0d:
         3a:7d:6c:e5:6f:28:a2:a5:80:b2:de:10:95:3e:35:41:7a:b2:
         1a:b7:7a:2f:ab:bd:0e:69:05:0f:36:dc:05:1d:31:02:9d:5c:
         f0:62:ce:84:e7:1b:9f:4c:67:fe:44:4e:1e:b7:42:08:5f:d3:
         38:ef:16:2b:8e:05:88:7d:61:3d:74:92:eb:72:eb:d7:09:df:
         75:7b:2e:fa:c1:ca:e6:39:04:16:08:2d:df:9f:03:08:f9:46:
         f4:a2:04:26:0d:8a:c1:5a:10:d1:25:78:4e:0d:1c:5a:1c:04:
         d1:d2:48:1d:c1:53:1c:23:b3:5e:b5:30:72:b7:0c:fc:e3:d6:
         90:3a:19:98:af:0a:0b:fd:95:e8:06:b2:42:f0:d6:b3:fb:09:
         28:c2:8e:51:8b:ee:6b:bb:e2:ed:46:b7:17:18:28:0f:2e:c0:
         e1:3b:de:8d:db:d2:ec:3b:78:3f:79:30:6a:95:a3:c2:46:a5:
         f6:05:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:30:11 2025 by rpki-client