Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZhPOFkKP8_YFmfLqcmqDJeIbAmI.roa
File:                     ZhPOFkKP8_YFmfLqcmqDJeIbAmI.roa (raw, json)
Hash identifier:          dCccfndavdwukfEp9kcaY+dXDKlXev79Q4yPy8EOjYY=
Subject key identifier:   66:13:CE:16:42:8F:F3:F6:05:99:F2:EA:72:6A:83:25:E2:1B:02:62
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0115
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZhPOFkKP8_YFmfLqcmqDJeIbAmI.roa
Signing time:             Sat 01 Nov 2025 01:33:54 +0000
ROA not before:           Sat 01 Nov 2025 01:33:54 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     55901
IP address blocks:        61.213.175.192/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:33:54 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=6613CE16428FF3F60599F2EA726A8325E21B0262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5f:49:70:7f:75:cf:54:b6:90:33:b7:28:81:
                    f7:9c:a0:ce:a3:23:ae:fc:8a:2d:32:fa:8d:c6:58:
                    a1:94:fc:be:ef:96:1d:6b:3a:c1:24:9c:c1:f0:b3:
                    ea:c4:90:3d:4b:eb:4b:7c:81:77:f8:eb:24:78:4b:
                    5b:f2:57:78:c1:e0:44:a5:95:eb:35:81:1b:8d:ae:
                    5c:a2:0e:68:d5:26:b2:60:2b:5a:7c:46:cd:59:ba:
                    a7:3a:79:e0:91:d5:82:1f:09:15:23:9c:69:b6:36:
                    e5:31:d1:ea:9a:2f:ff:59:d5:b3:ad:0c:5e:09:8f:
                    b8:16:1e:cf:17:2e:21:fd:a2:e3:93:77:23:94:c2:
                    46:43:dc:1e:71:76:c4:e8:b5:73:4f:6e:55:3f:91:
                    7c:34:2d:53:41:6b:a8:c9:c1:f7:28:7a:dc:6a:9c:
                    20:68:21:ce:f0:3c:ef:2b:58:de:6e:29:9a:d2:a7:
                    4c:d0:8a:27:40:76:fa:cb:79:58:f7:b0:26:49:7c:
                    8b:25:5a:09:c3:8d:8f:2e:fb:6d:aa:90:fa:da:fe:
                    e8:1a:46:2c:b5:c2:da:2b:70:eb:2b:b5:8c:1d:bc:
                    f4:3f:74:64:cf:c9:b8:6d:ca:f7:8d:fb:cd:e5:37:
                    2a:53:bd:5c:a1:ad:50:1d:31:09:de:3c:93:2f:bb:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:13:CE:16:42:8F:F3:F6:05:99:F2:EA:72:6A:83:25:E2:1B:02:62
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZhPOFkKP8_YFmfLqcmqDJeIbAmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.175.192/27

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:bb:ba:5e:3a:1c:a5:ca:ee:55:13:15:74:6d:78:d8:ae:
         54:e5:18:7e:f6:4b:b6:59:70:9c:4a:6d:ae:2b:aa:9a:ec:fc:
         ce:40:8a:57:94:b9:0b:75:f2:1c:41:8a:0c:2c:95:b1:74:d7:
         d3:41:fa:b5:72:df:a4:6d:49:0d:6e:9d:ae:1f:f3:11:81:c2:
         7d:e8:fa:43:98:ee:54:3c:1f:5d:5b:9f:0a:3a:f4:17:32:cb:
         f3:35:54:37:39:77:57:f9:8b:43:0a:a6:b3:ff:95:ec:c3:f1:
         8c:fc:af:28:5e:0d:7d:94:d5:b2:85:97:6d:3d:12:ac:af:69:
         14:e4:e9:25:dd:37:bb:1e:fa:a2:46:22:2e:a8:3e:de:9e:c2:
         c4:39:4c:37:c1:db:23:12:76:16:da:b4:f0:10:f7:fa:f1:ba:
         9d:f2:76:1d:58:ee:89:7b:38:2e:36:71:1b:dc:bd:ef:ea:df:
         d9:c8:81:7a:aa:c6:4e:f5:84:2f:92:e0:76:cb:10:3e:53:8c:
         57:81:5c:dc:f6:bf:47:a5:9b:af:54:61:3b:b4:6e:6d:99:a7:
         bf:79:c4:1d:83:ec:57:17:26:d5:6c:89:9d:96:28:6c:c5:76:
         b0:6e:d9:37:f7:68:12:2e:9b:7d:38:09:25:e0:68:bf:09:d7:
         fc:c7:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:17 2025 by rpki-client