Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/Z_19UxI3SAhXllcnydkinHwVNeE.roa
File:                     Z_19UxI3SAhXllcnydkinHwVNeE.roa (raw, json)
Hash identifier:          1Fz7PiDjf4Rt3tClQ8+0zesN5J9kqC/iS/akijaoYlk=
Subject key identifier:   67:FD:7D:53:12:37:48:08:57:96:57:27:C9:D9:22:9C:7C:15:35:E1
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       39
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/Z_19UxI3SAhXllcnydkinHwVNeE.roa
Signing time:             Sat 01 Nov 2025 01:32:50 +0000
ROA not before:           Sat 01 Nov 2025 01:32:50 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     45691
IP address blocks:        103.37.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Nov  1 01:32:50 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=67FD7D531237480857965727C9D9229C7C1535E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:92:e9:d8:0c:e0:7a:28:80:9a:d8:18:b3:
                    ae:5b:2c:ac:64:4b:62:fd:7e:98:59:c2:54:a7:21:
                    c9:fb:fe:de:4e:77:5e:dd:d1:8e:03:87:7d:57:a8:
                    b7:56:8c:0d:16:b3:77:95:72:05:ef:22:d5:05:8c:
                    a3:aa:0a:ac:ce:38:18:5a:58:7c:c3:4a:8d:b4:26:
                    25:bc:fa:fa:b3:b1:8f:40:b3:9c:b0:53:56:a0:03:
                    93:a6:36:75:47:bb:96:e1:19:c2:e5:bd:30:80:fb:
                    96:bb:76:ae:8d:be:04:f9:f7:ce:89:2d:67:ec:41:
                    d3:3c:dc:ef:d2:94:62:1d:c5:44:72:c2:55:0e:87:
                    4f:87:f3:a9:2c:eb:49:9b:b6:22:45:38:fe:06:3d:
                    f1:d8:32:f2:23:4b:10:85:6c:ac:4e:66:6e:29:8f:
                    fc:7d:76:03:30:09:f1:c9:89:1b:db:2a:3a:dc:82:
                    94:08:40:d5:07:73:9e:c6:78:87:7f:7b:09:91:88:
                    a4:ee:98:86:f2:ac:04:36:99:53:08:bf:c1:e1:95:
                    23:b2:9c:38:7f:19:d2:05:93:8e:58:73:c5:0e:18:
                    51:22:65:7e:e7:d2:76:f0:d7:9c:d7:40:8e:8a:18:
                    77:d3:30:35:6c:06:a5:ad:9e:1a:49:40:96:90:ce:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:7D:53:12:37:48:08:57:96:57:27:C9:D9:22:9C:7C:15:35:E1
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/Z_19UxI3SAhXllcnydkinHwVNeE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:8e:f0:b0:21:fa:00:97:fb:65:21:bb:fc:43:83:3e:2c:
         4d:5d:9c:0f:84:02:fe:0a:98:51:c3:76:ce:42:46:7d:00:2e:
         5d:64:fd:17:27:f2:09:de:8a:1e:46:39:01:ec:41:7d:09:24:
         b6:91:e7:37:d2:ad:d0:18:1d:e0:08:54:1a:1a:2e:e4:d8:07:
         eb:c9:94:aa:38:3d:a4:4a:d9:4d:51:fb:59:8f:37:bf:60:d4:
         98:68:5f:34:80:b8:2c:33:2d:3d:ad:27:92:c6:f6:67:a5:b2:
         72:c9:ad:fb:a9:a7:ef:6f:62:cd:5a:31:c2:c1:fd:19:03:78:
         0f:de:7c:3d:bc:94:f6:9f:ad:bd:0b:7b:16:43:9e:3a:00:ef:
         10:ef:32:d5:a7:a3:e9:ec:2e:a1:55:45:67:46:bc:f6:e7:cf:
         82:12:c8:02:44:85:f4:cf:37:a8:5c:d7:0d:68:a5:8e:7c:d2:
         23:82:87:93:0a:bf:54:c5:56:0a:9e:a6:42:9a:c9:ef:2f:d6:
         89:2e:23:99:b3:5c:48:4c:5c:9b:6f:59:bb:43:a6:91:85:62:
         3e:0a:93:18:11:ce:c7:8c:f6:b3:80:7e:37:f7:c6:f2:dd:d2:
         be:4e:d1:0d:9a:72:38:47:29:9d:19:44:d4:06:5a:92:a8:c5:
         d1:dd:50:ab
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDU3
QjNCOERCMzE4NTk4QjY2RjRERDY2MThDQjE5QTA4NTY1RkZEMB4XDTI1MTEwMTAx
MzI1MFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNjdGRDdENTMxMjM3NDgw
ODU3OTY1NzI3QzlEOTIyOUM3QzE1MzVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANzzkunYDOB6KICa2BizrlssrGRLYv1+mFnCVKchyfv+3k53Xt3R
jgOHfVeot1aMDRazd5VyBe8i1QWMo6oKrM44GFpYfMNKjbQmJbz6+rOxj0CznLBT
VqADk6Y2dUe7luEZwuW9MID7lrt2ro2+BPn3zoktZ+xB0zzc79KUYh3FRHLCVQ6H
T4fzqSzrSZu2IkU4/gY98dgy8iNLEIVsrE5mbimP/H12AzAJ8cmJG9sqOtyClAhA
1QdznsZ4h397CZGIpO6YhvKsBDaZUwi/weGVI7KcOH8Z0gWTjlhzxQ4YUSJlfufS
dvDXnNdAjooYd9MwNWwGpa2eGklAlpDO5IkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRn/X1TEjdICFeWVyfJ2SKcfBU14TAfBgNVHSMEGDAWgBSNV7O42zGFmLZvTdZh
jLGaCFZf/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxOTkvalZlenVOc3hoWmkyYjAzV1lZeXhtZ2hXWF8wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalZlenVOc3hoWmkyYjAzV1lZeXht
Z2hXWF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTk5L1pfMTlVeEkzU0FoWGxsY255ZGtpbkh3Vk5lRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnJVgwDQYJKoZIhvcNAQELBQADggEBAKdAjvCwIfoAl/tlIbv8Q4M+
LE1dnA+EAv4KmFHDds5CRn0ALl1k/Rcn8gneih5GOQHsQX0JJLaR5zfSrdAYHeAI
VBoaLuTYB+vJlKo4PaRK2U1R+1mPN79g1JhoXzSAuCwzLT2tJ5LG9melsnLJrfup
p+9vYs1aMcLB/RkDeA/efD28lPafrb0LexZDnjoA7xDvMtWno+nsLqFVRWdGvPbn
z4ISyAJEhfTPN6hc1w1opY580iOCh5MKv1TFVgqepkKaye8v1okuI5mzXEhMXJtv
WbtDppGFYj4KkxgRzseM9rOAfjf3xvLd0r5O0Q2acjhHKZ0ZRNQGWpKoxdHdUKs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:41:33 2025 by rpki-client