Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/-bni3lOugm-1XhQa694FriJYuPw.roa
File:                     -bni3lOugm-1XhQa694FriJYuPw.roa (raw, json)
Hash identifier:          mirtm5NFxPLmjF4nuSYb2LChzX4JCjCLOtEwbxk+1B8=
Subject key identifier:   F9:B9:E2:DE:53:AE:82:6F:B5:5E:14:1A:EB:DE:05:AE:22:58:B8:FC
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       D8
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-bni3lOugm-1XhQa694FriJYuPw.roa
Signing time:             Sat 01 Nov 2025 01:36:13 +0000
ROA not before:           Sat 01 Nov 2025 01:36:13 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        27.113.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:36:13 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=F9B9E2DE53AE826FB55E141AEBDE05AE2258B8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:68:ed:ed:15:a7:ab:ae:70:fe:cf:4e:fc:
                    24:db:83:2b:cb:ad:36:33:f2:1e:6b:2a:7b:51:6e:
                    ed:b6:8a:10:71:0d:88:ff:c8:db:30:95:19:e3:f4:
                    87:8d:51:af:68:cf:97:68:34:96:dd:03:69:fe:a1:
                    4c:ec:48:99:e0:e0:e2:93:33:25:99:c5:9b:66:a9:
                    df:c5:2d:c6:3a:ff:92:b9:c0:b4:33:90:7b:cb:0b:
                    c0:df:5e:dc:f8:37:e2:64:8c:88:6c:b1:a7:ed:98:
                    ae:8a:b7:86:f5:2f:ed:b9:dd:fe:c4:b8:e0:f4:ed:
                    df:c0:e8:c1:c9:68:f2:4f:76:a3:25:4e:42:c9:46:
                    9a:0d:62:24:a2:d1:65:86:49:ce:85:4a:c0:d6:00:
                    b8:ad:f6:34:ed:8d:df:12:e5:13:4e:7f:01:11:58:
                    5b:77:0e:d9:4c:a8:26:16:5e:87:90:89:99:bf:b9:
                    2b:4a:4c:a1:b6:ce:f3:37:8a:82:77:29:05:34:e9:
                    d7:46:78:c6:cb:25:5a:a5:67:66:2b:87:c7:33:b2:
                    e9:fb:af:45:7c:23:af:cb:c8:64:ca:71:e1:ac:96:
                    fd:b8:36:c0:41:05:f7:41:09:1d:46:f6:ca:11:4a:
                    61:04:9a:d6:89:fe:32:35:3b:3d:5e:2c:c6:80:87:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:E2:DE:53:AE:82:6F:B5:5E:14:1A:EB:DE:05:AE:22:58:B8:FC
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-bni3lOugm-1XhQa694FriJYuPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:7d:9a:f4:70:2f:ba:b5:f8:eb:4a:5f:51:97:20:98:bb:
         a8:8d:89:3c:61:b5:90:10:32:db:ca:f0:83:b9:6e:ad:ba:cd:
         d2:a9:b0:21:45:18:da:bf:6a:e7:e6:1b:6f:ce:99:25:06:b3:
         52:28:c4:9a:50:4e:2a:29:96:f8:20:b4:44:c1:92:02:6b:9e:
         15:9a:a6:df:84:4c:5a:e6:08:21:07:9e:05:29:5c:3c:3b:db:
         12:d0:74:9a:ef:21:47:6f:ea:4c:08:99:a2:17:6a:58:98:fe:
         69:39:5c:0c:62:42:bc:d0:10:ed:3a:2d:a3:8a:16:fa:6f:ce:
         0f:82:8f:20:55:4d:a4:bf:1a:33:a0:17:0a:2b:13:e3:ad:1a:
         95:5b:1e:7e:28:f9:11:d0:86:53:93:31:d2:6a:af:38:8b:5a:
         7d:b5:be:b6:58:f8:9b:cf:9f:b2:70:16:de:74:ff:67:40:89:
         0f:4b:f6:7e:73:f6:f6:52:dd:76:9c:e8:f3:ac:f5:58:d4:df:
         a9:c6:9d:42:29:8f:67:3f:26:49:a3:75:2d:95:03:4f:eb:9a:
         1b:49:98:55:9f:68:12:25:c1:6b:7f:04:6b:91:86:06:63:26:
         2f:b4:71:70:04:7c:7b:d3:a5:f9:20:c1:a6:27:bf:96:8e:93:
         ea:96:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:34:17 2025 by rpki-client