Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/RWm_7MynRqed4Yn19wf8SevPXaU.roa
File:                     RWm_7MynRqed4Yn19wf8SevPXaU.roa (raw, json)
Hash identifier:          KEYH16bbFbGWKWaqI21oQxfT2oUiTnXrcrHOEjOCC6s=
Subject key identifier:   45:69:BF:EC:CC:A7:46:A7:9D:E1:89:F5:F7:07:FC:49:EB:CF:5D:A5
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       CB
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/RWm_7MynRqed4Yn19wf8SevPXaU.roa
Signing time:             Sat 01 Nov 2025 01:29:10 +0000
ROA not before:           Sat 01 Nov 2025 01:29:10 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        218.216.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:10 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=4569BFECCCA746A79DE189F5F707FC49EBCF5DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:55:2c:a2:15:f2:16:82:46:ec:40:0c:66:
                    2e:f3:38:9a:20:56:0f:b2:a1:c2:6a:4d:a5:24:3f:
                    d4:73:ee:13:65:5f:64:c7:6b:b7:63:7f:80:e8:c1:
                    c4:35:e5:2b:00:05:3b:04:aa:e0:f0:f2:9d:03:30:
                    f3:df:41:fc:9d:32:c8:30:61:9e:b9:84:c2:28:c6:
                    40:db:43:26:48:d0:c7:46:5e:3f:ff:98:fb:b7:5f:
                    a1:2f:72:65:b7:4f:5a:e0:ec:17:d3:62:b8:62:f1:
                    37:79:d8:fa:d8:47:7c:3d:cf:7c:f6:04:95:1b:bc:
                    07:cc:95:1f:39:b5:5d:79:04:84:33:41:29:7a:15:
                    ef:44:2c:22:61:7f:83:10:06:94:e0:e2:8c:c0:e1:
                    2c:c3:a0:15:b3:0e:85:44:50:17:cc:57:c6:f7:e3:
                    93:21:b8:10:25:63:a3:d9:c2:6d:fb:b4:17:d9:2d:
                    86:bf:0a:cb:d5:91:6b:36:43:80:ca:82:e2:c6:81:
                    14:23:bc:7c:f7:bb:ba:da:e3:25:01:4d:f9:41:8e:
                    f7:c3:d6:50:16:01:ef:09:23:0d:4e:5b:15:fb:31:
                    e7:53:82:ea:c0:54:2c:06:62:8a:f6:99:41:a2:6b:
                    c5:b1:92:6e:55:6f:ca:ee:f1:6f:5b:4a:e0:ec:a1:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:BF:EC:CC:A7:46:A7:9D:E1:89:F5:F7:07:FC:49:EB:CF:5D:A5
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/RWm_7MynRqed4Yn19wf8SevPXaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:32:1d:1d:c7:74:63:19:74:e9:ca:9d:81:e4:0b:90:42:49:
         60:27:aa:3a:15:40:2b:ea:fa:3f:33:b9:f1:d2:57:4f:0a:19:
         b7:0c:4d:e2:70:8c:2a:9d:e5:51:aa:a0:92:64:0f:ec:4a:bf:
         6f:09:11:ab:a3:93:2a:99:24:1a:79:4f:61:cc:2d:96:88:ad:
         55:81:52:3f:d5:74:99:81:14:36:5e:14:28:dd:25:59:37:88:
         9b:dd:67:ba:6d:c7:e7:93:71:22:29:2f:d8:41:c1:a7:f2:6d:
         9d:cf:25:17:f9:7d:1a:05:19:48:f3:42:b9:42:85:9d:f8:90:
         b7:f8:47:3f:0d:27:ed:d0:9d:06:6c:a5:d1:16:f9:a0:f5:88:
         df:be:cb:ab:79:41:68:5c:8a:31:6c:ab:43:f4:91:0f:9b:a0:
         35:e3:45:83:2b:0e:b7:9c:c6:e5:fb:81:e7:54:e5:61:86:ef:
         77:08:9f:a0:ac:7b:78:91:77:44:e1:69:28:97:84:5b:50:7e:
         22:69:76:7a:69:a1:91:05:a6:95:77:08:11:f4:5d:94:ab:76:
         68:43:44:ca:8a:b5:73:e6:1c:e9:70:a1:fc:6f:24:dd:c3:40:
         d4:54:4a:ca:53:e7:8d:2b:2f:dc:25:7d:e3:71:11:6c:d2:5b:
         e9:32:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:58:11 2025 by rpki-client