Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/bECMtPsnLp46yINA6LLnR6WvqN8.roa
File:                     bECMtPsnLp46yINA6LLnR6WvqN8.roa (raw, json)
Hash identifier:          pMiUPRb2qPsRN3r4ZZo1PH3mV2XvFu0ws+wivu2xmUk=
Subject key identifier:   6C:40:8C:B4:FB:27:2E:9E:3A:C8:83:40:E8:B2:E7:47:A5:AF:A8:DF
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       C4
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bECMtPsnLp46yINA6LLnR6WvqN8.roa
Signing time:             Sat 01 Nov 2025 01:29:02 +0000
ROA not before:           Sat 01 Nov 2025 01:29:02 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        110.44.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:02 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=6C408CB4FB272E9E3AC88340E8B2E747A5AFA8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:f1:bc:1c:98:54:89:2e:36:4c:e6:ce:13:
                    3c:b4:db:7f:92:4f:7b:12:ee:cb:0e:5f:c4:68:d4:
                    49:fc:5c:63:0b:86:88:d7:b1:4e:d6:ad:03:3e:8f:
                    71:1d:bd:49:de:dc:0d:7f:59:be:e5:f2:2c:6b:2b:
                    b6:d0:7e:47:4c:02:5a:b6:d9:61:ec:ab:3f:2d:88:
                    90:54:9e:97:72:aa:62:ec:4d:af:6f:22:b6:2c:58:
                    f0:fe:22:33:b6:49:9c:e2:f3:08:dc:cd:0e:b4:2d:
                    08:d1:e4:bf:49:b8:30:90:10:0a:f2:86:f8:31:b5:
                    2f:6e:79:d1:ed:e1:a6:76:ea:1f:e8:0a:39:22:ea:
                    77:35:ca:17:1a:5f:6f:da:13:ea:08:fb:6c:9f:f9:
                    eb:9c:03:5b:0d:35:9b:0c:c4:25:c9:52:58:83:b1:
                    4d:79:ae:9f:a9:2e:38:fb:4a:ea:12:71:96:fd:62:
                    b9:ea:03:38:03:44:98:9f:c1:22:eb:ee:e7:12:b2:
                    df:fe:e2:90:d7:63:87:4d:f3:e4:62:7f:85:a8:e7:
                    bd:f0:56:b9:5d:6a:75:50:4f:3d:08:14:b2:fc:27:
                    23:33:9e:76:d7:8b:c6:61:67:bb:d3:38:4d:46:15:
                    8e:42:ac:ef:ec:56:1d:be:98:fc:64:dd:c8:2b:50:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:8C:B4:FB:27:2E:9E:3A:C8:83:40:E8:B2:E7:47:A5:AF:A8:DF
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bECMtPsnLp46yINA6LLnR6WvqN8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:11:f0:b9:95:a5:9e:43:9f:4a:de:2a:cc:3d:d8:b2:34:d6:
         e5:24:0d:02:7e:f9:a4:55:2f:a2:6d:53:fb:1f:73:3f:2a:5e:
         67:f3:b6:db:6a:70:98:f6:21:e7:45:10:7f:92:94:56:27:d7:
         a3:94:1e:b0:e4:18:8f:75:91:bc:4a:bb:c0:0b:dd:1d:27:27:
         b5:65:46:66:c6:99:af:22:68:f0:d4:1b:da:37:0f:9b:38:0e:
         3b:44:4e:8e:93:de:d3:2a:be:03:51:e0:60:6c:61:bd:7b:65:
         0e:ac:98:c6:4b:8f:b0:1b:a6:48:f5:bf:48:aa:80:a0:f7:c4:
         53:72:50:0a:56:b4:60:8e:ab:ee:fc:bc:4d:e7:89:b4:e1:76:
         1b:d1:4a:48:4f:45:48:ae:48:79:46:fb:03:bc:52:ea:83:51:
         27:d1:ed:d3:66:20:61:2e:2b:3b:67:4f:4f:a7:e5:e9:80:2d:
         56:2a:00:67:88:a3:3e:92:5c:22:41:b6:34:32:e6:82:05:86:
         e0:f2:0b:77:d4:f3:9b:e0:3b:44:de:b0:f9:56:18:10:f2:a1:
         37:98:20:57:47:1b:5e:6c:16:93:4f:81:fc:2d:bc:4c:21:40:
         0d:2a:eb:e2:a0:56:fe:2d:3f:d9:33:89:83:35:9d:22:c7:27:
         93:52:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:24:52 2025 by rpki-client