Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
File:                     bWYqoYT7Bos6OtRplPJHQQFpMtY.roa (raw, json)
Hash identifier:          IHK5D3Q4C3SlYchpPP3i22wk8HCro1RGg+CVJVupT50=
Subject key identifier:   6D:66:2A:A1:84:FB:06:8B:3A:3A:D4:69:94:F2:47:41:01:69:32:D6
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       CC
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
Signing time:             Sat 01 Nov 2025 01:29:10 +0000
ROA not before:           Sat 01 Nov 2025 01:29:10 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        124.40.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:10 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=6D662AA184FB068B3A3AD46994F24741016932D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:a7:6d:2a:31:2f:81:77:06:5b:d6:f3:d9:
                    42:fd:1c:37:8a:b9:c7:67:b7:66:8c:b5:d0:96:de:
                    bc:85:8e:64:30:08:f3:32:bf:09:a4:70:2b:73:78:
                    71:a9:ed:07:f0:f8:d9:74:cb:e7:a3:2a:56:08:44:
                    d8:06:a8:d0:12:ce:a7:2b:f9:5a:d7:d6:e7:14:36:
                    1c:19:fb:4d:06:1a:5a:b0:7f:f4:77:41:bd:b1:4d:
                    fb:ef:7e:c9:5d:ad:6d:15:cf:06:29:4e:7e:ed:8b:
                    39:40:b9:0d:65:f5:6e:b8:06:46:a8:74:a9:d4:45:
                    9c:11:d7:4f:3b:82:2e:a6:fc:6f:b1:3a:67:22:dd:
                    f8:35:06:ec:77:ec:02:de:1b:3f:88:fa:db:b6:91:
                    08:e7:39:54:31:a5:ff:ca:2e:e1:cc:40:28:7b:08:
                    d8:76:50:06:c3:e5:21:ae:37:f2:51:a4:02:89:68:
                    db:6c:10:f9:f4:f8:ba:9f:a4:56:70:a8:ef:f5:9e:
                    0b:91:6e:24:59:44:4a:ee:1e:ea:af:33:2b:54:a2:
                    82:53:80:75:10:8c:01:56:ea:0a:69:33:a7:6f:b9:
                    c4:73:8c:0c:06:ff:17:6e:8d:97:8c:b1:34:12:9a:
                    f0:18:22:e7:02:c7:3b:91:13:80:6e:98:f2:4d:ea:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:66:2A:A1:84:FB:06:8B:3A:3A:D4:69:94:F2:47:41:01:69:32:D6
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bWYqoYT7Bos6OtRplPJHQQFpMtY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:3e:b5:ba:f2:cf:15:e5:79:2a:20:48:b9:9c:70:82:0c:be:
         e3:da:6c:66:37:34:f3:80:ed:03:59:58:f6:7f:e5:df:95:41:
         2e:5f:e1:1a:e4:ea:a5:85:89:8b:8d:61:c5:95:80:d6:d4:ec:
         c6:76:4f:3a:ef:2c:08:94:e5:77:01:b4:14:5f:4f:0f:fb:6d:
         94:99:d3:8b:00:f5:55:82:5a:1d:9d:62:2c:3f:a7:fe:53:09:
         0a:17:a7:f8:75:26:1a:bd:69:01:33:0b:41:c1:3f:04:33:fe:
         ee:dc:ab:23:82:52:bf:fc:e1:89:e1:35:e6:e8:4e:3b:aa:9d:
         4a:3f:ff:c0:fd:d6:2a:2d:ee:35:3b:a2:99:f0:a2:e6:b8:98:
         fc:61:95:b6:2c:78:f8:96:f1:65:41:02:bb:51:0a:07:17:af:
         cf:a4:40:c0:c8:bc:cb:d5:87:c4:c9:24:a5:4d:17:7d:42:97:
         26:34:a5:6c:81:fa:90:2e:1e:d8:71:a2:c2:79:ad:e0:e2:27:
         71:99:14:f4:33:19:37:69:0f:a8:54:53:ff:d7:05:f5:09:fd:
         72:fe:64:43:49:c4:d3:77:c2:a5:3a:ca:a8:4e:fa:f0:94:d4:
         54:ec:d8:ca:de:69:a3:6d:3b:ff:3d:d7:de:74:5c:83:17:09:
         92:3f:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:24:09 2025 by rpki-client