Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/hccmdFNYNLSfMbeZKxTCTRJfO0Y.roa
File:                     hccmdFNYNLSfMbeZKxTCTRJfO0Y.roa (raw, json)
Hash identifier:          1SZsWn3MQ9RlCm7RLxwLNXGYc3X0e8kQTW68K7dDGdQ=
Subject key identifier:   85:C7:26:74:53:58:34:B4:9F:31:B7:99:2B:14:C2:4D:12:5F:3B:46
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       CF
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hccmdFNYNLSfMbeZKxTCTRJfO0Y.roa
Signing time:             Sat 01 Nov 2025 01:29:12 +0000
ROA not before:           Sat 01 Nov 2025 01:29:12 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        61.198.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:12 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=85C72674535834B49F31B7992B14C24D125F3B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:54:16:b2:47:f3:9d:28:7b:f9:2c:9a:21:
                    7c:0a:ad:07:07:14:55:52:35:d4:2c:8f:bb:0c:08:
                    0c:0a:9a:ba:07:33:3d:62:57:0e:c2:7d:01:9b:85:
                    7a:71:53:9c:c8:1f:60:0e:f6:37:ce:ad:9a:ea:a2:
                    59:a0:c4:70:bf:2c:40:6c:42:30:28:80:c5:b5:e3:
                    81:f1:25:8d:1e:32:b3:5b:34:57:0c:02:ad:cb:b9:
                    b0:99:3b:47:2e:2c:8e:28:cf:5b:2a:56:16:b5:13:
                    e0:49:98:15:72:41:6c:f4:9e:ae:a3:88:05:01:8f:
                    b4:b0:03:5e:7e:ff:25:56:68:f4:cf:c4:e4:e3:d7:
                    f6:b0:be:07:b8:ab:6d:4c:31:8f:00:6f:b3:35:3e:
                    5b:4a:84:de:4b:ac:dc:bc:68:11:fc:80:ad:5f:1d:
                    30:28:e8:dd:86:e4:73:d2:39:0b:eb:e8:a0:59:1e:
                    6f:90:fb:12:a5:d6:98:fd:0a:e6:59:39:10:62:88:
                    96:ae:b2:75:ce:c8:8b:f4:d1:58:a3:0c:71:3b:3f:
                    79:ba:a4:38:c8:76:44:3f:8e:f4:fa:84:d2:94:59:
                    76:ff:c6:f8:9c:77:95:37:46:37:89:85:dc:17:ac:
                    1c:1f:ae:c0:df:75:0f:98:a9:d8:b6:93:7b:71:f0:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:26:74:53:58:34:B4:9F:31:B7:99:2B:14:C2:4D:12:5F:3B:46
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hccmdFNYNLSfMbeZKxTCTRJfO0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:79:7f:d5:e7:20:96:0d:48:e5:6c:ef:dd:ac:98:3e:dd:
         d9:19:94:41:d4:50:ee:7b:88:bf:36:c6:c2:9b:02:81:54:ab:
         29:65:37:21:a5:09:1e:b9:90:68:b5:2b:ad:09:31:f7:61:81:
         9e:a5:2b:1d:af:74:fb:6a:07:b7:17:02:ec:80:b9:49:90:ef:
         e2:39:d7:c3:db:c8:2a:df:cb:cc:cc:e1:9a:60:cf:1a:2c:98:
         3c:6a:e6:b4:2d:06:04:11:26:34:54:5c:36:0e:c5:f7:9e:04:
         53:9b:6e:7e:95:a9:36:f4:f8:f8:ef:05:17:c3:ea:6b:0a:c6:
         26:07:c4:60:38:9c:9c:c1:7b:8f:5b:40:6e:5c:d5:df:7b:cf:
         95:6a:18:d8:26:11:87:64:cf:6c:d1:68:5c:72:13:32:2f:f0:
         cf:9e:9c:32:f9:3a:83:b6:04:8f:c7:d6:11:16:8c:89:73:be:
         7c:a6:06:2e:62:97:ec:0d:47:70:d7:7d:a2:07:3e:07:66:06:
         d8:4c:80:ae:79:47:0b:67:c9:ed:c1:41:73:ac:68:8a:1a:6d:
         34:1b:4f:1c:0e:5e:d2:4e:ea:40:02:5a:06:f1:17:4c:86:59:
         20:5b:3c:3e:c0:c0:12:10:6c:e7:30:77:c7:08:b8:27:6f:c7:
         0f:d2:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:59:44 2025 by rpki-client