Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
File:                     tDtEdnGCh0-OA6CMt4-h47W-dGM.roa (raw, json)
Hash identifier:          pNz4/XD93NugqRvPfP1OkRiemAxaxwI0JIjV40Yoqhk=
Subject key identifier:   B4:3B:44:76:71:82:87:4F:8E:03:A0:8C:B7:8F:A1:E3:B5:BE:74:63
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       D0
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
Signing time:             Sat 01 Nov 2025 01:29:12 +0000
ROA not before:           Sat 01 Nov 2025 01:29:12 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        218.45.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:12 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=B43B44767182874F8E03A08CB78FA1E3B5BE7463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:d8:ad:50:09:63:30:cf:ac:b8:5c:aa:1c:
                    6d:63:71:2d:9f:ea:b8:e0:96:98:cd:86:4f:1f:fb:
                    8e:1e:1e:8b:21:9e:1e:1c:7b:86:ff:00:96:e1:57:
                    34:3b:74:9b:c7:9b:2a:24:52:7c:e1:7f:15:98:ec:
                    b4:a9:7a:22:b7:9e:30:b2:a1:64:35:3e:4a:bc:69:
                    f8:b1:46:23:a9:8c:d5:ad:07:79:7a:fc:a6:a2:98:
                    4d:36:0e:ae:37:64:08:78:84:8f:43:60:e8:d1:72:
                    50:29:e9:6e:d3:01:78:ae:20:a2:96:73:ee:89:6f:
                    9e:7f:81:21:7b:69:dd:57:b1:ec:94:d2:65:81:23:
                    f5:3f:d8:c1:0a:e0:f7:5f:92:36:d6:52:11:d1:9f:
                    56:0d:bb:70:c5:1d:87:3f:93:e8:6f:6c:28:0a:6b:
                    4b:7f:62:bd:d1:c4:1e:ec:4c:36:c5:d8:21:74:8f:
                    e4:7f:8b:33:2e:a9:10:74:59:6f:7c:72:0e:4f:21:
                    7e:6d:ee:1f:df:c2:29:15:cf:f9:a4:31:95:0e:82:
                    12:29:e8:a5:c9:75:46:18:9b:cb:99:c3:9c:b9:13:
                    b4:00:4f:d8:87:c6:db:92:ee:fb:d7:79:82:f4:ea:
                    6a:f8:81:f6:18:c6:29:6a:2a:7c:d5:68:de:07:67:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:44:76:71:82:87:4F:8E:03:A0:8C:B7:8F:A1:E3:B5:BE:74:63
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/tDtEdnGCh0-OA6CMt4-h47W-dGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:e2:ec:23:e2:92:4e:f9:e6:3b:fa:19:fd:1e:10:db:f9:
         17:32:55:ad:4f:db:13:ed:07:7d:75:57:4e:15:39:a3:df:bb:
         ae:a8:b5:24:c1:b1:c8:fa:e4:fa:57:63:dc:73:b4:fe:28:86:
         c3:06:f9:22:8f:34:da:dd:4c:f6:f9:1a:0d:24:9b:e6:91:b8:
         16:be:34:fa:6b:bb:c7:1a:2e:cd:28:c3:c6:21:b9:ee:cb:af:
         b8:1c:23:41:a3:82:7c:2e:41:51:07:95:95:82:d8:2d:78:f2:
         06:69:5d:11:1a:f9:0a:b0:c9:70:63:9a:9e:f8:87:4f:d1:27:
         a6:66:0a:5b:20:75:24:1c:58:fe:fb:0f:77:5f:39:e0:70:cf:
         eb:a8:22:ba:df:75:e9:00:66:5f:a6:7d:2c:7d:8a:5a:e8:d0:
         f3:b0:67:28:33:b5:26:d8:01:a0:da:7b:bc:07:63:4f:22:53:
         1a:98:b9:48:11:97:77:1f:a8:ff:73:95:9b:6b:4f:0e:29:74:
         79:89:6f:f9:1a:38:0b:bd:a4:13:31:6e:5c:05:84:91:bd:2c:
         71:1c:c5:e5:6b:0e:ce:ff:d6:44:fe:3b:12:a1:aa:c0:60:0d:
         76:f9:65:24:01:f5:65:3b:5a:f4:9d:2b:71:51:b5:b3:52:fd:
         11:2e:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:59:23 2025 by rpki-client