Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
File:                     zx63f-I7XMMSO_Dsik-zgEqtE_E.roa (raw, json)
Hash identifier:          sGZyFl3sd5TUDLU8XXIKntQa+0Z9pIg2rpJv/DloITs=
Subject key identifier:   CF:1E:B7:7F:E2:3B:5C:C3:12:3B:F0:EC:8A:4F:B3:80:4A:AD:13:F1
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       CD
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
Signing time:             Sat 01 Nov 2025 01:29:11 +0000
ROA not before:           Sat 01 Nov 2025 01:29:11 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9351
IP address blocks:        202.59.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov  1 01:29:11 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=CF1EB77FE23B5CC3123BF0EC8A4FB3804AAD13F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:07:82:55:0c:e5:00:da:da:2c:05:f8:e9:
                    d7:e1:22:42:ea:e5:8a:74:a2:f9:b4:1b:32:31:d9:
                    ad:e0:42:b6:23:4f:0c:43:18:9e:dc:92:79:9a:e2:
                    43:cb:1d:7f:cc:34:33:0f:96:6d:4a:d7:c5:e7:09:
                    6e:e3:20:87:e3:aa:47:ec:da:0b:49:85:12:6a:82:
                    2e:1a:c1:bf:10:35:4c:da:2f:f8:46:27:c3:f7:ae:
                    73:ec:44:5a:9b:36:fe:1d:b9:5e:f6:18:b7:28:6c:
                    57:a8:56:6a:9d:31:e4:29:2d:5f:da:28:b6:68:9a:
                    3d:63:07:68:b7:fc:ec:ff:49:e3:f8:ae:60:46:72:
                    c5:37:01:35:e5:a5:e4:ab:49:dc:e4:72:49:0e:18:
                    d9:00:51:ff:37:ed:9d:c8:ea:d9:a3:0a:a5:07:d4:
                    bc:7c:47:51:a1:94:df:92:45:fc:2e:21:ea:8d:f6:
                    68:1b:ef:a0:80:75:5a:e9:d3:c4:65:55:98:c9:32:
                    5e:7c:39:cd:ef:77:d5:f1:cd:03:93:01:ef:31:c5:
                    ee:0c:98:aa:66:42:ec:e8:d4:56:aa:3c:b9:35:ed:
                    0c:4b:54:b1:a4:a0:6f:b1:fc:d4:c9:34:ca:ef:b5:
                    56:41:a2:93:d5:5c:96:fc:4d:8e:f2:51:d6:ae:af:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:B7:7F:E2:3B:5C:C3:12:3B:F0:EC:8A:4F:B3:80:4A:AD:13:F1
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/zx63f-I7XMMSO_Dsik-zgEqtE_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:64:11:d3:00:81:87:ac:20:28:44:36:7b:c5:b9:37:57:
         b6:06:45:ca:85:4f:0e:bc:5e:f4:1c:f3:a1:35:df:cb:a9:23:
         89:88:a1:3d:71:8c:e8:86:b5:c8:1f:5c:86:e2:ec:ec:5b:a6:
         b5:c1:7f:b5:14:dd:45:37:e8:0a:a0:5d:b3:d4:c8:31:e8:0c:
         7e:2d:19:af:d2:fa:fe:01:d6:9d:f1:43:a1:b6:a9:82:53:8d:
         02:d1:b9:16:eb:98:11:d3:9e:54:01:da:f2:93:9f:24:5a:98:
         96:52:f6:1d:9e:ae:c8:b5:8b:51:94:44:e4:30:21:9f:78:90:
         5f:c1:10:d0:e0:cd:3c:5f:69:76:df:21:42:75:ff:45:79:9f:
         a2:67:51:f3:c2:ab:30:e4:8b:18:f3:43:92:25:26:0c:91:25:
         60:9d:2a:cd:70:f8:11:1f:b6:1d:3d:c7:10:3e:7b:99:41:cb:
         75:30:16:49:63:a8:61:6d:f1:71:a4:43:95:27:06:21:cc:41:
         0c:a2:d0:9f:19:cf:76:3f:68:be:80:df:5e:5e:81:5e:35:d5:
         bc:17:de:6c:8f:94:01:70:20:52:d9:f5:22:d5:5c:b1:94:f6:
         71:35:e6:3f:ac:d5:05:fb:1c:99:16:0b:77:67:db:c2:ea:10:
         0a:90:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:24:19 2025 by rpki-client