Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
File:                     BXP8zteD0GBY_ROYRBjrwyMyhUU.roa (raw, json)
Hash identifier:          aXthhuIVRU4SEbAC0GgKLZn0sg1fU9cDyC74bXcYohg=
Subject key identifier:   05:73:FC:CE:D7:83:D0:60:58:FD:13:98:44:18:EB:C3:23:32:85:45
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FDF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
Signing time:             Sat 01 Nov 2025 01:31:47 +0000
ROA not before:           Sat 01 Nov 2025 01:31:47 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4063 (0xfdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Nov  1 01:31:47 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0573FCCED783D06058FD13984418EBC323328545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:ce:84:f9:2e:8d:7e:63:7d:07:26:6b:99:
                    5d:38:c5:50:13:6d:4a:d2:d0:97:92:c2:87:08:86:
                    ae:ec:73:70:5b:ef:d1:0f:85:fc:b3:97:44:e4:be:
                    7c:6c:85:c3:ba:45:87:38:19:a5:2a:61:42:5d:d1:
                    44:dc:d7:4e:10:b9:aa:7f:3d:42:35:36:d3:51:40:
                    00:36:b1:c2:ab:be:17:9f:6d:1d:26:74:8b:60:66:
                    04:e7:d3:6f:6a:99:d8:eb:b0:5b:62:8d:6a:9d:50:
                    94:77:62:25:09:af:7a:41:8e:ce:ac:d0:c7:63:e8:
                    c1:db:12:14:aa:f5:22:3c:19:aa:9d:0b:d8:69:aa:
                    da:57:15:84:80:af:86:3e:c3:b4:be:f9:f4:14:2c:
                    8d:73:ee:dc:b5:3b:74:f8:14:d5:0e:d4:b0:ac:32:
                    35:65:84:3a:7d:17:d3:b1:51:cc:b7:99:05:c2:82:
                    41:7a:d4:9f:33:46:6f:e5:a8:f6:1c:ba:20:26:ca:
                    1d:ed:fa:35:08:e8:8e:cd:11:56:7a:11:f8:5a:63:
                    63:bc:0f:41:10:b4:c8:2b:5a:d5:98:74:3a:b7:aa:
                    77:95:a0:1c:17:86:44:1f:e6:35:57:d4:6b:09:18:
                    b2:e7:a6:d9:fd:62:1d:af:ba:fb:81:cb:53:47:e7:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:FC:CE:D7:83:D0:60:58:FD:13:98:44:18:EB:C3:23:32:85:45
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXP8zteD0GBY_ROYRBjrwyMyhUU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:84:ad:74:f0:95:c9:c5:25:87:c6:db:b2:d7:9d:72:2e:
         aa:e4:49:d8:65:0e:1a:73:18:be:c2:1a:0d:99:b1:3e:cb:50:
         5e:b8:39:df:6c:4a:1d:9f:62:9f:06:d6:11:52:81:ca:af:26:
         cb:33:eb:59:65:f4:dc:99:6b:de:b0:c0:a8:6d:d4:b0:1b:fc:
         03:ad:c3:19:98:04:e9:a9:bb:ca:36:6a:be:43:86:80:b3:ed:
         1e:63:18:62:49:1a:ae:af:5f:0c:71:69:59:4f:cf:a4:25:c7:
         a2:e5:1b:ac:23:56:2a:59:3d:0c:6d:f4:ad:d3:c7:7c:c2:42:
         6b:fc:ed:c2:62:c0:38:ac:f7:fe:f1:d3:2f:ef:fd:0b:26:88:
         0d:bf:a8:17:06:74:13:22:76:c5:f0:8b:ad:96:fa:15:1b:95:
         8d:fc:a7:52:0e:46:f6:5e:b8:5f:09:83:4c:34:bf:c6:8c:cc:
         f5:a2:7c:86:31:47:ca:eb:74:e0:b8:6a:f5:b3:b8:86:69:cf:
         94:db:95:9a:48:e6:18:77:dd:5a:dc:84:3d:f2:46:3e:41:90:
         7a:4a:57:c6:d4:11:26:ea:0c:a0:2b:f2:c7:01:f8:13:f3:26:
         7a:23:fa:25:6a:f0:63:07:9e:28:88:29:d6:c4:0f:56:86:a7:
         af:2b:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:08:47 2025 by rpki-client