Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WwwoA7rkj-B-X6JyoeFseCE0NJM.roa
File:                     WwwoA7rkj-B-X6JyoeFseCE0NJM.roa (raw, json)
Hash identifier:          Kjy4OaxXsvFNRcqSofVymi1qIGvm23m9+RbzPSE7Mt4=
Subject key identifier:   5B:0C:28:03:BA:E4:8F:E0:7E:5F:A2:72:A1:E1:6C:78:21:34:34:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FDB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WwwoA7rkj-B-X6JyoeFseCE0NJM.roa
Signing time:             Sat 01 Nov 2025 01:31:44 +0000
ROA not before:           Sat 01 Nov 2025 01:31:44 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4059 (0xfdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Nov  1 01:31:44 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5B0C2803BAE48FE07E5FA272A1E16C7821343493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:90:e1:b5:b8:cb:44:be:a9:f2:3e:96:c4:
                    13:e8:0f:61:f9:fb:c1:86:4f:b2:b0:fe:f3:35:b5:
                    27:05:4a:a7:3b:45:0f:f8:9b:56:3c:5b:38:9d:f4:
                    a8:c9:a9:02:79:8d:2e:0d:0c:7e:b7:dd:58:d9:24:
                    0d:4c:0d:9e:c4:1b:4c:d1:eb:fd:e5:10:00:5c:94:
                    68:16:76:1f:60:07:9c:27:16:34:e3:b9:d0:d8:5a:
                    99:6c:4a:f0:c0:7c:1d:b5:e6:08:1a:04:e4:28:59:
                    e7:e6:ae:bc:6e:aa:8d:0a:d4:fa:f3:0b:96:16:97:
                    59:db:4f:a7:a3:4c:5e:81:44:50:4d:a8:5d:8c:07:
                    5a:fb:ae:27:dd:67:71:08:ff:a7:d0:fe:50:80:61:
                    6b:5e:0f:c4:6f:f1:1e:74:0e:cd:eb:46:f1:8a:a8:
                    33:0e:68:cb:b0:7f:f4:c4:82:7e:d3:53:0b:ba:e7:
                    5b:a8:c9:21:dd:18:24:aa:53:1b:c5:1b:57:8a:14:
                    5c:81:bd:63:30:61:f4:5a:e8:94:00:2b:87:6e:d1:
                    c4:c5:ce:6f:4e:87:40:42:e7:78:a2:ea:e5:a4:46:
                    8c:f6:7d:e2:c9:4b:cc:2f:2e:b7:35:3e:66:32:64:
                    a8:44:bf:e0:af:a1:cd:c6:8d:e8:38:01:7d:15:10:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:28:03:BA:E4:8F:E0:7E:5F:A2:72:A1:E1:6C:78:21:34:34:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WwwoA7rkj-B-X6JyoeFseCE0NJM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:37:59:83:f0:72:1a:64:90:40:1c:f8:1e:25:3a:1f:71:ab:
         18:a1:b6:ad:12:69:c1:a3:97:3d:39:d6:31:6b:fd:5b:6e:d1:
         72:75:e8:a9:da:62:9f:06:60:75:10:40:99:1b:ab:23:bf:fd:
         f6:e2:99:f5:a0:cc:d4:b9:00:51:64:2a:fb:9c:ba:aa:d6:6f:
         4a:f4:b2:c1:ab:4d:ce:ef:69:d3:9e:cd:ce:dd:62:ac:8c:1b:
         8b:87:a8:0f:f2:cd:bc:ec:f7:67:a0:0a:83:d7:4c:b8:f4:e6:
         01:2c:9b:3a:6c:29:62:de:95:b2:30:0c:ef:3d:03:9b:58:8a:
         cd:1a:4f:1d:27:76:1f:cd:b2:3b:d1:87:ef:d0:73:66:d5:09:
         d8:90:89:32:d2:90:b4:c9:5f:35:94:9c:3c:0c:32:af:0f:38:
         44:5d:f3:ab:9a:80:91:59:9d:42:bc:87:aa:cd:44:4f:64:6b:
         71:0d:b2:75:ce:01:1c:9c:22:85:90:c7:c3:5f:00:81:dd:77:
         09:cc:00:9d:e4:8a:62:70:a0:ce:7b:f7:0b:23:85:40:5f:3f:
         cd:19:91:18:11:ee:06:4a:8c:94:4a:7c:e7:7e:8c:49:72:44:
         54:29:d7:f3:4a:69:7b:fb:a8:88:40:a3:03:84:c6:c8:7c:9d:
         1d:ca:10:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:07:20 2025 by rpki-client