Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/WyqPCPcdl9pVlJg0AA9AWJlYmJY.roa
File:                     WyqPCPcdl9pVlJg0AA9AWJlYmJY.roa (raw, json)
Hash identifier:          SACkgIMblXEd/1jWELtsjns4n1PVsvTnW3zb7+WTW8U=
Subject key identifier:   5B:2A:8F:08:F7:1D:97:DA:55:94:98:34:00:0F:40:58:99:58:98:96
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       75
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/WyqPCPcdl9pVlJg0AA9AWJlYmJY.roa
Signing time:             Sat 01 Nov 2025 01:31:34 +0000
ROA not before:           Sat 01 Nov 2025 01:31:34 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     10011
IP address blocks:        103.13.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov  1 01:31:34 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5B2A8F08F71D97DA55949834000F405899589896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:cb:3d:86:55:7d:bc:3f:67:6a:02:25:01:
                    c3:ba:32:6f:36:f1:bc:b9:23:35:4a:e9:f3:78:5c:
                    3f:89:a9:f8:37:1b:0b:87:eb:90:ca:ec:f2:28:2a:
                    f0:d7:6e:4b:bf:c9:a5:6f:09:a8:8f:e6:ca:8d:3b:
                    bc:63:27:f6:18:b1:60:4a:77:19:f5:3e:b1:e1:10:
                    28:6c:77:d5:a0:83:6d:93:bf:3b:cf:f7:18:08:97:
                    a4:40:93:06:26:ab:ce:a5:97:80:37:9f:2d:91:4c:
                    53:1e:18:42:e9:d4:63:06:4a:8f:dd:27:da:38:a5:
                    1b:bc:36:05:c2:08:62:35:f2:4b:b3:98:c8:1a:b8:
                    1c:d9:35:ac:38:16:a6:a8:0c:d3:a6:cb:8b:37:1c:
                    c7:f6:66:00:ca:40:7c:53:a7:1e:aa:34:5f:fe:42:
                    81:9b:07:5f:42:c7:fd:c6:be:02:98:e6:86:ec:2c:
                    15:df:b7:fb:b3:d8:47:01:f1:dc:e1:94:43:5c:21:
                    6e:97:9f:f3:1d:73:96:4b:11:d6:3c:ad:22:14:97:
                    8c:06:2f:d5:85:b4:ec:5e:c6:d6:bf:a9:f0:42:36:
                    e9:ef:64:ed:36:e6:af:79:ce:f3:c7:cb:be:29:4e:
                    b6:0f:b9:0a:01:b5:40:20:2a:25:37:d8:b2:86:c2:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:8F:08:F7:1D:97:DA:55:94:98:34:00:0F:40:58:99:58:98:96
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/WyqPCPcdl9pVlJg0AA9AWJlYmJY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:a8:41:07:fd:ec:50:b9:63:9c:2b:8c:c9:ba:61:f8:1f:
         61:c2:ae:9d:05:81:5c:94:19:39:7e:8d:c9:fa:3e:41:94:0f:
         6a:69:93:46:d8:1c:be:34:dd:66:7e:74:78:7b:f1:d6:26:14:
         4e:50:2a:6e:b6:f1:33:47:96:ba:b3:da:bd:3c:f0:3a:cc:dd:
         dd:e1:34:d1:89:59:21:96:19:29:3c:5d:7c:f3:10:3f:e5:9e:
         3d:6f:ae:b2:71:da:4b:80:bb:7d:33:f0:1c:6e:58:e7:a7:92:
         23:0e:4f:d0:9d:b8:eb:8f:05:63:1d:bb:1f:cf:c5:a5:99:2a:
         6c:5c:b4:6d:a8:88:df:e7:8e:12:eb:ed:1a:a1:c4:e9:b3:45:
         ab:1e:0f:55:4e:ee:43:a7:15:91:38:25:d4:f9:af:55:95:8f:
         3e:7f:2d:8d:ba:32:38:1a:14:99:ea:c0:78:6e:18:ea:9f:6a:
         f6:fa:2f:9a:d0:80:38:99:73:7d:08:71:d0:ee:16:5c:68:e9:
         0f:e2:70:63:f5:c4:53:10:08:00:5f:29:29:ca:1a:b3:7f:45:
         5f:f9:fa:49:5a:fe:f9:92:da:1c:81:f4:fc:bc:e5:35:9a:cf:
         67:65:f5:02:de:c9:f8:dc:58:25:9f:5b:11:b8:f9:3d:ca:6a:
         1a:71:4f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:22:03 2025 by rpki-client