Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/gkjV29ZIV_01n6EHrPeW2OYUcM8.roa
File:                     gkjV29ZIV_01n6EHrPeW2OYUcM8.roa (raw, json)
Hash identifier:          Rr0p4X9jxlUbmCTjF3mIR3q1JkR9cB26QFxvXHOtmV0=
Subject key identifier:   82:48:D5:DB:D6:48:57:FD:35:9F:A1:07:AC:F7:96:D8:E6:14:70:CF
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       74
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/gkjV29ZIV_01n6EHrPeW2OYUcM8.roa
Signing time:             Sat 01 Nov 2025 01:31:34 +0000
ROA not before:           Sat 01 Nov 2025 01:31:34 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     10011
IP address blocks:        61.121.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov  1 01:31:34 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=8248D5DBD64857FD359FA107ACF796D8E61470CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:78:b6:b6:08:e6:af:2b:e8:7f:fd:e6:f3:
                    11:a3:c2:1b:38:59:54:71:8b:63:0a:fb:27:6d:46:
                    87:7c:18:00:bd:b2:a4:0d:e6:fc:64:21:03:6e:32:
                    0f:09:3d:2a:ac:31:3d:4e:c9:82:21:66:7d:1f:10:
                    18:3a:93:e2:72:cf:af:eb:b7:46:66:9d:34:76:f5:
                    f8:54:93:f8:7d:02:df:a7:02:6b:b3:cc:b1:91:08:
                    ec:37:98:c4:8a:a4:71:41:67:f0:aa:67:16:ce:a4:
                    ce:5f:fe:d5:97:c8:4b:65:91:06:1a:c2:04:14:d8:
                    d3:65:48:04:26:0a:4f:ed:49:af:03:6a:7a:d3:a1:
                    97:3b:66:26:92:11:a9:c6:35:b0:43:d5:df:14:32:
                    6b:44:78:32:f0:80:36:f8:91:5c:43:37:f3:f9:5b:
                    d4:52:84:21:aa:13:14:b1:fe:e7:8b:db:42:88:16:
                    d5:3c:53:a5:08:99:d8:ae:9f:e1:0d:b2:c6:93:db:
                    3f:4f:12:53:0d:17:7e:5b:98:f4:49:ca:c3:ad:8f:
                    8c:27:e5:36:e9:31:24:ce:f4:71:76:4e:3a:d0:53:
                    ea:a1:2d:96:10:44:89:61:60:27:dd:db:86:29:cf:
                    43:6d:52:82:b0:0f:49:fd:71:d2:4c:53:b0:02:a0:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:D5:DB:D6:48:57:FD:35:9F:A1:07:AC:F7:96:D8:E6:14:70:CF
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/gkjV29ZIV_01n6EHrPeW2OYUcM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:c7:6c:1a:c6:e9:41:85:07:f1:29:29:6f:ad:9c:7b:d7:9a:
         0e:61:dd:db:24:a0:45:df:de:d2:66:0f:06:98:b0:71:79:dc:
         5b:54:3a:a1:b8:da:e1:fb:56:33:0c:07:05:fc:f7:a7:bb:01:
         00:34:77:68:6d:17:74:f4:48:ee:fa:53:0f:43:f3:3d:c8:bf:
         cd:36:ce:12:01:b2:cd:1e:b4:54:8c:29:24:aa:60:69:72:9f:
         3e:c0:69:3d:fd:82:04:59:78:b8:b4:66:02:ff:db:e8:91:70:
         8b:a1:e5:8e:ca:8c:d7:47:9e:61:3a:3a:8c:57:b3:b2:84:da:
         c4:5a:07:ba:df:63:b1:84:65:eb:d8:c2:c3:5c:14:8d:02:fd:
         b6:1d:48:23:2d:ea:8e:48:f2:fb:e4:04:23:9d:1d:bb:1f:05:
         d7:1c:19:aa:93:ca:d5:76:fd:02:3a:eb:ef:53:19:c4:22:7e:
         8c:10:44:4f:80:30:b5:cc:c9:3f:f5:26:3e:4c:fa:a7:69:99:
         c5:4c:ab:0f:c4:80:b6:c6:d5:9b:01:64:e4:0c:9f:9c:a1:28:
         9b:29:e8:32:54:42:47:e2:55:fa:4e:2a:e3:c7:5f:75:98:e5:
         97:72:7a:6e:d6:59:ec:b6:ac:7a:13:be:a7:3f:e3:cd:d7:bb:
         51:5d:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:27:53 2025 by rpki-client