Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/700FbsAaS-CTS_OVMq8ZPyWf0ok.roa
File:                     700FbsAaS-CTS_OVMq8ZPyWf0ok.roa (raw, json)
Hash identifier:          nOlsj0JMBulSboWBVCvF1qt7vrwqa0zw1WpVPZ3yf/U=
Subject key identifier:   EF:4D:05:6E:C0:1A:4B:E0:93:4B:F3:95:32:AF:19:3F:25:9F:D2:89
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       DA
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/700FbsAaS-CTS_OVMq8ZPyWf0ok.roa
Signing time:             Wed 14 Oct 2026 00:10:30 +0000
ROA not before:           Wed 14 Oct 2026 00:10:30 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 15:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 14 00:10:30 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=EF4D056EC01A4BE0934BF39532AF193F259FD289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:cf:2b:a3:f3:da:13:2e:00:74:f4:56:84:
                    b0:22:5d:23:b7:da:46:81:e2:79:c1:cc:6c:c5:91:
                    1a:24:48:0d:e3:e2:62:81:ea:60:fe:79:f9:2e:c8:
                    2a:f5:69:34:32:64:76:ae:ab:81:f7:af:b6:51:d0:
                    47:d0:55:bd:ed:3a:52:3d:40:02:92:8c:13:4b:a8:
                    de:10:42:73:71:b2:ac:78:fe:d9:9e:6f:3a:0b:07:
                    29:8b:d4:49:75:ea:c8:bc:14:05:a0:ac:0b:22:9d:
                    7b:fd:0d:fd:f0:c0:a9:03:35:a0:cb:2a:37:28:d0:
                    0a:04:ff:5b:3f:fa:17:ca:42:6f:76:59:bb:7d:b9:
                    e8:f5:63:1d:43:0a:49:03:f4:61:5d:d1:cc:40:d5:
                    09:ce:2d:8f:3e:8e:da:8b:af:e6:0e:33:50:09:09:
                    6e:e1:6f:1e:28:d1:0f:dc:77:09:c0:42:44:66:33:
                    6f:81:78:4d:ad:80:60:cf:35:0f:a3:bf:8e:83:cd:
                    c9:81:24:8b:01:61:b9:b1:4c:c5:4a:f6:98:a3:3d:
                    69:43:cd:5a:c9:8d:ca:c9:02:50:16:a3:9d:6b:93:
                    1e:cd:86:cf:8f:a7:1d:88:f0:68:6d:da:7f:c8:01:
                    1f:65:e6:98:50:f4:22:dd:a2:15:ad:0d:a8:fc:32:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:05:6E:C0:1A:4B:E0:93:4B:F3:95:32:AF:19:3F:25:9F:D2:89
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/700FbsAaS-CTS_OVMq8ZPyWf0ok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:02:b0:02:ed:ec:bd:24:0d:84:f7:bc:ef:7d:95:5c:c4:
         ed:f6:ef:f0:78:23:8a:11:ce:e1:fc:42:88:c8:fd:86:dd:27:
         56:4d:ff:4c:3a:32:c6:9c:ba:e3:84:42:57:7f:ed:1a:14:6e:
         6b:95:3d:3f:b2:fc:9a:49:22:9e:f7:7e:c1:b4:11:46:23:83:
         df:7d:e7:46:41:b4:26:35:c3:70:81:29:9b:2d:e1:5f:89:a5:
         37:3d:76:f7:f5:33:7f:72:65:ca:d6:89:ac:30:86:21:5a:93:
         5f:36:14:69:7f:ca:60:c1:7c:8c:bf:65:57:da:24:57:fa:42:
         d1:58:5b:2c:e0:79:73:1d:de:7c:48:99:10:21:c4:26:97:9c:
         55:61:ca:37:38:88:e0:7f:65:a6:11:58:5d:41:9b:6f:36:90:
         7e:b5:4f:2a:34:61:3d:e2:ff:c4:21:e5:52:b8:4b:da:54:a6:
         b7:34:11:ef:d4:ab:c0:31:07:74:8d:60:eb:ea:3c:47:88:aa:
         cb:35:a2:5c:95:64:05:86:2f:d4:ce:f5:f4:70:f7:fd:b5:ea:
         48:c7:8d:3b:38:d3:6d:cb:26:94:41:92:7e:db:47:63:4a:4a:
         3d:3d:8a:52:d6:50:a5:f0:ec:ea:1a:8b:0f:ba:6a:8a:c4:97:
         a7:f4:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:09 2026 by rpki-client