Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/6be1nzrWz2eDfJxLeHlNCH2z_zo.roa
File:                     6be1nzrWz2eDfJxLeHlNCH2z_zo.roa (raw, json)
Hash identifier:          PoVStAhxLj9/UBhtiA82/EN7c/hQr8aSD02NCoescx4=
Subject key identifier:   E9:B7:B5:9F:3A:D6:CF:67:83:7C:9C:4B:78:79:4D:08:7D:B3:FF:3A
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       8C
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/6be1nzrWz2eDfJxLeHlNCH2z_zo.roa
Signing time:             Sat 01 Nov 2025 01:32:01 +0000
ROA not before:           Sat 01 Nov 2025 01:32:01 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17676
IP address blocks:        61.206.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 05:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov  1 01:32:01 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=E9B7B59F3AD6CF67837C9C4B78794D087DB3FF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:9e:3b:bf:ac:80:25:69:74:1d:51:48:f1:
                    de:c5:17:ec:75:c8:1d:c1:a2:9e:05:79:66:f7:f5:
                    90:fd:38:37:cb:83:45:09:59:12:e2:01:6c:c1:a2:
                    2b:a5:1f:5a:d9:33:1b:03:42:27:d9:bd:c8:96:f1:
                    4a:34:a8:f3:d4:d0:b2:67:14:77:98:d3:bb:d1:c7:
                    51:a1:98:3f:43:08:cf:00:00:c0:93:d5:2e:25:5f:
                    9a:54:db:12:06:6d:03:de:59:64:15:96:53:9b:2d:
                    52:a4:0c:dc:d1:1b:75:e8:fa:84:72:af:f8:bf:80:
                    b2:aa:0d:02:a2:4c:ee:2c:aa:b8:42:5f:5d:ce:c3:
                    15:23:26:a4:e4:5b:a3:4d:66:7e:84:1c:e0:cb:b6:
                    b0:89:a7:b9:28:93:4b:31:1d:08:f9:3a:09:f6:e1:
                    5d:cf:a0:3d:2d:42:2f:c2:f3:1f:5b:09:f7:bc:80:
                    99:fb:61:a1:3d:d0:3b:f1:f5:1a:80:34:6c:b6:c3:
                    89:7e:75:1a:bb:78:21:40:ae:17:83:4e:21:1d:51:
                    cd:e2:c1:39:6e:71:02:46:b1:91:1d:19:16:5e:0c:
                    cf:7c:01:37:03:cf:56:0d:c7:93:be:0a:08:3d:39:
                    d4:4d:72:af:27:cc:55:06:6c:04:f0:7e:18:34:7b:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:B5:9F:3A:D6:CF:67:83:7C:9C:4B:78:79:4D:08:7D:B3:FF:3A
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/6be1nzrWz2eDfJxLeHlNCH2z_zo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:db:6e:65:6a:22:37:a8:05:c0:a4:14:81:01:71:7b:92:c9:
         91:db:84:3a:77:ff:c3:fd:a3:dc:3a:d7:99:0d:56:d7:9d:0c:
         dd:9f:76:ff:c0:6d:2e:7b:fa:f8:2c:c5:9a:b3:8e:66:03:38:
         9c:45:1f:37:78:28:de:6d:03:de:b7:e9:6b:b0:17:ab:c8:73:
         b9:fc:a1:82:3b:b7:96:df:dc:25:99:c3:80:d4:6e:b9:2e:14:
         38:24:32:01:6f:db:0c:7c:0e:8f:82:3e:31:50:c4:7e:f7:32:
         14:95:37:59:1c:46:41:14:59:12:7a:8b:b0:34:d3:ad:70:39:
         a3:a6:c8:f1:1b:dd:d0:1a:53:14:6c:18:53:9f:1e:af:4c:e4:
         a0:e5:a6:f9:f1:9f:ca:8f:41:ab:ab:06:97:6b:3d:40:bd:f5:
         99:a1:3d:a5:90:21:1d:8a:8c:0f:97:ac:dc:a6:f9:2f:35:2b:
         24:24:94:9d:97:ff:94:f4:42:b5:99:88:05:78:d2:d5:40:0e:
         38:20:31:00:c8:18:d6:d1:07:fa:ab:b2:56:df:82:9d:38:b7:
         d3:06:f1:dc:61:38:6f:d3:19:7b:83:e8:8e:80:19:34:43:dc:
         e9:89:21:67:25:30:7f:b2:0b:51:e6:9a:7a:56:a4:11:d5:26:
         df:52:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:15:15 2025 by rpki-client