Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/WZ4ls_Sh5SzvCAWFldZt_IjhyFo.roa
File:                     WZ4ls_Sh5SzvCAWFldZt_IjhyFo.roa (raw, json)
Hash identifier:          y3bavSn3WhoNs5UCK7N8jMTOIEXKGDqepYBIALA8yd4=
Subject key identifier:   59:9E:25:B3:F4:A1:E5:2C:EF:08:05:85:95:D6:6D:FC:88:E1:C8:5A
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       8D
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/WZ4ls_Sh5SzvCAWFldZt_IjhyFo.roa
Signing time:             Sat 01 Nov 2025 01:32:02 +0000
ROA not before:           Sat 01 Nov 2025 01:32:02 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17676
IP address blocks:        61.203.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 05:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov  1 01:32:02 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=599E25B3F4A1E52CEF08058595D66DFC88E1C85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:34:03:77:1d:42:77:a6:f5:3e:02:f4:bc:
                    70:d0:52:1a:95:4f:9c:b3:1c:c7:cf:a5:72:35:df:
                    68:43:0c:4f:6e:67:d9:26:40:7d:0d:ae:8d:10:0d:
                    d8:03:ec:e7:c5:55:d8:e4:96:e3:11:12:e6:4d:a6:
                    72:b0:22:c7:6d:92:ff:22:0a:fc:bd:96:b4:f9:b0:
                    f7:3e:3c:48:26:12:ac:91:fc:15:1d:8a:37:a9:e7:
                    2d:f1:e0:dd:d5:c9:90:7f:2d:57:2e:76:06:a1:37:
                    d0:30:8f:b4:64:e4:ee:8e:d8:0f:cc:ce:33:14:e2:
                    47:e5:dd:e0:01:5c:0b:7d:d6:5c:ee:ad:b5:b2:e1:
                    af:03:69:9f:9c:a6:43:99:92:a7:59:0c:09:d0:6f:
                    be:84:22:d8:17:a6:d2:6b:36:a3:00:ec:bb:eb:cb:
                    44:90:ec:64:45:1f:91:76:a9:4e:4c:6c:05:49:cb:
                    da:cc:84:6c:b0:bd:cd:25:9d:1e:da:2e:08:ee:eb:
                    a2:29:61:32:ce:47:c2:90:d1:aa:4c:ca:76:58:db:
                    f8:69:a7:09:1b:63:77:7e:c2:d6:51:43:f5:7f:13:
                    7c:31:eb:59:b6:cf:25:80:e6:c8:f7:f4:b8:63:76:
                    98:e7:63:45:ad:4f:00:68:95:ec:0a:50:6e:77:70:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9E:25:B3:F4:A1:E5:2C:EF:08:05:85:95:D6:6D:FC:88:E1:C8:5A
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/WZ4ls_Sh5SzvCAWFldZt_IjhyFo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:1c:15:e5:c4:1d:e6:20:c1:f5:24:e5:08:16:14:59:f8:
         1c:62:46:1a:3a:3d:4d:b6:26:2b:ae:3a:41:3f:4d:8f:7e:7a:
         9a:4a:c6:67:08:22:41:c6:44:43:ba:01:83:87:9c:20:0a:9e:
         b8:e2:cf:7d:15:f0:45:58:fb:13:a5:fa:81:54:0d:cf:f2:c9:
         13:30:0b:49:d0:60:47:25:c4:5b:af:21:46:bf:1a:9b:50:b6:
         71:b5:9a:11:e8:18:01:ec:6e:da:64:4d:11:17:80:31:4f:f7:
         70:07:87:80:4e:55:8f:29:99:f5:56:0f:27:28:fc:ce:5f:3f:
         5e:bc:b5:4f:47:a6:ce:ab:49:82:17:0f:7f:84:5e:4b:99:ce:
         f9:64:1c:f2:d8:cd:d6:83:0b:06:79:e2:13:f9:62:02:5b:28:
         7b:4d:8d:b5:f1:f9:cd:34:50:32:f3:1f:97:45:19:93:41:5a:
         3a:b8:0d:49:24:45:4f:92:8c:0d:97:4c:dd:3d:5f:88:05:d5:
         0a:40:37:89:be:63:f1:6b:e0:2d:2e:44:4a:55:d0:60:35:5b:
         85:da:f0:8b:c8:93:e1:1b:f8:35:d7:b8:ce:e7:be:ea:2d:1a:
         11:3e:a3:17:85:65:f2:47:ba:cc:9f:3b:bd:34:fa:ee:75:99:
         83:56:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:13:13 2025 by rpki-client