Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/XufHDEWuIvimOwoiZSbh68N_4mc.roa
File:                     XufHDEWuIvimOwoiZSbh68N_4mc.roa (raw, json)
Hash identifier:          pcGrHrsm/54aEfdpOu63KRbzxnjiUfI8A2txr76ktMw=
Subject key identifier:   5E:E7:C7:0C:45:AE:22:F8:A6:3B:0A:22:65:26:E1:EB:C3:7F:E2:67
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       90
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/XufHDEWuIvimOwoiZSbh68N_4mc.roa
Signing time:             Sat 01 Nov 2025 01:32:03 +0000
ROA not before:           Sat 01 Nov 2025 01:32:03 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17676
IP address blocks:        61.193.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 05:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov  1 01:32:03 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5EE7C70C45AE22F8A63B0A226526E1EBC37FE267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:37:6a:98:30:bc:6f:ec:6a:7c:35:c8:e4:
                    82:25:af:d1:54:62:f7:b2:0c:a4:ce:6b:90:c1:7e:
                    b9:5a:23:50:9d:90:76:03:87:13:e2:bd:ae:00:1b:
                    a8:fd:0d:89:3c:ee:64:11:97:14:7e:b8:6f:a0:91:
                    60:f0:18:1c:8e:36:f5:0e:a2:2d:28:49:fa:52:51:
                    38:4f:33:a5:cb:2a:b4:63:8e:ad:9b:4f:3a:32:e1:
                    91:66:a3:25:47:86:db:a5:bc:48:49:d3:6e:f1:4c:
                    0b:fe:fa:79:94:1e:41:80:84:18:59:db:d2:bc:7a:
                    c0:d7:8f:80:14:66:04:60:85:49:3b:ff:74:4a:51:
                    21:6c:18:10:14:5a:f8:09:fd:02:6e:a7:a5:d5:28:
                    dc:f0:90:dd:0e:ae:10:81:dc:6a:ae:22:e1:48:67:
                    ac:3c:2f:45:a0:24:b9:71:8e:28:a2:fd:a8:75:a0:
                    da:10:5b:2f:da:95:0e:6e:7b:8c:d8:70:f4:56:c9:
                    24:27:1d:82:9c:50:29:44:44:50:06:88:d5:58:00:
                    b6:a8:a9:9f:c3:a1:32:64:a1:81:81:f9:a3:29:a2:
                    90:cb:64:f7:80:fd:b8:dc:6d:ce:4a:47:7d:3a:46:
                    07:25:63:4c:99:ca:cb:de:97:1b:03:3d:b1:2a:33:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:C7:0C:45:AE:22:F8:A6:3B:0A:22:65:26:E1:EB:C3:7F:E2:67
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/XufHDEWuIvimOwoiZSbh68N_4mc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:34:5f:0c:67:db:e7:f3:49:48:d9:8e:56:b8:82:ad:b1:f8:
         05:c7:86:d5:4e:40:ac:1b:2b:72:6d:5e:a4:68:71:79:26:15:
         fa:03:a1:26:e9:0c:36:c3:9b:a7:d5:95:3b:6e:0d:c7:c9:3a:
         77:99:2b:e1:ec:b9:de:4d:8f:6b:74:7c:ba:a6:41:f2:4c:d7:
         fe:01:5c:5d:ad:44:2d:fd:ab:70:ba:64:57:35:32:90:b0:71:
         6e:2e:60:15:1b:12:5c:54:f3:43:11:b5:6b:01:75:ce:99:8d:
         93:e6:c0:ca:ec:57:0d:21:a7:41:f1:2c:b4:77:c7:23:bc:e9:
         f5:72:09:e5:15:15:16:ed:79:8e:e2:ec:3b:5b:62:4b:6f:d3:
         f4:7e:96:4d:c0:9c:80:bf:ad:dd:d4:22:0c:cf:b1:44:7d:f4:
         e9:32:83:8d:9f:c1:38:a4:8a:f7:84:cc:77:65:d1:52:21:f8:
         35:55:e3:5f:12:55:13:b1:91:15:5d:42:20:45:34:ec:fb:75:
         17:ec:38:c0:bc:91:3f:9f:ab:2b:f4:88:d8:5b:fd:86:77:28:
         e6:6e:fb:4a:80:1d:35:4a:04:46:a7:9e:8a:06:44:eb:a3:78:
         c1:8d:49:37:8b:e6:2a:f8:ff:6c:d0:89:5d:22:64:24:73:b2:
         e9:5c:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:15:14 2025 by rpki-client