Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/qR5gLK9bRzdyBjvk6YcJTMzHw5E.roa
File:                     qR5gLK9bRzdyBjvk6YcJTMzHw5E.roa (raw, json)
Hash identifier:          LdQLW+6hlVJr2kwmkVs0Jc4hG+Xjx54hLo14CCbFpPo=
Subject key identifier:   A9:1E:60:2C:AF:5B:47:37:72:06:3B:E4:E9:87:09:4C:CC:C7:C3:91
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       94
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/qR5gLK9bRzdyBjvk6YcJTMzHw5E.roa
Signing time:             Sat 01 Nov 2025 01:32:06 +0000
ROA not before:           Sat 01 Nov 2025 01:32:06 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17676
IP address blocks:        218.45.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 05:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov  1 01:32:06 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=A91E602CAF5B473772063BE4E987094CCCC7C391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:bf:e9:db:11:73:ad:ea:0e:0e:66:c2:ce:
                    2c:83:8e:eb:57:d6:e3:cd:8c:6e:f0:b9:4a:de:41:
                    f0:aa:12:ca:d3:38:18:22:60:1e:42:7d:a3:20:8e:
                    71:dd:ce:b0:62:94:b4:26:71:2e:9a:be:71:38:d3:
                    bb:c6:75:eb:64:5a:30:70:16:37:13:c9:b4:cd:28:
                    8d:bd:87:c1:ab:67:96:b8:14:4a:ed:64:64:63:96:
                    48:36:e7:38:ff:28:c8:32:f2:1a:d9:89:53:84:69:
                    6c:5d:7a:ec:fc:de:cd:67:0e:e8:65:25:00:d0:44:
                    3e:d6:f3:31:7e:2f:eb:43:da:cb:9b:f0:88:fc:ae:
                    14:6d:d4:af:f7:98:68:b6:7d:27:31:8e:71:16:6e:
                    ab:ba:a5:26:e1:47:4a:87:a6:5c:b2:24:88:db:5c:
                    dd:a7:0f:e0:d5:0e:79:5d:b4:eb:ea:d0:61:92:9c:
                    3d:f6:af:43:c7:4f:65:9b:77:60:ce:94:a7:70:92:
                    65:9d:17:00:5f:8f:f0:1d:66:e9:e3:93:06:d5:45:
                    a4:48:a5:65:a7:2e:55:b6:40:0e:bc:e0:97:ab:d7:
                    a5:45:d2:cc:87:bd:f7:12:2e:42:44:e6:0b:e1:35:
                    82:64:91:3a:60:db:50:b2:a6:3f:b4:e7:bb:02:88:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:60:2C:AF:5B:47:37:72:06:3B:E4:E9:87:09:4C:CC:C7:C3:91
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/qR5gLK9bRzdyBjvk6YcJTMzHw5E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:e9:46:bc:57:8a:93:5f:fb:f7:e0:e4:71:5a:5d:3c:4a:
         a0:e1:9a:70:b4:01:d6:bc:af:5b:e0:d8:c3:d6:3e:0f:2e:58:
         5f:0e:22:41:dd:6e:09:ff:33:89:aa:23:5b:a1:2b:3e:34:fd:
         be:a5:e1:86:40:0c:69:86:16:ec:db:c6:8c:3a:16:d6:b3:98:
         50:20:65:52:86:06:05:0b:e8:b9:50:62:e4:41:4b:3b:86:81:
         eb:2b:37:0e:bb:4a:3d:d3:ab:48:4c:3d:e6:53:66:9d:94:79:
         14:bd:27:05:f1:04:10:88:8f:a4:cb:ed:a4:54:8f:45:8a:9a:
         60:36:ae:a2:d3:96:a4:21:0e:1c:aa:de:93:b2:96:18:68:9f:
         82:ac:d5:82:6f:65:79:b1:08:f4:96:b8:6b:a4:bb:cf:23:5e:
         19:1c:a3:9e:c5:3e:4a:69:fb:9d:54:ef:db:03:57:3c:15:8d:
         f6:d9:b5:e7:a5:a2:f8:ce:cf:76:54:91:5e:71:12:f8:f5:6f:
         9b:9e:1b:31:e0:ec:ed:8a:c1:e0:46:bc:01:de:43:d8:dd:07:
         6d:0c:21:b9:c2:81:5e:0a:01:9b:3b:36:e1:86:d8:bf:ee:68:
         1c:66:29:cb:31:c9:15:96:7d:68:f3:27:4a:75:e1:91:0c:a3:
         99:46:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:13:13 2025 by rpki-client