Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/t50fC1a3ilwB2QjW6wQ4dXFoZ08.roa
File:                     t50fC1a3ilwB2QjW6wQ4dXFoZ08.roa (raw, json)
Hash identifier:          n59DV95/8UvlRQIyXVjZ1tXIUaB7HpLbbB3OtfPZjmE=
Subject key identifier:   B7:9D:1F:0B:56:B7:8A:5C:01:D9:08:D6:EB:04:38:75:71:68:67:4F
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       91
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/t50fC1a3ilwB2QjW6wQ4dXFoZ08.roa
Signing time:             Sat 01 Nov 2025 01:32:04 +0000
ROA not before:           Sat 01 Nov 2025 01:32:04 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     17676
IP address blocks:        61.122.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 05:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov  1 01:32:04 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=B79D1F0B56B78A5C01D908D6EB0438757168674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:ce:bc:cc:9b:3d:ab:3e:86:94:cc:61:0b:
                    e9:9e:8d:29:0c:85:a1:79:0d:06:f8:f8:dc:f3:a6:
                    6e:19:e4:84:21:f8:de:3e:43:ce:52:9b:8f:24:78:
                    2a:ab:22:78:cd:44:17:3b:3d:76:a5:6a:e6:f7:56:
                    b0:e1:d3:8a:96:f4:b4:2d:84:ac:77:d0:c1:3f:a3:
                    34:53:4c:6b:70:a4:b3:ab:d5:b9:6d:09:f7:6a:65:
                    04:07:65:55:48:d8:54:fd:83:13:47:02:ca:c2:c0:
                    63:ca:9a:7e:fa:67:e0:b7:66:99:66:e6:bc:60:50:
                    73:b6:d8:00:ed:3b:e3:70:09:cf:76:89:fc:27:80:
                    00:6b:58:50:dc:2a:84:8b:8f:b1:ca:b6:74:9e:ff:
                    49:95:c8:f1:f8:a5:e2:56:bb:07:6d:96:0c:d7:6e:
                    d1:d8:e3:5d:91:ba:92:11:68:e0:f8:5d:28:18:a7:
                    4d:40:ed:db:cb:35:38:89:c1:8b:75:bd:f0:11:f1:
                    00:de:24:9f:94:0b:d4:33:1a:f6:d8:6a:22:eb:7e:
                    ec:c0:6b:79:ea:f0:11:bc:27:6d:de:77:14:81:9b:
                    2b:56:a0:18:ea:94:c3:4f:ed:48:4e:51:3d:18:75:
                    19:79:d3:07:13:8e:76:2d:a9:e8:44:d2:4f:85:2d:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:1F:0B:56:B7:8A:5C:01:D9:08:D6:EB:04:38:75:71:68:67:4F
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/t50fC1a3ilwB2QjW6wQ4dXFoZ08.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:46:5e:f4:d5:8c:66:bd:69:e7:b1:d8:d7:38:8a:b1:ac:
         49:b6:7d:a7:97:1d:76:e3:be:3a:65:62:3a:94:bc:d6:6b:b5:
         5b:93:10:9c:18:19:93:46:83:99:7a:0a:34:d3:df:03:8f:fa:
         47:13:69:71:a7:85:3e:78:f1:cd:33:a5:d1:b6:b6:11:1a:14:
         c3:cc:3a:d8:39:97:8a:ea:5e:d6:bc:2a:70:a6:52:70:1f:77:
         c2:68:e6:56:b3:8d:cb:53:e5:59:18:51:e4:6e:cf:7c:ce:39:
         0f:af:b5:01:da:8b:d7:98:20:a4:98:dc:23:db:8f:ae:b2:1a:
         32:0a:10:3d:f0:76:b3:2b:d7:f8:c9:3c:cb:13:ff:97:c1:48:
         1c:43:4d:06:cb:74:0f:a0:f7:0d:62:c9:7c:e3:04:04:f1:12:
         50:70:36:24:4d:1e:f1:4a:e4:0c:16:c0:ad:a4:c9:55:a7:ae:
         98:17:78:53:16:94:31:10:bb:a7:ed:9f:b5:82:ae:a1:ca:3c:
         ed:4b:a6:ed:38:e6:a6:ff:8a:d7:fe:d9:12:16:21:fb:64:bd:
         b5:a0:fc:58:0f:88:3c:a5:1e:de:25:d2:31:da:38:5e:a2:1d:
         c0:64:b5:a7:f0:69:38:4b:91:f8:48:4e:e4:33:e3:05:34:67:
         11:e3:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 10:14:14 2025 by rpki-client