Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFcwclIiJefVjS8Fu5bzssfcfv0.roa
File:                     SFcwclIiJefVjS8Fu5bzssfcfv0.roa (raw, json)
Hash identifier:          6Z/GhXLNe510XiM6GjkvRvOO+MBV8Dp5ryrrUBM3Pic=
Subject key identifier:   48:57:30:72:52:22:25:E7:D5:8D:2F:05:BB:96:F3:B2:C7:DC:7E:FD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0473
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFcwclIiJefVjS8Fu5bzssfcfv0.roa
Signing time:             Wed 01 Oct 2025 01:34:50 +0000
ROA not before:           Wed 01 Oct 2025 01:34:50 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        111.235.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 06:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:34:50 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=48573072522225E7D58D2F05BB96F3B2C7DC7EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:c2:98:98:73:15:2c:25:85:70:f5:09:9e:
                    0c:2e:16:05:ad:f2:c9:1e:66:1f:47:fd:15:5c:cc:
                    1f:53:33:72:03:19:cc:f4:11:ae:75:eb:af:6c:a2:
                    3a:1a:6b:d0:84:d5:76:bb:c5:a5:a4:5b:96:ac:a4:
                    cf:00:24:9b:8c:7e:19:3a:ca:90:05:78:2e:82:2a:
                    49:11:46:79:ba:a7:56:98:37:99:29:9f:f9:65:39:
                    ee:3a:9c:51:50:ad:2e:67:89:3d:19:7e:69:c2:89:
                    f8:41:dd:38:db:79:a2:99:80:1a:1c:55:33:ef:b7:
                    ec:ac:72:a5:c5:cf:39:19:23:0f:50:68:8e:75:46:
                    e4:c0:40:2c:89:76:38:4f:fa:9f:27:34:39:22:62:
                    54:49:bc:8e:d2:a4:3c:67:89:99:65:b4:eb:dd:2a:
                    27:a1:a5:d9:be:91:7c:8a:b7:dd:33:72:11:bf:b9:
                    43:2c:b5:ab:ce:3b:ea:4d:e2:02:e0:c8:df:b2:a1:
                    21:ce:34:df:e4:95:55:7b:ac:78:36:84:82:55:59:
                    aa:49:21:6c:09:d7:d9:e9:9f:15:7b:70:e1:b1:cc:
                    04:75:d2:3b:60:5b:30:b1:11:ac:80:e1:59:17:10:
                    2a:0b:3a:49:eb:54:9f:7c:a9:ef:7a:a9:24:13:4c:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:30:72:52:22:25:E7:D5:8D:2F:05:BB:96:F3:B2:C7:DC:7E:FD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFcwclIiJefVjS8Fu5bzssfcfv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:10:25:2f:01:b6:79:4d:8c:b4:1b:b2:17:d1:bd:d7:6c:81:
         70:71:a4:68:90:df:86:b2:4e:17:14:26:e6:0b:01:8c:15:a3:
         c6:4b:3f:2f:f2:d7:42:2f:46:03:eb:3a:32:07:f7:f3:f4:dd:
         cf:a6:d4:b5:55:96:39:66:d6:16:9e:0d:24:84:34:32:b3:dd:
         1b:aa:8f:8e:ef:a4:42:78:d5:1f:fc:79:16:35:7b:05:33:b7:
         b0:5c:f7:ef:e1:dc:e1:74:5e:74:69:cc:7e:b4:b6:4e:0e:6e:
         9e:fb:5c:11:34:05:75:e6:5f:7e:3e:c9:e1:2d:db:db:a7:82:
         37:b6:0b:11:af:ec:84:ea:3b:66:ab:2d:31:ff:f8:12:52:2d:
         3e:45:18:aa:8d:ba:ec:f1:f0:56:0a:4e:0d:90:5c:62:1e:40:
         8a:f1:e2:d6:f9:d6:71:5a:9f:be:11:00:87:e3:bf:ee:e7:1f:
         60:01:4c:2d:c9:09:c7:fb:1c:29:39:91:ad:34:ff:c1:49:8e:
         3b:7a:c4:ef:0a:3d:7c:5f:b4:d9:39:4a:36:1f:58:df:e0:2a:
         0f:cf:03:89:b4:da:c3:db:46:0c:51:b6:ae:88:d1:77:26:a2:
         26:48:66:9e:b2:41:95:9e:43:bf:8a:28:2c:68:25:6c:92:7e:
         19:46:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:18:37 2025 by rpki-client