Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zkWQjaff-RivjbNxQdByDNtFQbQ.roa
File:                     zkWQjaff-RivjbNxQdByDNtFQbQ.roa (raw, json)
Hash identifier:          IpC7eKZhUyXD9LnwEivqCClCng0CPyeyzHr/or9j+c4=
Subject key identifier:   CE:45:90:8D:A7:DF:F9:18:AF:8D:B3:71:41:D0:72:0C:DB:45:41:B4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       048B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zkWQjaff-RivjbNxQdByDNtFQbQ.roa
Signing time:             Wed 01 Oct 2025 01:39:56 +0000
ROA not before:           Wed 01 Oct 2025 01:39:56 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:56 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=CE45908DA7DFF918AF8DB37141D0720CDB4541B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:f6:9b:28:6b:d5:e0:51:a3:dd:c9:cc:5e:
                    9f:2f:68:46:25:c9:82:95:32:7e:9f:03:fb:2f:51:
                    54:39:b7:c0:cb:1c:fd:95:c7:84:cc:75:da:24:58:
                    4f:f9:43:16:0a:21:ec:e1:e1:41:df:4f:6b:44:61:
                    e8:c2:8d:28:de:b4:dd:5e:b7:37:39:41:f3:31:7e:
                    57:aa:ed:bd:73:5d:ba:c9:f5:0c:21:0e:c8:88:2d:
                    0a:81:64:db:9c:d9:c5:3e:4d:f2:33:cd:a4:87:ef:
                    43:c8:c6:62:93:d0:56:f8:e5:b9:a5:de:d7:68:44:
                    d7:07:53:9e:ce:87:09:96:1f:64:3d:9d:1c:33:df:
                    2d:35:dc:8b:82:42:be:d1:4a:90:a9:0b:15:99:5c:
                    a6:a9:0d:16:d3:11:1b:ec:ba:da:08:83:07:ac:b9:
                    42:1a:db:09:20:88:11:64:95:77:e7:8c:5a:c3:16:
                    be:5c:3a:c5:8c:9d:a7:40:8e:43:97:54:83:d7:67:
                    64:c3:be:04:0e:26:ff:52:01:e8:bd:d8:e6:57:6d:
                    45:ef:f7:83:45:8c:53:d2:92:ac:05:72:d7:92:fd:
                    7a:b3:96:29:a5:d4:6c:c5:b6:08:6b:21:76:b8:ce:
                    5d:73:85:7b:f8:ff:95:bc:de:fb:35:45:25:8f:9d:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:45:90:8D:A7:DF:F9:18:AF:8D:B3:71:41:D0:72:0C:DB:45:41:B4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zkWQjaff-RivjbNxQdByDNtFQbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:10:67:44:ef:ad:64:eb:7a:a9:ba:ec:f6:08:dc:ce:5b:f2:
         67:27:29:1e:7b:d5:43:ab:85:eb:05:23:fb:41:2e:cb:51:33:
         68:8c:b5:5d:e3:f8:05:78:9a:20:6d:fe:81:d7:84:f9:04:34:
         f5:85:54:5a:d5:cb:22:a2:c0:d8:e3:bb:70:3d:6a:38:23:b7:
         4d:64:67:dd:75:f9:6e:90:23:a3:a8:2d:ea:bd:4d:a5:c5:28:
         90:4a:d6:f8:ca:54:f5:57:f4:a0:bb:de:33:d4:4e:18:31:02:
         e9:49:e4:20:63:ec:e4:cb:b6:21:6d:4c:0f:74:8a:99:7a:48:
         45:76:0e:c3:c0:02:de:97:2c:8e:03:a3:7e:3a:28:fc:21:f1:
         fa:12:04:ca:7f:dd:24:15:b8:d0:0b:b9:51:21:09:33:4e:14:
         ee:de:cb:71:d9:a2:83:38:0b:b7:46:99:7e:7c:7a:13:25:00:
         8c:e3:11:6d:54:78:09:a7:43:6e:e1:e2:46:cd:37:e9:b0:ad:
         b7:1e:e6:49:71:f5:36:9b:29:55:bc:e5:4a:30:cb:91:66:0e:
         70:06:38:bc:72:ef:90:5b:21:77:54:66:5c:dc:d3:ac:07:50:
         91:00:a5:b4:c1:0d:4e:28:68:11:95:83:23:f7:0c:8f:be:05:
         24:ad:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:30 2025 by rpki-client