Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/qb3wIYQM2ZD6NsxElXSmEAo5BIs.roa
File:                     qb3wIYQM2ZD6NsxElXSmEAo5BIs.roa (raw, json)
Hash identifier:          XLt+X0pAVwHF/wMtwBZ2HURM/JIFXIhlZxhQIyS/pmE=
Subject key identifier:   A9:BD:F0:21:84:0C:D9:90:FA:36:CC:44:95:74:A6:10:0A:39:04:8B
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       49
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/qb3wIYQM2ZD6NsxElXSmEAo5BIs.roa
Signing time:             Wed 01 Oct 2025 01:32:08 +0000
ROA not before:           Wed 01 Oct 2025 01:32:08 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18266
IP address blocks:        203.179.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct  1 01:32:08 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A9BDF021840CD990FA36CC449574A6100A39048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:8d:4d:eb:78:9b:3b:fa:0c:d5:9f:53:6d:
                    f2:d4:95:d6:f4:50:48:b1:d7:5a:bb:1d:98:3a:d2:
                    5e:2e:c2:ac:90:63:15:63:02:ea:b7:d2:06:79:fc:
                    b5:a1:24:77:51:8d:5d:22:aa:bb:1f:2f:68:9d:de:
                    ab:a9:0c:79:a8:77:d4:eb:ba:2b:15:d2:bd:4c:3d:
                    97:a2:98:66:95:d2:9c:01:c9:dc:24:63:e4:f2:71:
                    d8:b3:a3:b7:08:53:d7:11:15:18:ae:93:6a:c1:8e:
                    04:8d:d3:f4:58:5b:43:71:29:03:43:ea:18:74:3e:
                    46:f8:53:3c:72:6c:5a:6f:81:e8:8e:8a:16:2f:d3:
                    81:32:ba:dd:8b:0d:4b:15:82:78:e0:45:ec:eb:9d:
                    79:7a:59:45:22:d0:cd:14:e2:35:6e:c7:a7:76:a1:
                    87:22:f3:61:b7:d5:3a:be:87:d7:b0:65:40:34:67:
                    57:29:13:0a:44:c6:a1:1e:49:1f:7f:66:07:2b:36:
                    cb:27:1e:a1:7e:25:b0:47:7b:83:60:b2:2d:6c:0b:
                    03:68:3c:bf:d7:e6:a0:e1:58:92:e6:9c:d5:61:56:
                    f8:e7:54:60:4d:dc:31:bf:a9:5a:5d:11:a5:65:20:
                    ae:10:d0:76:0c:f2:5e:dd:20:9d:12:71:cf:2b:42:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:F0:21:84:0C:D9:90:FA:36:CC:44:95:74:A6:10:0A:39:04:8B
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/qb3wIYQM2ZD6NsxElXSmEAo5BIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:a1:d6:41:89:7e:e4:d8:a9:7e:2a:0d:fb:b6:e8:35:e7:44:
         83:3a:54:7b:d4:ae:50:df:26:9d:84:c8:34:17:40:cc:ee:24:
         e1:20:5c:dd:db:15:6a:74:68:79:6a:3f:90:b8:cb:54:3b:38:
         ab:88:eb:34:60:18:d4:a3:7e:01:81:c3:7c:fb:7f:c0:28:e5:
         ea:c1:54:23:b7:e5:fb:60:95:12:f4:05:c8:bf:87:96:1f:21:
         15:d8:40:c5:4b:9d:ef:b0:de:ff:4a:c6:a4:6a:d5:d5:a6:1d:
         25:d9:be:91:f4:49:5d:be:ff:89:43:62:20:3c:6e:b6:d8:e3:
         71:74:8a:bc:b0:a5:95:67:3b:7f:99:b5:db:fb:00:4f:e1:4f:
         d9:df:4f:f3:85:57:d5:67:63:70:e9:8d:d2:90:77:44:95:40:
         9d:a7:25:4c:4a:5d:b5:cb:a4:0b:3c:ac:88:72:ce:6b:0e:87:
         f6:47:f1:0b:7e:b5:a6:e8:22:d1:ac:2a:b0:b2:43:43:86:e6:
         a4:89:ea:cd:c0:85:c3:f6:61:60:ea:1c:4a:e0:7d:75:ca:1c:
         6e:55:98:74:63:39:5a:58:74:4a:cf:63:f4:6d:a7:23:f9:1f:
         8d:9f:a3:fc:ca:b0:2c:a5:d2:e6:86:c0:4b:4b:ad:3b:7a:d9:
         72:15:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:27 2025 by rpki-client