Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
File:                     -g2EO2ghjKgG4SmQS_DcxKzexoY.roa (raw, json)
Hash identifier:          Dfgg441H7c2wDjnbxDKVXhUSp17aK+b3+K16tyK5svc=
Subject key identifier:   FA:0D:84:3B:68:21:8C:A8:06:E1:29:90:4B:F0:DC:C4:AC:DE:C6:86
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       69
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
Signing time:             Mon 01 Sep 2025 01:32:50 +0000
ROA not before:           Mon 01 Sep 2025 01:32:50 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     18131
IP address blocks:        2402:c800:ff7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 19:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Sep  1 01:32:50 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=FA0D843B68218CA806E129904BF0DCC4ACDEC686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:05:d5:6b:10:89:f0:fa:43:e3:e8:da:52:
                    ea:91:b1:76:8d:0f:f8:09:e5:d3:79:66:05:88:1e:
                    70:a9:c6:15:dd:1f:9e:f9:bd:d4:49:78:d3:9a:d8:
                    33:84:3b:7c:37:bd:b5:62:b5:55:cd:b1:c8:0c:0e:
                    e2:a0:79:f3:b3:cf:1e:09:49:36:69:1a:f8:94:e9:
                    fd:c7:f6:ac:9a:46:3c:5e:27:cd:d3:81:ad:e0:30:
                    03:a5:11:62:35:27:29:ec:b6:ca:a1:00:c7:23:e3:
                    23:53:dc:9c:a8:7e:b7:13:f4:36:de:99:05:a7:9f:
                    36:4b:cc:72:c5:d0:d0:f9:a4:32:91:51:80:a5:f3:
                    28:f6:b5:a8:b9:2c:10:3b:1a:3b:35:4a:e3:00:0d:
                    47:2b:2d:b9:ae:e9:da:10:43:63:da:56:76:72:3f:
                    b7:bb:f9:15:28:94:7d:16:c2:96:c1:bd:32:a6:0e:
                    b7:d6:32:fd:19:df:11:b1:cf:7f:cf:d9:46:82:fc:
                    44:44:92:b8:09:4c:81:ec:b9:a2:d0:00:2e:b9:89:
                    37:15:ba:39:1e:24:19:06:e5:d9:56:a9:32:cf:34:
                    5e:8e:ab:d9:5a:3a:a0:f6:a5:2e:0b:c5:ed:0a:e6:
                    18:fc:2b:aa:31:32:f8:fc:cb:26:21:82:0f:87:0b:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:84:3B:68:21:8C:A8:06:E1:29:90:4B:F0:DC:C4:AC:DE:C6:86
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/-g2EO2ghjKgG4SmQS_DcxKzexoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ff7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:30:13:b8:48:d7:02:03:0a:b4:be:1f:5d:be:c4:bc:ab:7f:
         79:52:af:47:31:ec:cc:7c:61:e6:3d:5c:53:a9:fc:25:c5:99:
         cd:8e:60:30:47:ad:a8:0b:30:7b:73:6b:2d:c7:9c:9b:4f:7f:
         c8:d0:58:1e:63:63:e1:80:33:18:a3:70:4f:d5:c9:7c:34:34:
         4c:2d:00:25:b3:29:39:e4:37:a3:5f:f0:2c:65:b2:f5:07:8b:
         ec:79:84:56:a5:59:9d:f0:f5:aa:b0:72:64:bb:23:e1:e8:e0:
         ac:e1:e9:55:64:43:fa:20:64:48:5b:97:63:e6:b0:15:1b:26:
         54:3a:8f:e5:ed:07:45:76:02:a6:c9:9c:80:94:6c:4d:27:7b:
         b5:28:f1:bb:6a:a3:01:5b:b9:e9:3d:07:35:19:1e:85:19:7e:
         81:36:49:80:9f:52:8b:99:f3:75:4b:00:16:64:e9:89:84:1f:
         af:22:c4:d6:c8:9a:f5:2c:65:3f:6b:b4:48:7d:70:86:92:c2:
         72:32:4d:d2:82:88:23:40:3f:d8:e0:92:0f:89:01:3d:63:43:
         28:c6:f3:4c:f8:52:2e:f2:c9:e9:42:fd:a7:e9:3e:e0:72:30:
         3b:85:96:ec:80:9e:74:30:b5:97:8a:4f:4f:b3:11:c0:7a:c3:
         e1:da:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:52:09 2025 by rpki-client