Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa
File:                     jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa (raw, json)
Hash identifier:          yLemOtzZCRNciUZVftPQg/Hf53yupBd7bPqntzQErY4=
Subject key identifier:   8F:29:42:91:95:FB:64:71:F5:CF:EE:2A:74:D0:56:37:79:34:97:43
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       6B
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa
Signing time:             Mon 01 Sep 2025 01:32:51 +0000
ROA not before:           Mon 01 Sep 2025 01:32:51 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     38639
IP address blocks:        2402:c800:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 19:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Sep  1 01:32:51 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=8F29429195FB6471F5CFEE2A74D0563779349743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:67:d0:26:f0:61:19:40:03:d1:cc:68:5e:
                    18:b6:21:e3:f7:5d:e6:ef:3a:56:d8:4a:ed:df:93:
                    d8:64:fe:b5:69:fc:dc:48:59:22:b2:84:5a:ce:da:
                    f3:7e:92:6f:1d:f5:86:22:b0:20:ab:1e:90:fd:e0:
                    0a:ca:95:92:93:63:0f:99:21:df:b8:5d:2f:83:5d:
                    cd:04:37:9e:bb:68:ff:3e:0f:e0:13:b5:aa:9c:ac:
                    a9:5e:e3:dd:d0:0e:3d:7a:ec:38:fa:79:3f:ea:ce:
                    94:2b:52:33:42:d3:4d:d5:ad:9b:7a:47:6f:e8:78:
                    7d:21:6c:fb:b0:bd:93:89:03:80:44:1f:93:74:be:
                    8d:9f:a8:a9:de:33:99:74:9c:97:65:75:18:a9:93:
                    63:86:a8:ec:02:05:3e:32:46:b0:06:84:33:84:83:
                    bc:9d:5d:9b:a1:65:7c:df:9d:45:2f:cb:ef:a9:df:
                    f1:c4:69:54:6a:68:89:8a:bb:71:4b:05:47:23:2e:
                    55:ab:56:13:2d:ca:e0:a1:83:4c:4f:b0:cf:ba:7f:
                    01:c0:80:53:a9:4d:2c:9e:1d:2e:80:27:cf:b6:db:
                    57:84:c8:05:86:90:b7:0e:85:40:27:7d:fe:c1:94:
                    a3:18:f3:c6:e8:31:2f:76:83:2d:31:30:3b:d9:74:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:42:91:95:FB:64:71:F5:CF:EE:2A:74:D0:56:37:79:34:97:43
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/jylCkZX7ZHH1z-4qdNBWN3k0l0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:c6:1b:eb:13:90:b7:20:62:38:24:ec:f0:1f:f5:46:ed:
         bf:92:79:b3:a3:44:6b:cd:1f:03:20:28:82:98:f8:bd:31:76:
         49:6b:93:b7:63:9a:58:9d:bc:2b:77:a6:09:ea:70:f2:98:5d:
         5f:c1:a8:26:4f:4e:0d:8e:46:c1:24:f1:22:3a:c1:75:66:db:
         c4:e7:91:8c:89:8c:f7:ef:13:48:cc:07:92:64:1e:00:8c:07:
         54:7f:1d:6a:2e:c7:20:38:48:0a:e9:2b:4d:88:6e:71:64:09:
         9c:ff:68:6d:83:7d:3e:52:50:28:12:c5:d7:4f:e4:e4:c8:00:
         9c:d1:f2:75:50:5c:5b:30:6d:73:12:14:a3:89:a9:66:45:f3:
         55:97:59:d4:5b:f2:1b:af:40:13:5e:91:00:ff:7b:35:05:8e:
         73:05:da:8a:55:03:92:d7:ab:d6:70:e0:cd:fa:07:fd:c3:2f:
         53:46:ca:c2:42:36:9c:60:cf:53:79:43:9e:0b:39:76:6f:79:
         67:3a:7c:3b:4b:c3:38:d2:ad:8b:8d:00:f0:b9:8e:24:56:e1:
         e6:66:7e:e1:5c:42:ea:fd:99:aa:de:d0:a0:a5:45:f7:fe:ab:
         e0:6d:fb:14:1d:86:54:75:06:da:02:47:58:66:26:00:c2:14:
         7a:d1:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 00:38:00 2025 by rpki-client