Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa
File:                     oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa (raw, json)
Hash identifier:          mUpTibgiUHFiW2PCLaB6KaoV2P0Dwga4XPz5PInm2Pw=
Subject key identifier:   A0:4F:41:AB:73:A2:79:1D:E6:AD:97:87:85:22:64:9A:0D:3E:4F:06
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       67
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa
Signing time:             Mon 01 Sep 2025 01:32:49 +0000
ROA not before:           Mon 01 Sep 2025 01:32:49 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     37900
IP address blocks:        2402:c800:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 15:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Sep  1 01:32:49 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=A04F41AB73A2791DE6AD97878522649A0D3E4F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:70:22:aa:1d:98:f6:80:bd:1b:5e:20:74:
                    4b:ec:1a:6a:3b:1e:09:72:a0:1c:5e:ce:14:45:1c:
                    a7:8c:2e:fe:38:44:a2:8e:53:85:fb:56:2e:0b:01:
                    0a:b3:8e:62:42:c8:61:ad:34:fb:68:32:1a:ec:e1:
                    98:88:3b:0e:99:4e:0a:f7:49:33:71:62:8a:08:b5:
                    74:7b:b6:8c:c1:17:14:13:4d:36:80:35:bf:f1:e7:
                    e3:f9:49:37:f0:8c:1e:c2:1a:d7:79:a5:bb:f3:8d:
                    01:54:a9:7f:6a:4e:51:23:2c:fc:60:10:6d:63:6c:
                    51:71:d2:68:2c:f3:6f:cd:d1:18:b1:82:0e:02:68:
                    c3:08:8d:49:55:e1:a6:59:f7:db:e7:9f:25:4c:ef:
                    69:ae:1d:e2:3d:8c:01:ac:3a:1e:54:51:96:3e:73:
                    54:94:52:ce:db:24:0d:42:8a:89:a7:9c:6b:c7:70:
                    be:84:5e:b8:b0:f4:64:a8:0e:7a:ad:a6:6b:51:50:
                    7d:0b:38:06:6f:ee:e6:0b:9a:2a:0a:d1:a6:d7:88:
                    9f:9f:81:b7:a4:8b:cf:4d:88:3e:4b:64:5d:cd:2e:
                    da:39:87:7e:d8:e4:c2:35:e2:f0:8c:bd:56:20:a7:
                    94:29:e4:4d:41:1c:aa:cb:2b:e0:f9:ae:e3:52:aa:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4F:41:AB:73:A2:79:1D:E6:AD:97:87:85:22:64:9A:0D:3E:4F:06
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/oE9Bq3OieR3mrZeHhSJkmg0-TwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:74:2d:f9:74:81:50:be:93:3c:13:40:7c:94:89:c9:50:72:
         60:40:e0:a3:14:1d:38:4f:f3:b9:bf:d1:51:b4:94:4f:d8:49:
         7d:35:94:f3:1e:53:09:2d:8a:e4:6b:ae:09:d8:c1:50:86:c9:
         b8:09:7a:33:79:2c:68:48:b2:91:60:a2:40:75:57:46:a5:09:
         8a:47:8b:65:b6:5e:45:db:48:9b:db:ba:2f:f8:1d:af:49:50:
         5a:4b:d0:36:e3:c4:cb:ff:66:a5:cb:79:85:8d:3e:af:38:18:
         c8:c7:bf:2f:61:15:0f:26:c0:00:4a:1c:e6:d3:50:65:28:7d:
         0e:88:2b:50:d6:48:cf:40:5b:08:d5:e6:07:81:8a:69:cf:1c:
         fe:29:6f:38:ce:4c:ad:57:a8:1d:5a:c5:ef:e7:3e:ab:d6:3a:
         21:d0:5b:68:e8:ec:e4:4f:ec:12:16:73:0a:5d:86:a0:0e:bd:
         4b:78:d7:a4:31:64:a6:71:31:93:71:85:5b:f3:fa:20:81:65:
         f8:da:f9:90:b8:44:55:2c:2f:9b:f9:94:3c:03:1d:e9:82:b0:
         7c:0e:17:c6:5b:8b:42:4d:70:0e:33:0e:bb:80:08:85:2b:11:
         d3:4a:05:a9:bc:ac:85:0e:23:99:e2:f5:c0:9f:5d:9d:2d:85:
         27:9d:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:02:45 2025 by rpki-client