Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/dYBlXl5dS-o_DGoBDoY4jTKxYqA.roa
File:                     dYBlXl5dS-o_DGoBDoY4jTKxYqA.roa (raw, json)
Hash identifier:          O3tVLSc3mmRMFHkk5vY7a5F4135dYy3pjFR2dq2CDWo=
Subject key identifier:   75:80:65:5E:5E:5D:4B:EA:3F:0C:6A:01:0E:86:38:8D:32:B1:62:A0
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       54
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/dYBlXl5dS-o_DGoBDoY4jTKxYqA.roa
Signing time:             Thu 25 Sep 2025 04:29:34 +0000
ROA not before:           Thu 25 Sep 2025 04:29:34 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        114.129.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 25 04:29:34 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=7580655E5E5D4BEA3F0C6A010E86388D32B162A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:e3:be:87:8e:06:6f:f8:49:7a:dd:32:a0:
                    c9:ed:19:08:a9:ae:c8:44:1f:5c:76:3f:7a:0d:ae:
                    91:66:38:cc:e0:35:7c:b9:ac:78:e4:38:d8:c6:43:
                    77:67:32:8e:82:5e:d2:1d:4d:dc:f4:04:70:73:c4:
                    94:00:2c:99:93:f7:11:4d:52:b0:4b:63:84:17:12:
                    4e:c1:29:1b:ff:3b:6b:8f:34:19:2d:3e:df:c0:f3:
                    15:8c:0a:8f:90:3b:bd:38:d1:fa:e1:db:91:0e:b5:
                    4c:a4:a0:5f:15:d3:46:12:4c:a0:31:85:6c:54:29:
                    99:f3:ce:67:60:f2:dd:5f:21:12:de:58:c9:54:b6:
                    24:7e:88:f7:49:15:76:0f:10:c1:04:94:46:e1:31:
                    26:08:82:aa:00:c7:77:06:dd:ce:eb:f9:28:e7:1f:
                    9b:4f:34:c1:c3:94:70:f6:21:3c:0d:96:4c:41:f6:
                    d0:9b:59:8b:26:30:db:4f:b9:ed:4f:2d:df:30:51:
                    20:79:ea:54:44:4d:d5:28:dd:0b:9f:d8:03:89:fc:
                    50:24:ad:ad:7c:11:ef:c8:7a:2a:e5:46:24:e6:cd:
                    f8:47:b3:dc:50:12:ba:5a:5a:5c:7f:89:09:a7:19:
                    7f:64:0e:86:d0:f1:d6:bc:4c:b7:1d:47:07:0e:8c:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:80:65:5E:5E:5D:4B:EA:3F:0C:6A:01:0E:86:38:8D:32:B1:62:A0
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/dYBlXl5dS-o_DGoBDoY4jTKxYqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:9d:c3:05:9d:80:44:11:f9:cb:bc:e3:0d:46:44:5e:ab:
         2c:67:eb:a9:d1:f0:8c:ea:67:ef:ef:27:4d:c4:04:78:1a:2a:
         0e:91:31:b5:be:b8:e0:49:e3:b5:3b:4c:b2:ba:31:51:cf:73:
         0a:2c:48:41:f6:3d:03:e5:eb:2f:1b:4d:fe:32:e9:0c:dc:18:
         3f:fd:bd:47:c2:dd:9f:48:fa:f0:58:39:59:c2:3e:a3:2c:94:
         ae:a1:ba:ae:d4:5f:8d:9f:23:64:73:6e:57:51:49:23:18:20:
         02:30:80:ba:b7:c0:b5:bd:2b:0f:08:05:c4:ab:80:52:f4:97:
         7e:0c:55:ed:ce:6a:39:92:71:fd:71:5f:fa:0c:76:71:ec:3f:
         a4:64:27:de:d7:e2:98:c6:3c:fb:f1:49:41:0c:98:97:a0:23:
         80:2c:84:75:a7:a3:f4:c0:25:bd:e2:b2:c9:6b:22:3c:64:dd:
         de:16:08:a2:7f:53:5b:62:2f:f6:ee:30:d1:36:c7:51:f6:43:
         7d:3e:c7:ce:f2:dd:b3:30:56:bb:7e:fb:51:c8:f2:51:7a:cc:
         62:c3:b2:45:2f:db:79:b9:58:19:a2:06:66:24:90:fa:37:6c:
         a6:c0:cb:80:3c:c6:3d:80:8d:72:96:7b:6e:66:df:a8:e9:cf:
         e7:11:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:34 2025 by rpki-client