Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/gHZQzv5G4FaAi8hpEyWqKBFz3xo.roa
File:                     gHZQzv5G4FaAi8hpEyWqKBFz3xo.roa (raw, json)
Hash identifier:          goNHwz4NZiqsNMy/4sKIGLynoWMzXOcqSef+8NwzMuc=
Subject key identifier:   80:76:50:CE:FE:46:E0:56:80:8B:C8:69:13:25:AA:28:11:73:DF:1A
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       47
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/gHZQzv5G4FaAi8hpEyWqKBFz3xo.roa
Signing time:             Thu 11 Sep 2025 01:25:31 +0000
ROA not before:           Thu 11 Sep 2025 01:25:31 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        202.71.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 11 01:25:31 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=807650CEFE46E056808BC8691325AA281173DF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:f0:69:e1:3b:66:e0:1c:45:f9:ef:b3:aa:
                    fe:cb:ea:05:4b:51:34:82:5e:17:34:08:a8:8d:35:
                    df:ad:d6:0f:28:ec:e0:28:1d:fb:9b:95:b1:15:c0:
                    b0:b0:ed:ad:7d:ab:17:fd:dc:45:0a:be:67:d6:d3:
                    a6:86:11:56:77:dd:47:37:55:7c:9b:a2:87:62:fc:
                    18:98:11:a6:d5:33:65:44:42:1e:d5:2d:3f:c5:fa:
                    6e:17:6d:62:3b:f8:15:4c:25:9d:93:a7:d6:6b:5f:
                    b1:db:62:fb:ad:8a:e6:8a:27:8a:bc:5b:9d:67:f9:
                    92:4f:2e:af:71:8d:7c:8a:b2:74:e5:16:e5:4d:cf:
                    8a:05:94:8f:25:73:7d:e0:83:cb:f5:ef:1a:77:85:
                    2d:d9:11:ea:a5:5c:0f:9f:ed:1f:de:af:13:d8:e6:
                    02:2c:04:ab:18:59:d7:b0:a3:1f:f0:db:97:ec:f2:
                    df:00:0b:e2:be:69:02:58:36:6a:1b:04:24:ce:59:
                    a0:c4:e9:52:a5:36:63:83:ed:a2:65:2b:8d:7a:07:
                    54:b9:c5:c4:26:fc:93:c9:da:23:4c:00:32:50:89:
                    55:e3:50:d3:54:19:a5:0e:1e:04:e7:34:f3:a2:cc:
                    f1:b4:6a:b2:72:12:ff:a8:01:5a:9e:be:1c:ed:fd:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:76:50:CE:FE:46:E0:56:80:8B:C8:69:13:25:AA:28:11:73:DF:1A
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/gHZQzv5G4FaAi8hpEyWqKBFz3xo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.71.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:26:ea:72:35:71:48:4f:87:3b:8b:4d:01:eb:b3:98:15:
         c7:1c:84:99:49:8c:61:fb:5b:c0:57:ce:48:0f:30:ac:5f:64:
         c9:84:0c:6b:53:63:b9:d3:17:f0:76:68:05:97:99:29:27:9c:
         49:a0:48:42:8a:b3:79:bc:14:87:21:5d:f2:45:60:f5:2b:87:
         b3:0d:32:af:89:25:c0:98:cb:50:c7:d1:e4:87:15:1e:c9:29:
         1a:c7:d2:12:73:cf:3c:32:b1:3f:ed:bc:07:d8:08:63:cf:c3:
         47:46:fd:a4:75:86:2f:7f:4c:bf:31:5d:cd:2a:28:c8:ff:26:
         5f:c3:62:6e:6a:c2:71:4e:46:20:98:2d:3b:69:da:49:5b:15:
         de:2a:80:1e:ca:58:03:fd:f4:62:7f:b4:8b:d7:25:36:25:45:
         08:38:01:1d:10:07:72:48:bd:47:2b:d6:4a:24:fa:28:65:c4:
         5e:cc:fa:b8:44:47:e6:58:c6:78:08:f4:bf:c5:53:44:e8:08:
         bb:20:52:39:09:92:a4:d7:7d:79:61:c2:4c:34:ae:05:fc:0e:
         80:48:39:a2:c1:f7:79:ad:0d:74:9a:85:05:bf:30:7a:23:1e:
         60:6c:fe:bc:e8:a1:61:35:72:78:72:b5:86:d8:ca:2a:66:ca:
         78:79:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:33:53 2025 by rpki-client