Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/qbrkM1sMcRnYT8oj_BOfisqtJOs.roa
File:                     qbrkM1sMcRnYT8oj_BOfisqtJOs.roa (raw, json)
Hash identifier:          38mF4vOVk1kQe1qAaNHFFxBus1aYFkCU/f/9SaN8iUE=
Subject key identifier:   A9:BA:E4:33:5B:0C:71:19:D8:4F:CA:23:FC:13:9F:8A:CA:AD:24:EB
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       50
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/qbrkM1sMcRnYT8oj_BOfisqtJOs.roa
Signing time:             Thu 18 Sep 2025 04:26:47 +0000
ROA not before:           Thu 18 Sep 2025 04:26:47 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        219.113.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 18 04:26:47 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A9BAE4335B0C7119D84FCA23FC139F8ACAAD24EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:97:cb:e8:65:a5:c2:6c:2e:f7:b7:8d:21:
                    0c:7d:ed:5d:87:52:25:42:99:ae:3a:47:15:37:13:
                    05:53:09:2c:4c:be:f9:89:fe:9d:3b:c7:c9:90:bc:
                    19:6e:a9:d6:b9:ef:00:e7:a9:35:83:d8:8f:4c:3b:
                    a9:d2:e6:19:e0:a7:89:e7:43:8e:2f:a8:50:00:30:
                    23:ca:c7:1c:53:e0:e0:fc:6d:0c:55:9b:9d:b0:c9:
                    6f:42:81:a9:4b:7a:36:9d:6b:38:9a:b7:ce:65:3e:
                    0a:25:87:0a:41:3b:60:7d:88:3d:b7:ed:bf:9b:17:
                    2a:0c:85:b6:85:c6:c0:c3:db:1a:a4:6f:f9:53:c7:
                    d2:3b:94:b1:f3:a8:bc:ae:4e:d4:5a:82:90:ec:14:
                    f8:b9:89:d6:66:e5:7d:37:fc:73:4b:19:02:ce:39:
                    0e:41:4f:4a:75:8a:d3:57:58:a9:c7:e8:b2:f2:24:
                    b4:fe:56:7c:01:9e:f2:07:4a:3c:9e:cd:5f:a6:30:
                    51:6d:3b:e0:d9:e5:87:d1:33:af:a6:b9:df:a2:eb:
                    bf:00:ab:22:6c:48:fc:a3:d3:4c:aa:25:0b:7c:cb:
                    1e:92:e3:98:f1:2d:94:3d:4c:03:f3:3d:43:2c:4b:
                    24:fe:55:e6:28:74:c2:5d:9f:7b:cb:28:3a:d9:3b:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:E4:33:5B:0C:71:19:D8:4F:CA:23:FC:13:9F:8A:CA:AD:24:EB
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/qbrkM1sMcRnYT8oj_BOfisqtJOs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:7a:e8:1a:bc:47:8c:db:15:67:87:0c:ce:87:f2:57:65:
         e2:35:05:a2:17:fe:1a:71:51:de:10:63:1d:c5:38:04:d9:a7:
         7f:09:e3:7c:ad:17:55:9e:e0:5a:c9:9d:d7:b7:ba:44:75:ac:
         93:8e:01:2a:e4:7a:75:19:6a:ab:43:7d:be:70:cb:e7:c6:b6:
         28:6d:e4:ca:82:75:f8:2a:83:4a:bf:b9:a9:e3:88:15:41:ee:
         06:9b:79:a6:d4:de:e5:04:63:65:9b:a8:89:ca:cb:ab:c3:e4:
         52:9b:b0:44:1f:fe:85:7c:43:ba:ae:13:1d:34:a4:a0:87:37:
         7e:4c:20:c2:10:3a:73:f1:cb:e1:4a:3b:7f:28:ba:cd:ae:8a:
         35:70:90:2d:e8:18:94:91:83:fc:be:b1:3e:3c:92:3c:29:2d:
         e3:90:53:15:31:0d:ac:9a:7e:41:35:02:0d:ad:7f:d2:c5:3d:
         7b:7a:e1:ff:f3:c5:29:0e:f5:e0:d2:00:7f:b7:ac:f9:3c:34:
         c3:b0:fc:3d:3f:84:07:2b:a1:13:a6:3f:ca:38:66:c2:39:24:
         b1:c7:e8:3e:f5:47:f2:27:5f:5b:7e:5e:e5:2a:ba:ab:c9:a7:
         68:f4:00:6a:3e:f8:8d:7d:13:44:06:b3:f0:fe:3d:88:f1:c7:
         03:d4:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:33:42 2025 by rpki-client