Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O_spAvrINmsGrlueD-XtILGadKA.roa
File:                     O_spAvrINmsGrlueD-XtILGadKA.roa (raw, json)
Hash identifier:          SyZbyVDap4OvOc3qZbM2woB8Dldghjorej7Ees8rBD0=
Subject key identifier:   3B:FB:29:02:FA:C8:36:6B:06:AE:5B:9E:0F:E5:ED:20:B1:9A:74:A0
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       DD
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O_spAvrINmsGrlueD-XtILGadKA.roa
Signing time:             Wed 01 Oct 2025 01:28:10 +0000
ROA not before:           Wed 01 Oct 2025 01:28:10 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     55888
IP address blocks:        61.200.81.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Oct  1 01:28:10 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=3BFB2902FAC8366B06AE5B9E0FE5ED20B19A74A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:c3:9a:43:bb:fc:f9:77:0e:7f:ea:99:52:
                    00:94:1b:1f:b8:40:c6:af:89:82:9b:16:94:0a:85:
                    47:f0:fb:89:8a:0a:b9:30:b3:4d:08:24:b9:71:44:
                    d2:66:fb:d1:db:7c:30:54:5e:bf:5c:68:89:65:2a:
                    a8:dd:19:3f:3c:fc:f3:b7:e1:75:e8:10:c9:3c:b7:
                    3a:fa:24:b4:32:20:50:5b:84:e3:b5:ce:3a:bc:54:
                    bb:8d:6c:1a:69:72:ab:70:1d:2e:3e:90:7d:ae:ba:
                    56:9e:cc:17:04:9b:a7:65:1b:43:8c:0b:2a:af:6e:
                    4f:f9:d1:4b:94:7a:83:7f:74:ff:bd:8f:4d:95:46:
                    87:22:e9:50:ed:49:2d:b6:50:7a:57:71:bf:f8:80:
                    ba:d8:e2:61:33:3e:f2:91:9c:73:8b:f4:fc:47:2b:
                    c7:f0:36:cd:68:9f:fa:b8:cf:ca:06:fa:22:a0:48:
                    58:43:ac:ef:48:86:48:6d:a8:4b:db:dd:1d:aa:2c:
                    9b:97:af:89:6c:e6:29:9c:e7:ec:91:d4:45:f4:42:
                    ec:56:f7:92:26:2d:be:c9:86:e6:bc:7d:f4:a9:00:
                    b8:bb:2e:c2:4c:71:44:ec:1b:9a:30:8d:2f:05:19:
                    20:66:a6:e6:27:01:21:a2:3b:a3:25:03:80:94:df:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:29:02:FA:C8:36:6B:06:AE:5B:9E:0F:E5:ED:20:B1:9A:74:A0
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/O_spAvrINmsGrlueD-XtILGadKA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.81.128/25

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:1b:38:61:b8:97:0c:a9:27:5e:17:ef:46:09:2c:51:f8:
         66:35:75:6a:de:31:07:40:b7:9f:18:9d:8c:38:80:10:8d:33:
         a8:b2:c9:78:7c:e4:2e:39:21:73:85:e9:69:20:9b:23:8d:b8:
         39:c1:a4:97:1e:1f:4c:6b:97:19:10:7b:4c:93:dd:06:97:f9:
         64:be:ec:1a:40:a3:2a:70:f1:f4:41:c3:e4:de:49:a8:28:18:
         ae:cd:53:a7:44:a2:ba:ab:dd:67:26:1c:ec:73:c8:84:e6:79:
         83:90:53:46:84:99:ca:da:2b:b6:54:5a:68:29:55:0e:c7:34:
         13:48:6a:73:3c:18:6b:05:21:ee:3f:4f:84:80:ed:c0:80:61:
         d6:f5:90:42:1f:23:ad:05:71:23:f4:d7:0c:3f:33:1d:4f:db:
         3a:9b:8b:fd:28:18:50:92:b2:6f:f7:cd:95:3d:11:79:b3:a0:
         fb:00:91:02:e7:8b:b6:f2:c0:e5:e9:ca:5d:61:8c:73:0f:36:
         ba:2f:c3:37:ae:03:7c:db:a8:99:d1:5a:a6:be:68:f8:c0:17:
         8f:7f:ad:89:46:7a:78:5c:b2:e1:30:e9:f0:3d:ec:42:28:3c:
         31:c5:df:90:18:c5:df:96:df:d3:0d:58:d4:1a:1d:b4:61:6d:
         a5:72:d2:47
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMDEw
MTI4MTBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCRkIyOTAyRkFDODM2
NkIwNkFFNUI5RTBGRTVFRDIwQjE5QTc0QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYY8OaQ7v8+XcOf+qZUgCUGx+4QMaviYKbFpQKhUfw+4mKCrkw
s00IJLlxRNJm+9HbfDBUXr9caIllKqjdGT88/PO34XXoEMk8tzr6JLQyIFBbhOO1
zjq8VLuNbBppcqtwHS4+kH2uulaezBcEm6dlG0OMCyqvbk/50UuUeoN/dP+9j02V
Roci6VDtSS22UHpXcb/4gLrY4mEzPvKRnHOL9PxHK8fwNs1on/q4z8oG+iKgSFhD
rO9IhkhtqEvb3R2qLJuXr4ls5imc5+yR1EX0QuxW95ImLb7Jhua8ffSpALi7LsJM
cUTsG5owjS8FGSBmpuYnASGiO6MlA4CU3/sdAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUO/spAvrINmsGrlueD+XtILGadKAwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9PX3NwQXZySU5tc0dybHVlRC1YdElMR2FkS0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUHPchRgDANBgkqhkiG9w0BAQsFAAOCAQEAgBobOGG4lwypJ14X70YJ
LFH4ZjV1at4xB0C3nxidjDiAEI0zqLLJeHzkLjkhc4XpaSCbI424OcGklx4fTGuX
GRB7TJPdBpf5ZL7sGkCjKnDx9EHD5N5JqCgYrs1Tp0SiuqvdZyYc7HPIhOZ5g5BT
RoSZytortlRaaClVDsc0E0hqczwYawUh7j9PhIDtwIBh1vWQQh8jrQVxI/TXDD8z
HU/bOpuL/SgYUJKyb/fNlT0RebOg+wCRAueLtvLA5enKXWGMcw82ui/DN64DfNuo
mdFapr5o+MAXj3+tiUZ6eFyy4TDp8D3sQig8McXfkBjF35bf0w1Y1BodtGFtpXLS
Rw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:19:01 2025 by rpki-client