Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/yJcAiR12W_P0FIWQJkKfOqvksZ4.roa
File:                     yJcAiR12W_P0FIWQJkKfOqvksZ4.roa (raw, json)
Hash identifier:          pJzMVySXD0lf2YT3I3M3As0rcyte3fJHTAu2eLMgevw=
Subject key identifier:   C8:97:00:89:1D:76:5B:F3:F4:14:85:90:26:42:9F:3A:AB:E4:B1:9E
Certificate issuer:       /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial:       59
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/yJcAiR12W_P0FIWQJkKfOqvksZ4.roa
Signing time:             Wed 01 Oct 2025 01:30:23 +0000
ROA not before:           Wed 01 Oct 2025 01:30:23 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        2001:3b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
        Validity
            Not Before: Oct  1 01:30:23 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=C89700891D765BF3F414859026429F3AABE4B19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:12:7f:7b:e4:03:69:d0:ca:b4:09:0b:a1:
                    b2:76:fd:d4:70:26:37:8b:1d:24:ea:7b:3e:b6:7e:
                    db:6c:e3:b3:43:5d:7c:48:37:e4:dc:1c:6c:74:f6:
                    9f:2a:e5:f0:e9:a3:fc:6b:10:3d:99:ab:8f:94:f8:
                    47:be:19:90:be:d1:2e:c3:f7:36:3d:92:22:06:ed:
                    7b:52:d4:db:23:9d:93:8c:80:eb:e8:0a:fb:f3:78:
                    d7:e0:08:99:09:58:7f:5f:cb:5f:2d:b5:b6:2a:2f:
                    b3:16:f5:fb:58:c2:6d:7e:10:d7:ac:47:b0:f5:9e:
                    78:fd:77:ac:b8:9b:da:6a:5b:5e:95:cf:2f:fa:01:
                    4d:5b:3b:0d:6a:e6:9b:69:8f:57:3e:fe:83:ff:ad:
                    74:c5:a0:da:a4:bb:34:61:ba:80:f3:d4:53:e4:9b:
                    83:f9:1a:b3:18:84:06:c5:15:78:7e:54:cb:56:3c:
                    e9:d9:0c:ee:ca:e8:12:ec:7d:5d:e1:1f:ac:0a:c1:
                    15:07:0a:cc:a5:6d:58:42:65:df:b2:91:56:c8:bc:
                    9c:fd:5a:61:ef:1c:18:22:85:49:c6:56:77:1e:6a:
                    e3:bb:56:84:32:14:7a:de:02:13:fa:13:dc:d9:7a:
                    6a:71:d4:97:f4:03:87:53:51:ee:08:53:ed:98:15:
                    50:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:00:89:1D:76:5B:F3:F4:14:85:90:26:42:9F:3A:AB:E4:B1:9E
            X509v3 Authority Key Identifier:
                keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/yJcAiR12W_P0FIWQJkKfOqvksZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:89:e1:99:b6:73:d2:82:47:ea:88:ba:a8:16:24:bc:b5:82:
         cd:b3:80:e0:49:0f:b5:33:86:9a:ac:c4:6a:71:65:7d:4e:76:
         54:f6:60:bc:05:7d:e2:2b:d1:83:3a:cb:2d:c0:ac:0a:92:36:
         9f:59:76:47:bf:68:45:03:e2:16:67:0b:24:c0:8c:f1:83:1e:
         44:8c:28:a0:92:32:64:26:fb:79:ea:0c:00:17:34:62:37:a3:
         b2:73:70:34:fd:54:c3:00:2a:ff:2d:9c:9f:2a:d1:81:39:13:
         60:ee:5c:eb:c7:d2:5b:0f:63:d7:fd:3c:fb:a8:19:ff:83:15:
         3a:e2:05:62:db:56:4b:aa:e5:f0:30:3e:05:82:27:8b:c2:a8:
         4e:a4:50:86:7f:e5:0b:ae:9d:35:e7:b2:89:d1:a2:8e:4f:90:
         ae:4d:8e:c4:6b:c4:ce:43:be:cb:11:5e:33:c2:b6:93:a9:a0:
         ae:58:83:61:80:5d:57:a2:84:34:fe:ab:5c:9c:57:a4:f1:ce:
         74:dd:bd:7a:b0:7e:08:67:7c:90:12:ab:8f:5f:6d:ad:70:83:
         2b:3e:d6:87:8f:19:df:ac:47:f1:00:75:b2:4e:54:8c:3e:2c:
         c2:5f:2a:a7:6d:74:af:24:e9:65:d7:1d:1d:6b:61:01:9d:e6:
         f1:1f:03:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:56 2025 by rpki-client