Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/PKZOGuSM1daMWe_atD4yLJjyIWY.roa
File:                     PKZOGuSM1daMWe_atD4yLJjyIWY.roa (raw, json)
Hash identifier:          mYCW9R+3RDvom53E61DhCGSZB8pUKkwxRAcw0FVo9Vw=
Subject key identifier:   3C:A6:4E:1A:E4:8C:D5:D6:8C:59:EF:DA:B4:3E:32:2C:98:F2:21:66
Certificate issuer:       /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial:       04
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/PKZOGuSM1daMWe_atD4yLJjyIWY.roa
Signing time:             Wed 15 Oct 2025 09:09:46 +0000
ROA not before:           Wed 15 Oct 2025 09:09:45 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     7503
IP address blocks:        2402:3800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
        Validity
            Not Before: Oct 15 09:09:45 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=3CA64E1AE48CD5D68C59EFDAB43E322C98F22166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:1c:a6:f6:b0:e3:9d:74:7e:2b:30:bb:76:
                    7e:41:47:0d:94:f5:6b:ee:74:e3:76:72:08:f5:c0:
                    70:ed:e2:91:7c:29:9a:83:2b:30:bc:aa:21:bf:06:
                    b4:10:6b:49:b6:9d:0f:3c:13:3c:20:6c:7e:ae:82:
                    31:bb:2c:7a:a9:a2:06:91:47:e1:26:70:b5:1a:5d:
                    7a:72:fb:75:a8:48:d9:ff:59:7e:76:7a:b1:22:06:
                    6e:29:d4:be:6b:cc:12:36:50:a5:4e:93:a3:e6:a3:
                    71:a2:c5:5d:89:5f:3e:11:ee:3e:17:ea:53:7a:0b:
                    73:60:af:24:81:af:22:b6:6e:a5:8b:41:9c:eb:37:
                    52:09:29:c8:f0:1d:0c:5b:d3:af:1e:d1:ba:ea:ac:
                    ee:76:b8:ee:53:95:ce:78:da:33:27:c5:b7:cb:e7:
                    c8:e9:6c:3c:d0:b9:f2:b3:61:8e:48:4f:a6:13:f8:
                    f4:2d:83:d2:36:ae:cd:90:48:77:10:0a:78:2f:6c:
                    1c:7f:39:07:e7:f5:9c:6b:44:ec:39:48:8f:8d:ed:
                    35:66:b1:5c:fa:2e:bf:01:ed:bf:ec:5b:65:86:a6:
                    33:c1:a6:a7:f0:19:ab:d3:30:18:29:af:b4:fd:9e:
                    ff:58:81:a9:0e:db:76:c2:1f:93:8b:5e:61:1e:51:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A6:4E:1A:E4:8C:D5:D6:8C:59:EF:DA:B4:3E:32:2C:98:F2:21:66
            X509v3 Authority Key Identifier:
                keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/PKZOGuSM1daMWe_atD4yLJjyIWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:08:a1:cc:4d:13:66:05:0f:fd:c2:30:be:6a:43:d2:bc:02:
         ca:4b:02:32:3b:2e:76:73:3e:a1:1e:d0:2a:10:ad:27:22:40:
         19:5a:a3:45:c6:eb:57:86:80:fd:36:7d:60:be:42:04:92:ee:
         7e:98:1c:c0:ef:31:ec:3f:2a:cc:2b:36:e2:5a:5c:de:13:2d:
         2b:56:65:3b:7c:94:81:68:c9:7b:77:c9:54:15:02:c3:8b:51:
         08:0c:75:4c:e6:7c:7c:85:df:14:6e:72:b1:e3:ba:c6:ca:b2:
         1e:4d:54:a7:bc:8f:8e:a2:ee:f1:93:3b:60:d3:6c:7a:19:2b:
         59:90:49:f2:90:30:8c:c3:8f:bf:71:2e:57:4a:da:c1:97:36:
         73:6e:36:19:36:e2:22:e3:01:2a:5f:fe:11:3b:24:63:ea:82:
         61:20:82:20:83:bb:72:52:97:c5:24:7c:f0:ff:3d:ea:b9:92:
         ec:8e:00:48:d8:ad:89:d0:b1:2c:19:3c:c9:f8:1d:70:ad:98:
         02:f0:1d:5c:dd:1c:23:dc:25:93:63:83:e3:a5:56:4e:38:76:
         20:f5:5d:e6:12:64:0e:68:0f:23:e5:5f:ca:bc:33:5b:77:5f:
         9a:26:84:21:99:45:1d:eb:37:bc:18:d1:ea:eb:a1:09:f8:5c:
         0c:c2:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:27:30 2025 by rpki-client