Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa
File:                     ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa (raw, json)
Hash identifier:          u6I9NueSvmkR8yp/TFNjqx+RV8o/wcsfLdAlSlZSVc0=
Subject key identifier:   A2:E0:7F:6D:DA:F5:2B:97:88:39:88:D3:13:03:69:F0:61:E0:C8:CC
Certificate issuer:       /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial:       02
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa
Signing time:             Tue 14 Oct 2025 10:12:49 +0000
ROA not before:           Tue 14 Oct 2025 10:12:49 +0000
ROA not after:            Fri 09 Oct 2026 01:48:16 +0000
asID:                     7503
IP address blocks:        2402:3800:dc03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
        Validity
            Not Before: Oct 14 10:12:49 2025 GMT
            Not After : Oct  9 01:48:16 2026 GMT
        Subject: CN=A2E07F6DDAF52B97883988D3130369F061E0C8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:6f:5b:b2:b2:a6:f4:2f:d9:2c:7e:c7:34:
                    30:4a:d1:b9:69:a6:62:f2:f3:f8:fb:8e:91:f8:39:
                    dc:6e:81:6e:a0:83:4d:fc:f5:36:cd:e8:bf:19:62:
                    68:2a:81:4b:3d:07:8b:c9:a7:f4:fa:01:4a:8d:84:
                    eb:b7:5a:40:86:ed:89:00:f6:87:4d:18:1a:39:ed:
                    b2:6a:e0:cd:fc:41:c4:8d:58:e0:86:30:5f:e4:8f:
                    b2:fe:15:3b:9a:66:f9:be:40:af:7d:e0:a0:f9:bc:
                    a9:c0:7b:09:be:58:f1:79:c1:69:0f:5a:30:2b:af:
                    bc:9a:59:96:66:ea:a8:cc:86:e9:22:20:7c:20:f5:
                    c6:50:c7:b3:ae:ac:bc:bc:44:61:d8:67:29:6f:b2:
                    9c:ab:28:03:80:f3:9d:d5:38:2c:75:ea:67:b0:76:
                    e7:4c:2e:9f:57:6e:c0:83:ff:bc:77:2b:bc:18:ea:
                    3d:b4:f8:37:01:d8:cb:b5:22:fe:cc:11:a3:2b:53:
                    3e:28:44:cc:1a:b0:8a:38:03:87:c9:3d:12:28:c6:
                    2a:7d:c4:2b:ac:f6:d4:5d:1f:30:b5:95:38:6e:e4:
                    7c:ae:c4:45:8f:d6:55:c4:1b:3b:77:b9:35:5f:0b:
                    79:c8:be:bd:40:a5:6b:fc:db:77:52:ee:11:76:c9:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:7F:6D:DA:F5:2B:97:88:39:88:D3:13:03:69:F0:61:E0:C8:CC
            X509v3 Authority Key Identifier:
                keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3800:dc03::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:87:dd:dd:e2:64:4f:46:90:6e:7e:4e:33:de:bf:8c:e0:97:
         69:f9:95:78:e2:18:f2:38:32:79:04:60:33:64:42:32:08:cd:
         29:3a:d2:28:cc:41:dc:d9:07:ab:95:de:ff:b5:40:01:17:be:
         ef:3d:91:a2:ee:20:c3:b2:b7:03:ad:12:f8:aa:db:f6:0a:2a:
         2e:5f:56:52:e1:ed:d2:42:a0:4d:76:2d:b9:27:05:2a:1b:dd:
         eb:dd:c0:b3:32:7a:43:14:40:c9:b5:ab:97:c4:e9:66:0e:18:
         0a:f4:8d:e5:62:0b:b1:2e:4c:c3:cd:e4:08:d0:49:f1:c2:18:
         ee:18:38:ab:0e:d3:bf:ec:78:92:30:c6:d3:e5:84:96:11:7f:
         55:66:fb:05:6f:ad:13:17:c6:19:ef:f1:df:47:49:37:4e:96:
         eb:f5:5a:99:a8:fa:7d:43:b7:b3:c7:28:df:d0:8a:89:29:7e:
         01:bc:4e:fa:c1:cd:c6:61:67:59:c2:43:7d:4d:18:c4:28:46:
         a9:ac:4c:c5:6e:a8:f0:09:a2:55:d5:64:17:02:4b:4a:02:f2:
         09:27:68:29:66:57:09:5c:ae:2e:a9:8c:d2:bf:27:f2:a5:94:
         64:8c:d5:7d:52:6a:a6:31:51:03:e8:e0:2c:c5:53:cb:4e:3e:
         44:d1:e8:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0RG
OThENDhGNDQ4QjQ4QTQ3MTFDODc2Q0NEMjdCQThCNzE4NTI3MB4XDTI1MTAxNDEw
MTI0OVoXDTI2MTAwOTAxNDgxNlowMzExMC8GA1UEAxMoQTJFMDdGNkREQUY1MkI5
Nzg4Mzk4OEQzMTMwMzY5RjA2MUUwQzhDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJjib1uysqb0L9ksfsc0MErRuWmmYvLz+PuOkfg53G6BbqCDTfz1
Ns3ovxliaCqBSz0Hi8mn9PoBSo2E67daQIbtiQD2h00YGjntsmrgzfxBxI1Y4IYw
X+SPsv4VO5pm+b5Ar33goPm8qcB7Cb5Y8XnBaQ9aMCuvvJpZlmbqqMyG6SIgfCD1
xlDHs66svLxEYdhnKW+ynKsoA4DzndU4LHXqZ7B250wun1duwIP/vHcrvBjqPbT4
NwHYy7Ui/swRoytTPihEzBqwijgDh8k9EijGKn3EK6z21F0fMLWVOG7kfK7ERY/W
VcQbO3e5NV8Leci+vUCla/zbd1LuEXbJpTkCAwEAAaOCAiswggInMB0GA1UdDgQW
BBSi4H9t2vUrl4g5iNMTA2nwYeDIzDAfBgNVHSMEGDAWgBSz35jUj0SLSKRxHIds
zSe6i3GFJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwODkvczktWTFJOUVpMGlrY1J5SGJNMG51b3R4aFNjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczktWTFJOUVpMGlrY1J5SGJNMG51
b3R4aFNjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDg5L291Ql9iZHIxSzVlSU9ZalRFd05wOEdIZ3lNdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkAjgA3AMwDQYJKoZIhvcNAQELBQADggEBADOH3d3iZE9GkG5+TjPe
v4zgl2n5lXjiGPI4MnkEYDNkQjIIzSk60ijMQdzZB6uV3v+1QAEXvu89kaLuIMOy
twOtEviq2/YKKi5fVlLh7dJCoE12LbknBSob3evdwLMyekMUQMm1q5fE6WYOGAr0
jeViC7EuTMPN5AjQSfHCGO4YOKsO07/seJIwxtPlhJYRf1Vm+wVvrRMXxhnv8d9H
STdOluv1Wpmo+n1Dt7PHKN/QiokpfgG8TvrBzcZhZ1nCQ31NGMQoRqmsTMVuqPAJ
olXVZBcCS0oC8gknaClmVwlcri6pjNK/J/KllGSM1X1SaqYxUQPo4CzFU8tOPkTR
6LE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:00:25 2025 by rpki-client