Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OyWPIIASs91TumizjnJYi5kvHXQ.roa
File:                     OyWPIIASs91TumizjnJYi5kvHXQ.roa (raw, json)
Hash identifier:          7ZW1rOw8JX1d1Lbegn4P+o4vX94C93gYQO1W09g7ihM=
Subject key identifier:   3B:25:8F:20:80:12:B3:DD:53:BA:68:B3:8E:72:58:8B:99:2F:1D:74
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       048A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OyWPIIASs91TumizjnJYi5kvHXQ.roa
Signing time:             Wed 01 Oct 2025 01:39:55 +0000
ROA not before:           Wed 01 Oct 2025 01:39:55 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:55 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=3B258F208012B3DD53BA68B38E72588B992F1D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:9b:c4:fd:00:e6:2d:1c:6b:ca:33:bd:3d:
                    4b:3c:90:f7:fe:a9:11:68:5c:21:b3:92:6a:8c:7f:
                    8c:33:72:8e:50:8b:c1:ca:bd:c7:b0:47:a1:73:23:
                    30:ca:5c:ca:86:6c:6d:e8:30:0c:cb:cd:6b:07:94:
                    5d:20:19:f0:ad:10:93:f9:07:95:60:e4:f7:55:dd:
                    67:d0:71:86:08:5f:96:a4:e4:6b:c2:d3:67:8d:7d:
                    2f:6d:65:6f:da:eb:a4:67:a5:af:81:53:e2:0f:66:
                    ca:60:31:40:b7:d1:ca:c3:74:5a:c5:65:c5:e9:20:
                    ae:44:c4:a1:b1:8d:b3:0a:ea:ec:b7:d7:a5:f0:b5:
                    04:cb:b3:05:4a:61:b6:3d:7e:a2:ca:9a:04:86:f1:
                    29:c5:f4:92:67:b2:78:51:ca:f6:dc:86:ea:d7:66:
                    87:4c:cc:79:a2:da:58:79:0c:b2:e0:2f:b5:dc:6e:
                    1b:5a:f4:36:76:84:d0:4c:85:4f:31:ac:7d:72:82:
                    95:1b:75:57:cb:fb:47:23:95:fe:db:7e:8b:80:2f:
                    ce:63:27:a5:94:77:2f:11:95:04:2d:8d:0b:ce:1c:
                    82:08:e8:71:47:aa:d4:c0:6f:80:b6:d2:2b:a7:97:
                    e6:7f:95:27:59:cb:f4:cf:b6:14:af:63:76:64:96:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:8F:20:80:12:B3:DD:53:BA:68:B3:8E:72:58:8B:99:2F:1D:74
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OyWPIIASs91TumizjnJYi5kvHXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:7b:a2:0d:c6:03:7e:50:a4:a6:0e:9b:81:ca:70:7d:a9:
         8b:37:b6:0e:a4:5b:56:23:e9:c5:a4:b6:d3:c3:11:14:32:9c:
         df:9c:2d:a4:37:fc:ee:6d:50:c1:13:5f:9c:19:0c:ab:73:2b:
         cc:1d:c0:c2:c0:1c:4c:63:01:00:3e:aa:ec:ca:bd:d7:93:5e:
         be:aa:57:16:1f:0a:c6:9f:f1:be:f8:c1:24:ca:d9:ee:85:ac:
         6f:82:1a:07:8d:e3:57:10:87:3b:83:da:04:f3:4c:08:6f:cc:
         2f:11:42:6c:89:65:fe:63:e5:6f:c6:a4:d6:77:92:c7:58:a4:
         98:d4:3d:fd:f4:61:1b:31:66:de:22:7f:81:d5:e6:85:41:9d:
         21:6d:b1:35:dd:c1:81:41:fd:0d:34:96:09:ab:67:ac:34:9d:
         49:90:ae:01:c2:dd:e3:06:3b:00:66:46:28:6d:64:22:a8:f7:
         ee:93:f9:ab:6a:eb:8c:35:17:df:7f:99:6c:ab:1a:27:0d:6b:
         e7:6c:0b:1b:f4:0f:d0:cb:81:21:b3:a3:f5:e4:d2:e3:bb:67:
         43:40:5c:8e:69:cd:82:d0:df:43:a7:6b:56:70:96:35:54:e4:
         a5:9b:a1:c3:c2:cd:87:6f:32:a0:bc:6b:e1:be:07:b2:e5:be:
         d1:78:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:50:49 2025 by rpki-client