Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/M3nUTUqT0_bzvbalVHkvWZNkMfk.roa
File:                     M3nUTUqT0_bzvbalVHkvWZNkMfk.roa (raw, json)
Hash identifier:          ABxC9ZJHEfjKw5lBJrbVoWgB24ROUfugMmchrsgbDWc=
Subject key identifier:   33:79:D4:4D:4A:93:D3:F6:F3:BD:B6:A5:54:79:2F:59:93:64:31:F9
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0199
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/M3nUTUqT0_bzvbalVHkvWZNkMfk.roa
Signing time:             Wed 01 Oct 2025 01:33:51 +0000
ROA not before:           Wed 01 Oct 2025 01:33:51 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        124.219.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:51 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=3379D44D4A93D3F6F3BDB6A554792F59936431F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:da:01:bf:17:bf:de:ad:97:ea:c5:cf:fd:
                    0b:08:a6:5d:ab:ed:a0:30:3c:ab:d1:98:2e:9b:18:
                    36:56:a6:aa:8e:0a:12:8c:04:79:83:a1:a4:3d:17:
                    78:71:61:69:f0:79:e3:ce:66:54:fa:c8:e5:d6:ad:
                    99:f4:63:09:0b:4f:b8:d7:23:6b:df:9b:78:c1:98:
                    a5:87:ba:9a:6c:66:5a:9c:03:58:12:ab:c3:01:2e:
                    e4:c1:85:8e:4f:42:fd:6f:3e:22:f3:1e:14:13:d1:
                    32:ee:5d:80:1d:70:a3:fa:73:4f:ca:d0:db:1d:b0:
                    4a:93:49:f4:d7:88:88:27:1e:bd:14:e0:fa:88:f9:
                    2e:bd:48:0a:26:1d:f0:b1:49:3a:e5:53:40:fb:ee:
                    28:59:27:83:54:00:64:76:d5:f5:99:fc:0a:c6:fb:
                    cf:46:d5:3e:97:06:b9:a7:e0:08:24:74:41:4a:1d:
                    a1:55:c6:31:07:68:be:f6:09:ca:77:43:d6:cb:f9:
                    21:f7:e3:d4:10:64:14:17:61:d1:7e:cd:20:13:6f:
                    fb:40:ef:7e:cf:bf:11:5d:1e:60:b8:ea:97:0e:f7:
                    b4:b1:9a:4a:60:7f:78:d8:d3:42:1a:6a:d2:83:22:
                    87:e2:e1:82:b0:8e:98:be:3f:96:5e:55:3d:25:a5:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:D4:4D:4A:93:D3:F6:F3:BD:B6:A5:54:79:2F:59:93:64:31:F9
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/M3nUTUqT0_bzvbalVHkvWZNkMfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:19:59:65:ad:9f:2e:f5:ff:23:8c:ab:f1:c3:08:0f:7a:
         ae:6e:f4:4b:eb:17:f4:8e:aa:2d:43:02:08:24:df:d8:8a:eb:
         bc:a1:08:e3:a9:f0:98:07:56:3e:da:0a:36:5b:86:37:1c:25:
         24:93:a9:1b:43:a0:d2:4b:14:bf:59:36:f7:fa:da:f0:b5:ee:
         d4:7c:09:cf:98:86:d3:72:8c:d3:c3:e4:94:5a:0c:32:da:a8:
         a7:59:ec:4e:dd:6a:36:dc:31:4d:2e:00:59:cb:69:47:86:b2:
         8f:d1:d1:80:ad:c8:9c:30:ff:cd:68:3d:94:b8:61:1d:05:d2:
         54:6d:99:36:3a:c3:27:8a:e5:ec:66:d4:79:48:09:3b:07:46:
         14:bc:18:ac:be:a8:26:4a:37:21:41:8a:80:0c:76:ac:c8:44:
         7a:28:05:75:e4:88:45:1a:e5:48:87:aa:41:de:ed:d1:2d:e5:
         25:0a:9e:af:c5:a4:7d:a5:3c:b3:8b:ce:75:0c:df:74:a2:70:
         49:56:ab:e0:7a:47:9d:89:0c:a9:d2:03:a0:9d:57:9a:01:7e:
         d9:e6:38:38:49:87:b2:ad:b4:f4:72:0e:4c:16:8b:a3:dd:fa:
         6f:43:02:32:c4:f9:f7:85:50:e7:92:db:5d:68:99:e8:f2:58:
         0a:87:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:04 2025 by rpki-client