Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/dyahM5OLA7GWBLIfWF7vUCJK9EE.roa
File:                     dyahM5OLA7GWBLIfWF7vUCJK9EE.roa (raw, json)
Hash identifier:          ZlSYkoh3B9TkZ1jmStkyM5fvkLRLwzMU0WxrMoKEGWg=
Subject key identifier:   77:26:A1:33:93:8B:03:B1:96:04:B2:1F:58:5E:EF:50:22:4A:F4:41
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01A6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dyahM5OLA7GWBLIfWF7vUCJK9EE.roa
Signing time:             Wed 01 Oct 2025 01:34:03 +0000
ROA not before:           Wed 01 Oct 2025 01:34:03 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        219.98.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:34:03 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=7726A133938B03B19604B21F585EEF50224AF441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:55:02:9b:5a:e2:34:56:51:d1:55:c5:0a:
                    d4:bf:01:66:ae:a1:ed:a5:8f:06:c1:36:47:f9:b5:
                    91:8a:7b:96:b8:fc:05:79:79:b3:2e:d4:55:4c:47:
                    50:48:e3:57:7d:d5:3b:98:88:d1:b5:54:d3:6a:bc:
                    6b:18:3a:c3:20:6c:d1:c2:9a:df:94:7f:a8:3e:32:
                    44:57:5d:e1:37:78:e8:f8:95:cd:aa:f6:18:2f:a5:
                    b7:7b:05:12:79:cd:7a:b8:15:f4:4b:e8:99:26:96:
                    db:67:21:09:f7:15:54:98:fb:0d:21:19:f1:60:fe:
                    a0:91:a2:2d:98:85:76:8e:5d:f6:a3:88:f5:4a:4e:
                    64:1b:b7:a3:37:f0:6f:87:86:64:6f:13:ef:b9:8b:
                    6d:91:f2:ec:5c:e4:fd:02:f2:8a:c4:8f:21:77:b0:
                    5d:8e:aa:1f:76:8f:09:58:48:5c:b9:1d:21:2d:95:
                    70:c5:c4:f0:4e:03:4d:04:ee:6f:f3:09:04:1f:34:
                    ca:1a:5b:43:d8:8e:0f:23:f2:72:8c:23:73:ea:e4:
                    81:49:95:67:da:db:4f:2c:68:30:b3:dd:87:d7:e6:
                    52:dc:79:62:6a:1a:45:da:8f:ae:b9:cb:df:0a:df:
                    83:24:c3:b9:15:c4:dc:f4:66:03:f0:b2:2f:e4:c2:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:A1:33:93:8B:03:B1:96:04:B2:1F:58:5E:EF:50:22:4A:F4:41
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/dyahM5OLA7GWBLIfWF7vUCJK9EE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:82:60:d5:11:37:f4:31:b2:81:de:66:69:c7:bb:2a:88:
         c5:8d:10:1b:61:5e:88:0a:1e:71:0f:82:ad:51:24:cb:a6:ce:
         8b:7c:ed:12:a5:13:b5:f6:26:c6:af:d1:fe:4e:78:66:8d:ea:
         3a:5d:4b:db:11:fd:7d:3e:64:d8:69:29:71:0f:ab:7c:d0:0b:
         04:e1:3a:38:fd:18:e2:d2:23:e7:25:3d:a7:0b:07:a2:3c:08:
         66:71:df:41:25:55:c7:b6:3b:93:6e:05:e0:b5:5a:35:81:7f:
         b9:1e:44:c4:80:7d:38:9e:02:6d:f4:07:f9:2d:8d:19:a8:43:
         c9:33:af:d1:19:a0:21:21:ed:01:55:0c:58:b7:3b:79:67:b6:
         c9:35:f0:aa:76:bc:ec:96:98:c1:f2:8d:7d:60:3d:66:c8:88:
         5f:e0:32:6f:65:72:94:8f:9d:58:b3:5e:81:e0:ba:f6:91:14:
         7f:a8:fb:f7:68:c3:2f:4c:f7:d9:be:c9:9d:53:47:2e:89:93:
         34:dd:a5:b8:b5:15:3f:dc:27:48:3a:92:2c:c7:d0:da:3a:d9:
         0d:25:fe:e6:d4:0f:31:97:ab:aa:e4:6e:31:1e:70:91:ca:9c:
         ea:7e:1e:e8:90:18:57:64:ab:92:0b:57:57:d6:1d:7a:a5:bc:
         f3:7b:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:01 2025 by rpki-client