Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/3Z4aMi3NMEhSTv0YcQsHKiVcIIU.roa
File:                     3Z4aMi3NMEhSTv0YcQsHKiVcIIU.roa (raw, json)
Hash identifier:          fz6hzJ8S6VqX3K3bJzsa/bp9r0yY2j83+VoCGVLgoa4=
Subject key identifier:   DD:9E:1A:32:2D:CD:30:48:52:4E:FD:18:71:0B:07:2A:25:5C:20:85
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       70
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3Z4aMi3NMEhSTv0YcQsHKiVcIIU.roa
Signing time:             Wed 01 Oct 2025 01:29:38 +0000
ROA not before:           Wed 01 Oct 2025 01:29:38 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     59125
IP address blocks:        150.91.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Oct  1 01:29:38 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=DD9E1A322DCD3048524EFD18710B072A255C2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:86:12:08:53:c5:bc:20:42:5d:b3:39:af:
                    8f:16:16:ae:7c:e9:5c:bd:bf:56:67:47:4f:9d:34:
                    16:69:3e:09:4d:2d:4f:ac:48:04:09:ab:13:4b:2a:
                    d6:ea:31:71:ce:1e:ef:b5:f6:51:f8:af:da:78:68:
                    1e:da:a4:bf:30:e9:75:b2:ef:bd:1b:c2:73:6d:17:
                    19:7e:72:18:9e:01:e8:00:86:64:c1:f0:b6:a1:27:
                    88:fc:c9:49:a1:aa:09:b9:81:26:be:dc:71:f0:d9:
                    14:e3:16:59:29:e9:e2:ff:03:7b:c9:75:03:6c:16:
                    8e:2f:d0:af:f7:86:63:9c:1e:1a:90:10:82:7c:6d:
                    f6:36:79:f4:70:db:7c:9e:79:c1:2b:0b:a4:8d:e7:
                    43:c7:d9:fd:4c:7c:9d:c4:32:1c:84:81:33:15:a9:
                    f0:d3:58:22:25:9b:36:23:27:aa:f3:33:f6:9c:4f:
                    ac:5a:0a:b1:a7:85:60:3f:16:8e:5c:98:80:a1:f5:
                    bf:3f:b0:96:4f:e2:e1:78:41:83:d1:51:f4:0c:82:
                    e0:11:83:4d:eb:cf:8c:94:94:6b:12:e7:25:cb:ee:
                    39:b8:e0:50:5d:5c:c2:a6:92:b8:90:9d:c0:1a:a4:
                    79:d2:30:ea:09:c8:00:06:e7:37:53:9e:95:20:61:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:1A:32:2D:CD:30:48:52:4E:FD:18:71:0B:07:2A:25:5C:20:85
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3Z4aMi3NMEhSTv0YcQsHKiVcIIU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:bc:1d:2b:5c:49:8c:62:33:4b:1c:98:27:0d:f1:4a:6b:
         fb:5a:25:d4:ee:3b:59:90:e3:6d:62:8c:36:5c:e8:14:be:d2:
         bb:19:7c:2e:12:5d:c9:cd:a6:0d:bf:59:5e:8e:b1:de:b1:49:
         8f:66:db:5c:00:57:53:7f:42:50:c3:d8:8e:63:9e:8c:e9:39:
         b0:a8:b2:32:57:2f:90:20:1b:13:2c:a6:59:6f:15:60:24:31:
         0f:6f:ee:a7:8a:9c:88:9f:c3:70:c7:57:07:11:d6:ef:86:d2:
         76:c2:89:b1:df:49:09:d5:ea:4c:a2:08:cc:51:ea:85:96:6a:
         25:fc:c2:00:83:ae:12:ca:1e:77:bd:e9:b7:ef:be:35:78:fd:
         d4:95:c7:48:ec:f0:21:83:a6:0f:ac:25:4f:f0:e6:20:f8:51:
         11:66:b2:e6:55:2c:78:a8:4d:8a:a6:2d:c3:d7:65:5b:78:d7:
         0f:02:75:84:88:56:5f:37:89:ab:e3:fe:3d:fc:5f:a9:28:ad:
         96:ba:06:f8:61:46:46:d8:34:42:65:7e:ca:47:e7:ba:9e:49:
         52:87:c3:be:81:02:40:21:3c:5b:98:55:1f:6a:7e:7a:b9:88:
         81:8f:53:ec:f3:04:49:3c:6a:5b:3c:c5:be:fa:1f:0f:6b:25:
         9e:21:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:16:47 2025 by rpki-client