Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
File:                     3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa (raw, json)
Hash identifier:          JJT+5eye6gvHGv7WMJ9EKLcVZXSkRYDBwhAB8/WAJ/c=
Subject key identifier:   DE:4F:B9:16:9E:59:2E:4F:11:18:DC:AE:D2:09:FE:AB:75:76:43:41
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0100
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
Signing time:             Sat 01 Nov 2025 01:28:40 +0000
ROA not before:           Sat 01 Nov 2025 01:28:40 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     59130
IP address blocks:        61.120.149.89/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 14:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov  1 01:28:40 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=DE4FB9169E592E4F1118DCAED209FEAB75764341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:f8:22:0a:c0:8c:0f:21:7b:da:21:fb:f4:
                    36:ca:e6:15:98:ea:13:a8:fd:a1:1e:68:e4:a8:a6:
                    53:7b:3f:10:50:a0:fb:93:94:d4:e4:4b:d4:26:8b:
                    0c:64:b9:54:24:08:ff:44:aa:18:3b:1d:0f:9c:6f:
                    fd:c9:8b:e3:85:77:cd:7d:25:4a:2e:4d:90:0f:2c:
                    18:46:79:14:4c:f8:11:6b:70:fd:05:e1:ec:e2:bc:
                    b5:6b:a1:8a:9a:fc:76:c5:b3:96:d5:d4:cb:c8:a3:
                    5c:36:ad:2a:e3:a7:ed:12:23:6c:8f:77:b3:db:da:
                    ba:a1:fd:d6:94:4b:df:bd:bb:ab:ce:d0:f8:8b:f2:
                    f4:ad:ae:c6:4d:76:1c:11:c1:66:2c:da:3f:82:5b:
                    59:56:5a:c3:ef:ca:44:66:60:ab:d7:15:aa:9f:c6:
                    ea:af:54:e5:9f:a0:9a:b9:55:76:66:22:99:0e:8a:
                    8b:ec:ff:15:0a:60:b5:ec:ff:53:e7:73:4c:94:ae:
                    03:39:7e:44:2f:23:91:5d:a0:93:2d:69:e9:c5:c9:
                    2b:a2:da:de:44:73:45:5e:c0:84:b1:38:36:11:35:
                    3b:f0:5e:a8:13:8f:aa:7a:f3:b5:88:14:54:d6:97:
                    7a:2b:d0:24:3e:04:41:b3:a6:62:a3:ef:ee:5b:dd:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:B9:16:9E:59:2E:4F:11:18:DC:AE:D2:09:FE:AB:75:76:43:41
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/3k-5Fp5ZLk8RGNyu0gn-q3V2Q0E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.149.89/32

    Signature Algorithm: sha256WithRSAEncryption
         60:62:38:e6:af:31:0b:d7:99:4c:74:47:aa:90:c7:51:b0:35:
         5f:10:d9:2e:8b:2f:80:3c:87:fa:ba:da:d5:de:1a:4b:81:4c:
         52:5b:7c:3f:d0:a7:33:d5:30:a2:41:dc:fc:9c:36:0d:f4:51:
         24:0b:b6:e3:c2:20:d9:f6:09:38:ec:0c:73:f2:2d:fb:24:0d:
         03:07:16:6e:d0:d4:b4:d9:69:33:69:be:55:1c:e4:02:de:76:
         28:22:42:cd:bb:76:7f:e5:97:04:c5:95:f4:29:f4:17:d6:05:
         0d:8a:fc:16:76:32:a5:b2:b4:d5:9e:3e:0e:7f:d5:30:c9:dc:
         29:fe:5d:40:df:de:5c:e9:90:73:86:e8:64:6b:f7:66:cd:c4:
         9a:da:71:30:3f:88:68:82:f5:06:b9:99:bf:8e:a3:d1:25:12:
         66:16:bb:b9:42:5c:4f:fb:83:62:d6:a4:5c:ea:92:39:a2:9c:
         5c:e9:33:84:33:3d:5c:06:5a:90:e1:82:c0:b5:a9:12:4c:87:
         55:9d:e1:dd:e9:53:e2:d4:ed:be:2d:51:09:8e:59:82:8c:66:
         9a:fc:04:09:39:b3:18:19:dc:f9:6b:4e:87:5b:0a:16:8d:c8:
         9f:a7:db:b4:5f:83:e5:ae:98:4b:95:a1:d2:90:b7:7e:9e:bc:
         1f:a8:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:30:21 2025 by rpki-client