Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30362/Ros85KF6oOc9VcTtohrdHOu9gKY.roa
File:                     Ros85KF6oOc9VcTtohrdHOu9gKY.roa (raw, json)
Hash identifier:          GWhQN4EdtaW8JbQbVIkPItXC0DTtDlfaGsHuTcKIgqM=
Subject key identifier:   46:8B:3C:E4:A1:7A:A0:E7:3D:55:C4:ED:A2:1A:DD:1C:EB:BD:80:A6
Certificate issuer:       /CN=8C3B0FA1CC181221848AB99A08155EAE67C82989
Certificate serial:       23
Authority key identifier: 8C:3B:0F:A1:CC:18:12:21:84:8A:B9:9A:08:15:5E:AE:67:C8:29:89
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jDsPocwYEiGEirmaCBVermfIKYk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30362/Ros85KF6oOc9VcTtohrdHOu9gKY.roa
Signing time:             Sat 01 Nov 2025 01:33:11 +0000
ROA not before:           Sat 01 Nov 2025 01:33:11 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131925
IP address blocks:        2406:1940::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30362/jDsPocwYEiGEirmaCBVermfIKYk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30362/jDsPocwYEiGEirmaCBVermfIKYk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jDsPocwYEiGEirmaCBVermfIKYk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3B0FA1CC181221848AB99A08155EAE67C82989
        Validity
            Not Before: Nov  1 01:33:11 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=468B3CE4A17AA0E73D55C4EDA21ADD1CEBBD80A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:1f:70:7f:fd:9a:9c:8f:03:57:d5:89:4f:
                    2f:f4:a4:19:b9:85:4a:61:78:f6:f4:98:12:a1:d1:
                    c7:8e:d8:70:a0:6c:73:59:d1:7f:c3:51:d9:16:94:
                    a5:ed:24:13:b4:ab:7d:81:24:f1:f8:50:32:93:8c:
                    6a:a6:6b:52:e8:08:8c:05:ed:2b:53:95:f2:8d:9d:
                    74:f0:c7:c4:f3:5f:89:63:1f:c6:0b:a0:d8:84:e4:
                    0e:85:4e:d7:21:a2:ec:2f:71:20:9e:7f:ff:b4:a9:
                    06:19:c4:13:d8:d2:5b:0d:9b:33:a0:7c:9c:0f:b1:
                    b0:5f:6b:5d:e6:22:3a:a0:23:83:b3:a4:eb:0c:8c:
                    f2:05:ce:25:b1:7d:8e:d6:d1:97:77:b9:d2:c8:0f:
                    0b:25:7a:21:ca:be:b7:87:d5:ac:6e:4c:33:89:1e:
                    67:45:f5:3a:af:68:de:36:f1:3f:d8:87:01:1f:e6:
                    54:14:bb:3e:d0:84:fd:57:5a:9e:3c:66:98:36:92:
                    aa:af:35:0a:d3:9b:40:e5:ea:9e:98:65:92:c6:28:
                    7f:af:1c:5f:a2:a9:3c:d6:8e:d5:7d:8b:d3:fd:59:
                    de:c2:a6:fb:e7:ad:37:68:4a:7c:91:58:12:24:a1:
                    a8:27:63:83:2f:f6:b3:96:7f:22:c0:ee:18:29:46:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:3C:E4:A1:7A:A0:E7:3D:55:C4:ED:A2:1A:DD:1C:EB:BD:80:A6
            X509v3 Authority Key Identifier:
                keyid:8C:3B:0F:A1:CC:18:12:21:84:8A:B9:9A:08:15:5E:AE:67:C8:29:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30362/jDsPocwYEiGEirmaCBVermfIKYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jDsPocwYEiGEirmaCBVermfIKYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30362/Ros85KF6oOc9VcTtohrdHOu9gKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1940::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:60:96:84:2a:d1:a0:ec:bf:0d:29:78:f0:31:e0:f9:31:05:
         19:2c:b5:ef:8c:ac:d3:cb:6d:26:0f:ac:2d:50:31:f6:06:cc:
         d1:c7:fb:e2:2e:64:51:f7:05:c6:4c:94:80:95:3b:97:b9:9f:
         54:49:7f:54:c4:f2:3d:8f:65:b8:54:51:da:b5:7e:94:31:c9:
         51:a1:15:a0:1c:76:78:0c:a3:7c:24:bb:86:07:4b:1e:5a:3a:
         b4:74:bf:3b:c1:6b:7f:d1:30:a9:43:cd:7e:02:97:ad:0d:58:
         d5:e5:00:dc:9c:d3:21:ef:f6:ad:8d:d6:3b:0c:eb:d1:2f:60:
         38:21:44:d7:50:1e:4e:de:78:fb:7b:f9:00:8e:b2:bd:70:cb:
         d7:34:07:17:25:45:fb:26:0a:f6:04:ea:da:8a:6e:68:02:49:
         b3:85:38:07:88:82:7f:c4:39:f3:77:ce:cb:df:cf:0f:8b:43:
         65:cc:88:d1:8e:9f:c2:ee:e8:4a:8e:f5:a2:6e:39:ce:d8:e1:
         39:39:3c:a2:4e:79:36:ed:89:0d:82:c3:67:d1:68:4c:5f:48:
         dc:b2:5a:fe:f4:00:9c:02:4b:e1:55:45:bb:c7:ae:4c:32:8e:
         e0:04:88:f3:fa:5a:51:39:2a:89:47:c3:b5:8c:a4:3f:1d:c6:
         ff:a3:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:07:19 2025 by rpki-client