Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
File:                     0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa (raw, json)
Hash identifier:          Csptne5iB38rREhi8M/5mFHfz07P6gc07q1kH2vnfz0=
Subject key identifier:   D2:9C:58:48:22:A4:E5:81:1B:51:18:A9:37:83:EA:DD:39:26:D0:CD
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       6A
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
Signing time:             Wed 01 Oct 2025 01:28:13 +0000
ROA not before:           Wed 01 Oct 2025 01:28:13 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     4774
IP address blocks:        2001:300:fff6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Oct  1 01:28:13 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D29C584822A4E5811B5118A93783EADD3926D0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:0a:1c:93:f7:6e:c7:02:e2:97:89:25:2e:
                    1c:9a:64:e0:ad:43:d5:1f:42:f6:26:34:93:3d:8b:
                    db:08:a3:0e:a5:ed:64:76:dd:97:1a:a8:86:57:6b:
                    11:86:61:9c:74:43:db:5d:b0:6b:a4:8a:41:bc:d9:
                    cf:01:82:c9:a8:94:0b:56:ec:3a:eb:86:89:ec:61:
                    3f:61:05:09:f4:9c:b8:8e:1f:25:9e:5c:1a:65:0c:
                    a8:ad:06:01:25:d7:56:66:c0:db:30:c2:eb:3e:38:
                    df:39:de:a7:12:4d:7e:d8:a8:fa:29:49:50:de:97:
                    56:c1:7f:ea:8b:22:f1:de:2d:a9:f7:e9:eb:c8:de:
                    7e:b2:2b:e8:eb:01:7a:94:b9:92:e5:70:35:cd:92:
                    f4:68:24:6a:55:6d:5d:73:99:f8:3d:57:6a:10:13:
                    c4:6b:bc:96:20:32:74:ae:70:aa:af:cb:69:62:6e:
                    ee:89:a7:d7:39:99:55:ec:6f:01:80:38:8f:4c:a2:
                    aa:2a:70:53:b6:32:73:94:39:f2:21:d1:b9:54:0a:
                    6b:57:0b:03:76:d8:f7:bb:d4:1a:a5:0f:55:f9:4f:
                    1e:75:5c:71:63:16:d8:d1:dc:d6:91:b4:2d:b1:2f:
                    45:6c:82:68:30:b9:2b:fa:5f:c7:64:14:22:5c:75:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:58:48:22:A4:E5:81:1B:51:18:A9:37:83:EA:DD:39:26:D0:CD
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0pxYSCKk5YEbURipN4Pq3Tkm0M0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fff6::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:85:17:b0:79:ca:1c:74:a2:47:18:a9:cb:0f:c1:7c:81:25:
         7a:c0:bf:32:ba:bd:33:ee:2b:b3:3c:0a:d4:12:3d:f7:c8:9c:
         d2:22:09:d7:6b:9f:8a:0b:d4:eb:be:a5:72:5d:46:ca:52:ea:
         70:a7:79:e8:7e:bc:80:2f:8a:94:40:33:5c:ab:ef:a4:34:bd:
         5d:9c:ff:64:07:90:d5:c8:8f:c6:36:bb:f1:a8:1b:df:a2:d4:
         8f:7f:f4:61:6f:f2:fb:1b:a7:c7:52:3e:cf:45:08:6b:e3:79:
         88:49:64:0a:bf:77:53:4e:a0:23:84:2a:44:ee:2d:07:8e:03:
         56:e1:d7:bf:d0:7a:6f:79:08:4c:5f:8f:31:c5:fb:55:7e:cc:
         d1:17:30:0b:7d:02:f1:66:78:33:2c:06:ca:d4:b1:eb:b9:e4:
         17:ac:71:50:98:8f:d8:fa:f2:57:a2:6e:1e:c4:d7:3a:a5:fa:
         ec:a5:16:3b:36:9e:25:4e:ad:54:a3:cc:69:01:6b:a4:c3:12:
         6f:5e:a8:e7:6b:26:53:2b:d0:3f:6e:ad:11:48:19:07:56:0f:
         4c:19:25:93:dc:ec:8b:b1:13:f9:e2:7b:50:22:ad:70:e2:bc:
         84:a9:d0:39:86:ce:f7:7f:e2:ff:ff:d6:0e:93:94:b3:1b:2f:
         51:ac:4a:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MTAwMTAx
MjgxM1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRDI5QzU4NDgyMkE0RTU4
MTFCNTExOEE5Mzc4M0VBREQzOTI2RDBDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMB1ChyT927HAuKXiSUuHJpk4K1D1R9C9iY0kz2L2wijDqXtZHbd
lxqohldrEYZhnHRD212wa6SKQbzZzwGCyaiUC1bsOuuGiexhP2EFCfScuI4fJZ5c
GmUMqK0GASXXVmbA2zDC6z443znepxJNftio+ilJUN6XVsF/6osi8d4tqffp68je
frIr6OsBepS5kuVwNc2S9GgkalVtXXOZ+D1XahATxGu8liAydK5wqq/LaWJu7omn
1zmZVexvAYA4j0yiqipwU7Yyc5Q58iHRuVQKa1cLA3bY97vUGqUPVflPHnVccWMW
2NHc1pG0LbEvRWyCaDC5K/pfx2QUIlx1I5cCAwEAAaOCAiswggInMB0GA1UdDgQW
BBTSnFhIIqTlgRtRGKk3g+rdOSbQzTAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDE2LzBweFlTQ0trNVlFYlVSaXBONFBxM1RrbTBNMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQMA//YwDQYJKoZIhvcNAQELBQADggEBAFGFF7B5yhx0okcYqcsP
wXyBJXrAvzK6vTPuK7M8CtQSPffInNIiCddrn4oL1Ou+pXJdRspS6nCneeh+vIAv
ipRAM1yr76Q0vV2c/2QHkNXIj8Y2u/GoG9+i1I9/9GFv8vsbp8dSPs9FCGvjeYhJ
ZAq/d1NOoCOEKkTuLQeOA1bh17/Qem95CExfjzHF+1V+zNEXMAt9AvFmeDMsBsrU
seu55BescVCYj9j68leibh7E1zql+uylFjs2niVOrVSjzGkBa6TDEm9eqOdrJlMr
0D9urRFIGQdWD0wZJZPc7IuxE/nie1AirXDivISp0DmGzvd/4v//1g6TlLMbL1Gs
SgQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:24 2025 by rpki-client