Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/WmoDuAJ2FYU63usl4IsPSCQWPV0.roa
File:                     WmoDuAJ2FYU63usl4IsPSCQWPV0.roa (raw, json)
Hash identifier:          Tn1D4qkvT7hddXvzdozllaN4lEMKWpF6dUJERK4MfRM=
Subject key identifier:   5A:6A:03:B8:02:76:15:85:3A:DE:EB:25:E0:8B:0F:48:24:16:3D:5D
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       42
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/WmoDuAJ2FYU63usl4IsPSCQWPV0.roa
Signing time:             Fri 01 Aug 2025 01:35:11 +0000
ROA not before:           Fri 01 Aug 2025 01:35:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2516
IP address blocks:        240f::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Aug  1 01:35:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=5A6A03B8027615853ADEEB25E08B0F4824163D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:71:85:43:f8:dc:25:08:63:b9:37:f1:19:
                    e4:5e:19:35:fe:3a:c4:24:57:79:b8:13:20:01:b7:
                    27:f5:58:fd:26:2a:5a:7c:1b:2b:85:36:8f:2f:e5:
                    e5:38:a6:e3:20:a1:53:45:88:c8:e3:c4:fe:b4:46:
                    41:69:22:68:0a:ec:bc:71:66:dc:d4:a9:3a:20:70:
                    7b:93:33:a7:d9:23:d0:a4:ec:8d:38:76:85:2c:9e:
                    4b:84:61:49:3a:a5:64:a6:d9:5d:59:b4:99:86:5a:
                    e6:a5:d6:c6:72:5f:71:2e:a8:c5:56:f0:c9:a7:0b:
                    90:f0:c8:46:03:b9:20:5b:d2:3c:94:d2:57:28:5d:
                    7c:f5:31:5c:d3:f6:a7:0d:23:b9:01:4c:c3:47:10:
                    bb:cf:41:5a:90:ad:45:cb:d2:35:9c:fb:d0:4a:f4:
                    cd:d6:05:58:b5:c3:d8:de:e9:20:c8:63:72:4b:8b:
                    ba:dc:b9:44:24:d6:18:1a:d6:f0:cd:ea:ed:38:ae:
                    b2:2d:5a:a2:44:e4:71:7d:10:f8:11:10:24:c0:6d:
                    a3:d0:74:15:49:a0:60:ab:1d:03:0a:6d:3b:bd:44:
                    6e:71:c0:fa:70:25:9a:32:00:1a:0b:b0:8f:69:b6:
                    98:c5:58:eb:82:cf:e9:74:d0:06:62:44:6a:ad:0a:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:03:B8:02:76:15:85:3A:DE:EB:25:E0:8B:0F:48:24:16:3D:5D
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/WmoDuAJ2FYU63usl4IsPSCQWPV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f::/24

    Signature Algorithm: sha256WithRSAEncryption
         16:62:bd:84:a6:f0:a3:47:54:e1:1f:6e:e6:a0:0a:43:16:ac:
         08:f8:9d:27:be:a9:f0:98:b8:c3:af:de:9f:09:7c:67:a6:1b:
         c0:4c:b0:80:9a:9e:31:21:9f:96:be:27:0c:ab:c8:a3:fe:85:
         13:ce:ab:3f:d2:77:64:df:93:97:56:7e:cc:33:88:98:19:d7:
         f6:52:8d:34:9c:f9:6f:c1:24:5a:26:ef:93:54:6d:5c:85:ca:
         22:61:ef:89:9e:be:c9:76:69:48:dc:13:83:18:89:47:d9:04:
         62:37:fd:f0:af:2e:85:c1:e4:11:1d:27:c3:4b:f1:e1:e5:e4:
         fa:c2:b2:b3:e3:f1:4f:82:d5:2d:49:34:2b:59:df:f2:d5:ea:
         c2:c6:fa:f6:b8:60:46:a0:6e:d2:e0:f6:c6:0b:ba:92:92:90:
         34:e0:2e:6b:ab:09:03:d8:57:7b:49:57:41:a4:5a:ad:c7:eb:
         00:ee:8e:47:ae:59:66:0d:1f:7c:b2:85:02:58:01:4d:59:fd:
         87:73:fa:4f:f3:be:d6:c7:78:3e:56:b1:e5:8a:aa:9c:f8:81:
         f3:77:30:21:5b:1e:d8:8c:ad:32:41:26:68:7a:f1:15:63:57:
         a0:66:34:45:dd:3a:c0:e0:76:48:fe:37:e0:26:cc:0e:6e:c5:
         b8:40:54:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:36:21 2025 by rpki-client