Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
File:                     opmYDIxN--IeoPkwkk3WNJ8Zj20.roa (raw, json)
Hash identifier:          d4mTgAC4k8ZGIefSzgSUVhlDxevCG4dEwHaquIkdtA0=
Subject key identifier:   A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       0E
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
Signing time:             Thu 03 Jul 2025 03:30:35 +0000
ROA not before:           Thu 03 Jul 2025 03:30:35 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     146979
IP address blocks:        2001:cd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Jul  3 03:30:35 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=A299980C8C4DFBE21EA0F930924DD6349F198F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:39:34:fd:92:3a:5f:b6:88:ba:5a:c7:40:
                    f5:e6:ff:9f:6d:76:3e:ac:3d:b4:9d:09:3a:5a:2f:
                    6d:de:08:d0:7a:65:bb:67:d8:1f:43:6a:2e:ac:cd:
                    c2:bd:7e:99:2b:a9:55:7c:fb:44:06:31:15:85:46:
                    28:7d:1e:2c:96:d5:97:0f:b8:1f:a9:4a:05:d6:fc:
                    5f:cd:72:09:44:84:43:13:26:ec:38:5f:36:d7:93:
                    77:3f:6d:5e:2b:fb:54:d8:bc:a3:80:f8:3c:07:7b:
                    17:57:d3:91:0d:3c:1a:1e:83:7e:c5:df:b1:a2:9a:
                    63:05:15:a5:ca:2c:7f:f1:58:82:c3:5c:7b:a7:5f:
                    6e:a4:f2:45:6e:7d:63:aa:71:b7:80:18:3f:e3:5a:
                    16:81:f1:04:a9:39:b1:78:e4:f3:47:c0:17:69:ef:
                    c2:32:39:ff:64:9b:8d:f3:88:8c:38:56:31:2d:f2:
                    d1:31:5c:64:35:19:d9:96:04:8a:60:2c:92:85:e8:
                    74:b2:45:8e:d5:4a:6d:2e:be:61:da:24:6e:fe:a6:
                    8a:60:eb:90:55:4f:d5:eb:73:a4:20:05:c4:3f:22:
                    3a:64:7c:b1:66:f2:a5:bf:d1:b3:3d:6f:99:07:f4:
                    2d:76:7e:28:01:83:ab:87:90:b6:53:99:a3:60:b7:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:59:0a:4d:84:a0:52:c6:13:31:21:0b:cd:c5:44:e2:b4:
         28:71:b0:9a:32:b5:42:e0:db:f9:c9:4e:14:0c:d3:a8:60:3d:
         d7:6a:47:68:69:a5:f8:4b:1c:17:c5:24:7c:47:f7:5c:b9:a4:
         3f:13:bd:c6:8e:7b:03:54:ab:1b:f7:31:97:b5:3e:f2:7b:58:
         45:70:44:9b:93:5f:9e:2b:75:d3:d4:0b:a7:f3:d4:d0:61:80:
         9e:96:b1:30:f5:d1:f4:4c:c1:50:5d:0d:ee:dc:2a:4c:69:0e:
         33:16:37:3a:6e:fa:9a:24:30:2a:df:32:eb:5a:e5:37:ae:d1:
         c1:6d:0b:63:49:24:13:84:99:42:19:93:54:52:eb:84:da:bd:
         5b:09:c1:bc:43:9d:bd:48:6f:ba:33:0a:06:fc:50:1b:e5:8b:
         d4:84:4d:ae:8b:d0:0b:38:2b:be:9c:3e:53:94:53:cd:a6:c6:
         98:28:10:42:d1:9b:ae:cb:fc:19:5a:db:f6:fc:3b:32:bb:fc:
         17:d1:8b:b8:f0:85:12:a3:ed:cb:1d:5a:8d:21:53:9d:62:10:
         c8:60:44:6c:6d:c8:a6:97:a5:9e:df:32:75:28:5f:99:11:32:
         9f:ef:dc:0c:31:5b:f3:24:54:11:30:29:7b:72:03:d6:07:9b:
         68:04:ef:33
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjI5
OTQ4NzlDMjU4MTIzRkZBMDk3RTg0RTA1Mzc1RjYwQTU5MUE1MB4XDTI1MDcwMzAz
MzAzNVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTI5OTk4MEM4QzRERkJF
MjFFQTBGOTMwOTI0REQ2MzQ5RjE5OEY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOtDOTT9kjpftoi6WsdA9eb/n212Pqw9tJ0JOlovbd4I0Hplu2fY
H0NqLqzNwr1+mSupVXz7RAYxFYVGKH0eLJbVlw+4H6lKBdb8X81yCUSEQxMm7Dhf
NteTdz9tXiv7VNi8o4D4PAd7F1fTkQ08Gh6DfsXfsaKaYwUVpcosf/FYgsNce6df
bqTyRW59Y6pxt4AYP+NaFoHxBKk5sXjk80fAF2nvwjI5/2SbjfOIjDhWMS3y0TFc
ZDUZ2ZYEimAskoXodLJFjtVKbS6+Ydokbv6mimDrkFVP1etzpCAFxD8iOmR8sWby
pb/Rsz1vmQf0LXZ+KAGDq4eQtlOZo2C3ZeUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSimZgMjE374h6g+TCSTdY0nxmPbTAfBgNVHSMEGDAWgBTSKZSHnCWBI/+gl+hO
BTdfYKWRpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMTMvMGltVWg1d2xnU1Bfb0pmb1RnVTNYMkNsa2FVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMGltVWg1d2xnU1Bfb0pmb1RnVTNY
MkNsa2FVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTEzL29wbVlESXhOLS1JZW9Qa3drazNXTko4WmoyMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQzQMA0GCSqGSIb3DQEBCwUAA4IBAQBN+lkKTYSgUsYTMSELzcVE
4rQocbCaMrVC4Nv5yU4UDNOoYD3XakdoaaX4SxwXxSR8R/dcuaQ/E73GjnsDVKsb
9zGXtT7ye1hFcESbk1+eK3XT1Aun89TQYYCelrEw9dH0TMFQXQ3u3CpMaQ4zFjc6
bvqaJDAq3zLrWuU3rtHBbQtjSSQThJlCGZNUUuuE2r1bCcG8Q529SG+6MwoG/FAb
5YvUhE2ui9ALOCu+nD5TlFPNpsaYKBBC0Zuuy/wZWtv2/Dsyu/wX0Yu48IUSo+3L
HVqNIVOdYhDIYERsbciml6We3zJ1KF+ZETKf79wMMVvzJFQRMCl7cgPWB5toBO8z
-----END CERTIFICATE-----
Generated at Sat Jul 5 00:34:34 2025 by rpki-client