Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/7A-zPi4JSi2YH8nDIHY5zUAQARE.roa
File:                     7A-zPi4JSi2YH8nDIHY5zUAQARE.roa (raw, json)
Hash identifier:          nDxyaDJT/t9BJzwOcA+l/1FDYTMTvudOGfhPFjBDIhI=
Subject key identifier:   EC:0F:B3:3E:2E:09:4A:2D:98:1F:C9:C3:20:76:39:CD:40:10:01:11
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       40
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/7A-zPi4JSi2YH8nDIHY5zUAQARE.roa
Signing time:             Wed 01 Oct 2025 01:35:15 +0000
ROA not before:           Wed 01 Oct 2025 01:35:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     37901
IP address blocks:        240b:10::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 08:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=EC0FB33E2E094A2D981FC9C3207639CD40100111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:d9:ef:63:07:7d:d5:fb:90:9e:d9:42:69:
                    ea:95:5e:25:0f:50:d2:fe:2a:47:77:75:75:01:13:
                    f0:6a:e1:3d:97:3f:46:f6:a2:f9:64:1c:fd:fe:b9:
                    cf:f2:3e:64:a1:b4:50:53:e5:a3:5a:db:71:61:2d:
                    05:34:dd:7c:71:d6:ec:dd:cb:b5:8e:75:b1:9d:a2:
                    44:68:a8:ec:89:60:c5:b6:3f:37:05:3c:0b:f0:61:
                    9a:34:07:41:a1:9f:6a:92:55:e7:2e:c6:8b:c0:e2:
                    6b:34:47:45:e7:14:2d:4c:8c:8a:71:00:ce:80:29:
                    8c:cf:ef:a5:ac:fd:50:32:95:b3:25:28:67:1e:d0:
                    d3:ed:dd:21:50:84:2a:fb:b7:d1:66:a7:e7:01:b6:
                    48:35:03:1c:e6:de:69:fc:a6:59:03:c9:a1:08:c2:
                    01:e5:f7:28:98:64:44:be:b5:16:6a:54:b7:e0:78:
                    fb:d7:af:f5:86:71:f2:88:a6:b6:da:be:89:d5:22:
                    90:c8:41:e3:d9:9c:3c:c4:b9:3b:2d:6f:eb:d2:7a:
                    ca:6e:ec:1e:c6:f0:c2:87:db:09:e8:a0:84:0d:db:
                    e9:f2:9d:75:2c:bd:69:be:4f:d8:52:57:4a:6d:b3:
                    17:55:1a:d3:0c:98:28:ab:1e:91:55:8d:6e:c7:9b:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0F:B3:3E:2E:09:4A:2D:98:1F:C9:C3:20:76:39:CD:40:10:01:11
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/7A-zPi4JSi2YH8nDIHY5zUAQARE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:8c:b7:f7:ac:f3:e5:45:07:7f:13:21:15:66:a6:33:40:
         a4:fa:4a:a3:7f:3d:1c:c9:a8:c3:5e:49:6b:e3:ad:77:fa:f5:
         fa:ab:91:c9:88:0c:c2:70:d4:55:81:aa:93:be:46:7c:b8:dd:
         88:d5:e2:90:d3:97:00:76:41:0a:d0:14:4b:d1:10:b1:c2:18:
         c5:0f:66:db:53:dd:dd:c9:5e:c7:e8:ba:ff:7e:de:c7:7e:5d:
         4e:1e:df:10:a6:5f:98:f1:70:35:f2:1c:e6:94:8c:b5:8f:e2:
         75:97:71:6b:8d:a0:67:39:69:f5:73:6b:40:e9:9f:f9:5f:5b:
         ef:a7:4b:51:48:ec:a2:1c:da:46:d3:d2:58:7b:e5:21:82:20:
         cb:cb:46:42:18:5b:19:0d:18:5c:eb:44:54:ed:6b:bd:28:f2:
         d1:0b:50:9e:48:f4:59:d3:13:d5:34:f3:28:06:3c:8a:10:12:
         9e:36:da:0c:cd:a8:53:ee:03:ff:4f:7b:0a:3b:35:1f:30:4f:
         a7:75:93:42:5b:a5:7f:a5:bc:37:60:49:cd:ca:11:ed:de:d2:
         d6:29:2d:94:b4:de:dc:64:46:e1:13:e1:4e:7f:b0:ab:f2:2f:
         17:a4:08:25:12:03:d5:2a:91:d8:35:e0:8b:f3:64:d1:00:f7:
         ef:4b:25:f5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI1MTAwMTAx
MzUxNVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRUMwRkIzM0UyRTA5NEEy
RDk4MUZDOUMzMjA3NjM5Q0Q0MDEwMDExMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALB82e9jB33V+5Ce2UJp6pVeJQ9Q0v4qR3d1dQET8GrhPZc/Rvai
+WQc/f65z/I+ZKG0UFPlo1rbcWEtBTTdfHHW7N3LtY51sZ2iRGio7IlgxbY/NwU8
C/BhmjQHQaGfapJV5y7Gi8DiazRHRecULUyMinEAzoApjM/vpaz9UDKVsyUoZx7Q
0+3dIVCEKvu30Wan5wG2SDUDHObeafymWQPJoQjCAeX3KJhkRL61FmpUt+B4+9ev
9YZx8oimttq+idUikMhB49mcPMS5Oy1v69J6ym7sHsbwwofbCeighA3b6fKddSy9
ab5P2FJXSm2zF1Ua0wyYKKsekVWNbseb+8MCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTsD7M+LglKLZgfycMgdjnNQBABETAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1LzdBLXpQaTRKU2kyWUg4bkRJSFk1elVBUUFSRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkCwAQMA0GCSqGSIb3DQEBCwUAA4IBAQCccoy396zz5UUHfxMhFWam
M0Ck+kqjfz0cyajDXklr4613+vX6q5HJiAzCcNRVgaqTvkZ8uN2I1eKQ05cAdkEK
0BRL0RCxwhjFD2bbU93dyV7H6Lr/ft7Hfl1OHt8Qpl+Y8XA18hzmlIy1j+J1l3Fr
jaBnOWn1c2tA6Z/5X1vvp0tRSOyiHNpG09JYe+UhgiDLy0ZCGFsZDRhc60RU7Wu9
KPLRC1CeSPRZ0xPVNPMoBjyKEBKeNtoMzahT7gP/T3sKOzUfME+ndZNCW6V/pbw3
YEnNyhHt3tLWKS2UtN7cZEbhE+FOf7Cr8i8XpAglEgPVKpHYNeCL82TRAPfvSyX1
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:23:46 2025 by rpki-client