Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/8Mq80qRnEbRl2VkJdsCOZKemiTg.roa
File:                     8Mq80qRnEbRl2VkJdsCOZKemiTg.roa (raw, json)
Hash identifier:          WKnthHKDLSdjrHaCvr/ZfOs7B/Kvv7XHrMYNWUbMpGY=
Subject key identifier:   F0:CA:BC:D2:A4:67:11:B4:65:D9:59:09:76:C0:8E:64:A7:A6:89:38
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       41
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/8Mq80qRnEbRl2VkJdsCOZKemiTg.roa
Signing time:             Wed 01 Oct 2025 01:35:15 +0000
ROA not before:           Wed 01 Oct 2025 01:35:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     37901
IP address blocks:        240b:11::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 08:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=F0CABCD2A46711B465D9590976C08E64A7A68938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:03:a5:50:32:64:58:fe:ad:c6:ee:01:35:
                    03:ff:8b:a5:e8:80:2a:f3:21:88:bf:57:13:07:c8:
                    b0:1c:5a:2f:68:46:78:d1:03:e0:b2:bd:8d:8a:28:
                    c4:73:3a:b8:a4:49:ce:86:60:7b:00:ca:81:74:35:
                    7c:ca:54:eb:2b:b0:09:04:ad:b6:be:28:2e:19:cc:
                    45:ea:89:19:9b:d9:35:57:61:f6:75:bf:1f:78:d3:
                    52:ef:78:41:e5:af:20:4a:c0:63:f0:5e:76:8a:23:
                    31:a9:47:4b:2a:84:c8:15:7d:47:ea:88:f7:dd:70:
                    82:2c:40:77:03:08:83:de:0d:0c:9c:18:ca:7d:cc:
                    79:ea:50:37:25:0f:33:d1:69:18:e8:ab:30:51:b7:
                    18:96:51:b2:06:60:e4:ed:6d:78:63:9c:f6:77:06:
                    3f:df:c0:3f:51:ad:b0:a5:83:3f:44:ec:a4:ca:6f:
                    38:e3:e1:bb:98:1a:03:dc:f5:bb:f5:ec:ed:10:04:
                    58:84:ff:f7:eb:54:f8:58:4e:f5:d3:3a:08:8d:61:
                    93:4e:68:93:a9:8c:1f:1b:e0:7e:2b:9e:90:96:5e:
                    a6:ef:d9:68:9a:40:34:07:ed:f5:43:50:bd:0c:75:
                    ea:b6:9c:77:7e:f1:b9:64:79:19:54:54:2e:81:ce:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:BC:D2:A4:67:11:B4:65:D9:59:09:76:C0:8E:64:A7:A6:89:38
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/8Mq80qRnEbRl2VkJdsCOZKemiTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:11::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:64:08:69:aa:e4:2f:1e:b9:6c:05:55:10:98:fe:b0:40:ab:
         b0:ea:05:22:e5:87:47:4a:b0:3c:ae:1a:07:8f:0c:cf:e3:bd:
         39:a6:e2:a6:b6:76:52:75:33:5f:3b:6d:bb:09:76:85:15:dc:
         40:48:ef:a4:cb:37:c4:ad:a4:b9:f1:8b:7e:df:79:22:84:fc:
         b9:6d:8d:23:29:d8:6b:60:ad:ac:18:31:6a:ac:3e:ab:5b:d5:
         0f:f4:ac:e2:6a:fd:68:56:21:e9:ce:b5:aa:22:db:a7:a2:76:
         7c:40:3b:39:b3:02:b8:8b:55:89:3a:19:ea:70:da:9b:e5:2f:
         47:35:19:a5:d7:3b:f1:df:af:db:51:37:38:58:53:41:97:ec:
         be:7b:29:7a:d6:0c:0b:2f:c1:2d:f9:1b:44:b8:f0:c1:d8:17:
         3f:2a:ae:a6:77:df:8a:40:d6:c8:71:96:92:b7:ea:86:1e:dd:
         87:f8:47:31:b8:a6:a9:1f:60:da:e8:68:1c:1a:87:23:2d:63:
         ee:e0:5a:43:78:1c:38:f8:91:a2:6f:9c:20:6a:5c:d1:dd:82:
         3b:c1:11:1a:31:cd:1a:35:15:85:f0:16:b4:5c:d5:e4:f1:de:
         88:8d:45:9f:51:fa:fe:ea:50:d3:62:9b:9e:9c:29:21:42:cb:
         24:1e:49:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:23:39 2025 by rpki-client