Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/M6IcLAO4sXD31g87BuS8KT2P2N8.roa
File:                     M6IcLAO4sXD31g87BuS8KT2P2N8.roa (raw, json)
Hash identifier:          XChDYBif49x1OoRNolkwUgPrXpC9bUCAL0sRbBZk5xs=
Subject key identifier:   33:A2:1C:2C:03:B8:B1:70:F7:D6:0F:3B:06:E4:BC:29:3D:8F:D8:DF
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       3F
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/M6IcLAO4sXD31g87BuS8KT2P2N8.roa
Signing time:             Wed 01 Oct 2025 01:35:14 +0000
ROA not before:           Wed 01 Oct 2025 01:35:14 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        2404:9200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:14 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=33A21C2C03B8B170F7D60F3B06E4BC293D8FD8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:6a:c9:51:2a:bf:39:b7:ea:c5:33:e6:4e:
                    03:34:41:f7:63:16:fb:07:8c:54:2e:f4:bf:9f:5b:
                    04:50:ee:b9:b7:3b:e2:29:7e:1d:c8:2d:4a:bb:bd:
                    08:f7:24:05:8d:9b:08:7c:a9:3b:14:8f:1a:32:dd:
                    1e:94:94:b8:b2:5c:8a:41:b5:76:bc:33:7a:1c:61:
                    fb:df:28:2b:29:8c:8d:96:f6:11:94:f0:8d:4d:75:
                    57:0e:b1:ed:a6:c3:52:fd:34:0f:11:60:49:c3:02:
                    6c:45:f0:ff:09:58:1e:34:ce:fb:d0:2c:fd:71:60:
                    e2:e9:05:83:7d:cb:bb:eb:ee:68:6d:50:43:a8:12:
                    52:83:8c:d3:21:aa:21:df:7d:9e:83:17:55:9f:47:
                    75:32:7f:6b:b0:66:05:8f:44:a2:56:41:63:b6:b5:
                    3b:7b:7e:61:b4:af:f2:22:d5:c7:b2:db:b5:25:46:
                    f3:f8:ec:d6:45:44:69:0b:0b:a5:a9:de:a9:83:e2:
                    44:82:ff:5d:1d:8f:7f:22:16:21:b7:08:07:e9:31:
                    ce:0c:74:90:b1:dd:2c:fb:29:94:22:c0:41:6c:04:
                    38:81:9a:c8:0d:15:15:91:7b:aa:ca:6c:9a:e1:49:
                    e6:2d:53:e8:e5:cb:92:e5:39:b5:96:1d:5f:21:86:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A2:1C:2C:03:B8:B1:70:F7:D6:0F:3B:06:E4:BC:29:3D:8F:D8:DF
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/M6IcLAO4sXD31g87BuS8KT2P2N8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:73:7c:89:88:cf:5e:7b:92:70:76:07:04:df:2d:6e:6a:40:
         59:74:4a:61:f6:d1:5f:de:72:53:1f:22:88:b9:e5:ba:d3:70:
         79:0c:ad:6e:3b:5b:79:1b:ab:46:76:9b:28:e4:99:94:ce:44:
         f0:4b:b1:64:73:0a:d0:ef:bd:4c:73:5a:0a:f0:98:d8:da:6c:
         9e:cd:fc:39:97:6d:29:a8:bf:c6:c2:64:d1:48:e6:eb:95:eb:
         39:36:00:70:3a:04:3d:86:fc:8d:77:56:72:ef:79:f4:80:a5:
         08:4d:64:d4:6d:f4:77:92:d8:00:7d:ad:a8:97:b6:fc:51:06:
         ae:61:4c:ac:83:c8:ca:57:80:ac:68:69:36:9e:04:fc:44:c7:
         f3:11:96:85:5d:9d:18:25:84:e6:de:2a:f2:fa:be:42:6f:ef:
         55:2a:13:9d:ad:c7:c8:3a:ef:e9:9c:75:69:b7:94:92:b5:39:
         fa:ff:16:fc:87:05:56:e2:d3:d6:bb:a5:d8:a2:30:e5:e1:14:
         1a:73:63:f7:2c:6a:b3:00:24:c9:bf:67:c6:72:26:e4:2c:e0:
         05:5c:77:a9:e9:cb:7d:e1:ba:30:6f:13:61:d3:4a:6e:26:70:
         72:cf:53:dd:05:06:c1:89:78:f7:f0:38:6b:c5:6d:0d:12:2c:
         59:a3:cf:34
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI1MTAwMTAx
MzUxNFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMzNBMjFDMkMwM0I4QjE3
MEY3RDYwRjNCMDZFNEJDMjkzRDhGRDhERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALnFaslRKr85t+rFM+ZOAzRB92MW+weMVC70v59bBFDuubc74il+
HcgtSru9CPckBY2bCHypOxSPGjLdHpSUuLJcikG1drwzehxh+98oKymMjZb2EZTw
jU11Vw6x7abDUv00DxFgScMCbEXw/wlYHjTO+9As/XFg4ukFg33Lu+vuaG1QQ6gS
UoOM0yGqId99noMXVZ9HdTJ/a7BmBY9EolZBY7a1O3t+YbSv8iLVx7LbtSVG8/js
1kVEaQsLpaneqYPiRIL/XR2PfyIWIbcIB+kxzgx0kLHdLPsplCLAQWwEOIGayA0V
FZF7qspsmuFJ5i1T6OXLkuU5tZYdXyGGXW8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQzohwsA7ixcPfWDzsG5LwpPY/Y3zAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1L002SWNMQU80c1hEMzFnODdCdVM4S1QyUDJOOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBJIAMA0GCSqGSIb3DQEBCwUAA4IBAQBWc3yJiM9ee5JwdgcE3y1u
akBZdEph9tFf3nJTHyKIueW603B5DK1uO1t5G6tGdpso5JmUzkTwS7FkcwrQ771M
c1oK8JjY2myezfw5l20pqL/GwmTRSObrles5NgBwOgQ9hvyNd1Zy73n0gKUITWTU
bfR3ktgAfa2ol7b8UQauYUysg8jKV4CsaGk2ngT8RMfzEZaFXZ0YJYTm3iry+r5C
b+9VKhOdrcfIOu/pnHVpt5SStTn6/xb8hwVW4tPWu6XYojDl4RQac2P3LGqzACTJ
v2fGcibkLOAFXHep6ct94bowbxNh00puJnByz1PdBQbBiXj38DhrxW0NEixZo880
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:28:18 2025 by rpki-client