Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/vlsn6v6O-wxpVFihCmiM9irOvNE.roa
File:                     vlsn6v6O-wxpVFihCmiM9irOvNE.roa (raw, json)
Hash identifier:          kgYurlTYMvlZGQwmrnwythRVUFKmlGeMR1yZub43mdQ=
Subject key identifier:   BE:5B:27:EA:FE:8E:FB:0C:69:54:58:A1:0A:68:8C:F6:2A:CE:BC:D1
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       46
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/vlsn6v6O-wxpVFihCmiM9irOvNE.roa
Signing time:             Wed 01 Oct 2025 01:35:18 +0000
ROA not before:           Wed 01 Oct 2025 01:35:18 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     37899
IP address blocks:        240b:251::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 08:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:18 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BE5B27EAFE8EFB0C695458A10A688CF62ACEBCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:f6:e7:a8:0a:a9:94:d7:5f:a8:3c:65:de:
                    84:7f:30:97:16:ef:98:cb:f1:14:a2:b8:40:6c:30:
                    14:60:70:30:ea:e8:32:57:d6:9e:d2:b9:6c:64:7e:
                    14:97:b5:c7:fb:f3:d8:d2:d2:f0:fe:50:5e:a8:e2:
                    99:f3:d6:e9:3f:9e:1b:e8:c0:55:00:8c:39:43:f6:
                    ad:ea:dc:df:9a:80:95:b2:ba:d0:c1:b6:38:ac:5b:
                    ee:93:25:18:83:7f:2d:4d:e0:00:58:4b:43:e4:ca:
                    84:c6:e8:83:a8:7c:40:5f:99:69:3e:71:7f:ca:e4:
                    e3:2c:40:d8:de:49:94:a6:e0:33:aa:fe:41:66:70:
                    4c:54:d7:3d:45:d5:f8:bb:f6:97:d7:f2:26:d2:ef:
                    a0:ec:6d:da:3e:f6:0c:ff:9e:6b:85:3f:ec:5a:18:
                    f2:8c:9d:0a:48:4b:2e:d6:4d:b3:ea:cb:9f:db:aa:
                    7a:90:22:34:a8:aa:6e:91:9f:67:a2:3c:6e:61:b1:
                    12:ed:d4:8a:38:cf:68:47:f9:f3:1f:f6:f5:3d:26:
                    98:e2:e6:86:2e:39:2a:5a:4f:e9:29:a2:7c:90:d7:
                    e5:e1:17:bc:56:86:13:8c:bf:56:5e:ba:17:ba:f4:
                    5f:36:bf:b5:2a:09:d4:f2:cc:91:d5:b6:98:d2:3f:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:27:EA:FE:8E:FB:0C:69:54:58:A1:0A:68:8C:F6:2A:CE:BC:D1
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/vlsn6v6O-wxpVFihCmiM9irOvNE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:251::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:74:59:03:e9:fe:fa:8a:11:d2:d5:85:c2:76:74:2d:44:
         3c:d5:5b:50:5b:32:e7:38:51:76:2c:4f:1b:66:31:dc:1b:63:
         60:99:91:31:49:78:e3:e4:58:98:9f:03:55:25:90:a0:c7:57:
         0e:cd:67:19:01:e2:d4:b7:51:30:cd:87:be:8d:d1:53:34:22:
         5f:ad:95:d8:ee:93:56:e6:6d:fa:00:bc:08:f5:30:88:94:57:
         f8:94:64:5a:5c:60:d0:3e:97:bd:6b:da:cf:c5:00:4f:df:7e:
         7e:8e:7f:d5:12:32:a6:03:81:57:10:51:57:81:4a:6a:49:86:
         33:33:86:50:ce:31:70:03:c6:8c:6c:d4:6a:b6:26:81:18:31:
         91:51:19:37:3b:3b:23:2d:4f:4c:8f:86:5e:78:24:8b:72:d8:
         a2:f6:7f:f7:bd:66:48:63:6d:89:e7:d5:f7:ef:d5:51:1d:02:
         39:d9:b7:45:5a:98:45:98:a6:73:7f:ff:f8:9b:26:4b:02:30:
         be:76:b2:a0:c5:e6:2f:a8:39:16:ed:32:a1:2e:95:61:fd:f7:
         1e:d4:0c:05:6b:43:3b:f9:74:72:23:30:49:d6:b4:b1:77:0c:
         2e:93:a0:8e:42:a9:58:19:3f:b4:2f:22:98:0d:a0:d4:f1:64:
         c1:08:7e:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI1MTAwMTAx
MzUxOFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQkU1QjI3RUFGRThFRkIw
QzY5NTQ1OEExMEE2ODhDRjYyQUNFQkNEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNW9ueoCqmU11+oPGXehH8wlxbvmMvxFKK4QGwwFGBwMOroMlfW
ntK5bGR+FJe1x/vz2NLS8P5QXqjimfPW6T+eG+jAVQCMOUP2rerc35qAlbK60MG2
OKxb7pMlGIN/LU3gAFhLQ+TKhMbog6h8QF+ZaT5xf8rk4yxA2N5JlKbgM6r+QWZw
TFTXPUXV+Lv2l9fyJtLvoOxt2j72DP+ea4U/7FoY8oydCkhLLtZNs+rLn9uqepAi
NKiqbpGfZ6I8bmGxEu3UijjPaEf58x/29T0mmOLmhi45KlpP6SmifJDX5eEXvFaG
E4y/Vl66F7r0Xza/tSoJ1PLMkdW2mNI/S4kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBS+Wyfq/o77DGlUWKEKaIz2Ks680TAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1L3Zsc242djZPLXd4cFZGaWhDbWlNOWlyT3ZORS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkCwJRMA0GCSqGSIb3DQEBCwUAA4IBAQBrR3RZA+n++ooR0tWFwnZ0
LUQ81VtQWzLnOFF2LE8bZjHcG2NgmZExSXjj5FiYnwNVJZCgx1cOzWcZAeLUt1Ew
zYe+jdFTNCJfrZXY7pNW5m36ALwI9TCIlFf4lGRaXGDQPpe9a9rPxQBP335+jn/V
EjKmA4FXEFFXgUpqSYYzM4ZQzjFwA8aMbNRqtiaBGDGRURk3OzsjLU9Mj4ZeeCSL
ctii9n/3vWZIY22J59X379VRHQI52bdFWphFmKZzf//4myZLAjC+drKgxeYvqDkW
7TKhLpVh/fce1AwFa0M7+XRyIzBJ1rSxdwwuk6COQqlYGT+0LyKYDaDU8WTBCH4J
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:23:49 2025 by rpki-client