Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30417/wB8VGxHldAdZWhNNgrs04qh28Cg.roa
File:                     wB8VGxHldAdZWhNNgrs04qh28Cg.roa (raw, json)
Hash identifier:          x9pCdF1Of2EjK0erSGoAymNxh7D7WzjkDEx33gjgXDQ=
Subject key identifier:   C0:1F:15:1B:11:E5:74:07:59:5A:13:4D:82:BB:34:E2:A8:76:F0:28
Certificate issuer:       /CN=4C6C4AF6832D7DCDE79B0535F2637DA9CD89D4C4
Certificate serial:       22
Authority key identifier: 4C:6C:4A:F6:83:2D:7D:CD:E7:9B:05:35:F2:63:7D:A9:CD:89:D4:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/wB8VGxHldAdZWhNNgrs04qh28Cg.roa
Signing time:             Tue 01 Jul 2025 01:31:58 +0000
ROA not before:           Tue 01 Jul 2025 01:31:58 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     63799
IP address blocks:        2400:e860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C6C4AF6832D7DCDE79B0535F2637DA9CD89D4C4
        Validity
            Not Before: Jul  1 01:31:58 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C01F151B11E57407595A134D82BB34E2A876F028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:41:7d:d2:12:b1:4b:9c:8d:03:39:3f:5f:61:
                    b1:49:55:a1:39:1a:b8:8d:90:d3:94:24:63:49:5c:
                    e6:cf:26:f5:ca:68:21:15:9a:68:76:97:1b:79:5f:
                    0d:9c:ad:7c:da:d5:ad:1b:81:84:a2:2d:0c:f1:12:
                    77:75:17:07:cd:e0:ba:44:e3:cd:a8:70:e6:90:23:
                    f2:69:bd:5e:e1:85:ec:4e:a0:7e:95:92:44:d4:5c:
                    b4:5b:41:de:01:60:6a:74:69:db:47:5a:fd:d3:96:
                    2c:6e:30:1f:c4:3f:77:36:b8:b3:e5:af:7c:61:e3:
                    3c:82:6d:c3:e5:06:f4:ad:5f:ba:49:e5:01:77:64:
                    f9:9f:8b:3e:cc:a9:da:1d:4a:4a:61:f3:71:02:44:
                    da:2a:e2:c2:c8:a1:83:10:18:ec:d6:25:f2:a6:87:
                    ce:ff:d4:fd:a8:bc:59:55:29:e1:dc:24:a2:da:a6:
                    be:1e:91:c2:80:ca:6a:94:95:3a:60:89:23:c1:7d:
                    d3:cc:07:0e:0f:b0:a6:6c:44:32:42:bc:21:72:2d:
                    b9:67:b9:67:dc:c1:24:6b:7c:7d:c2:02:f2:60:28:
                    64:24:29:8f:da:82:7f:62:34:18:56:8a:8c:0e:50:
                    7d:c7:cc:aa:08:a9:03:57:23:73:eb:6c:6c:f3:ac:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:15:1B:11:E5:74:07:59:5A:13:4D:82:BB:34:E2:A8:76:F0:28
            X509v3 Authority Key Identifier:
                keyid:4C:6C:4A:F6:83:2D:7D:CD:E7:9B:05:35:F2:63:7D:A9:CD:89:D4:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/wB8VGxHldAdZWhNNgrs04qh28Cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e860::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:4a:67:3b:a5:0e:7c:2e:4f:d3:bc:f0:b7:be:67:33:1f:2d:
         48:16:70:f1:de:45:26:53:82:f7:76:bf:4f:d3:6a:a0:37:47:
         76:00:2f:b0:bb:a9:fd:3e:54:2b:ff:7e:20:94:72:44:c3:48:
         31:00:d9:a1:2d:38:66:88:78:ee:08:49:6f:c4:39:ba:a1:02:
         cc:c8:d4:de:59:05:65:e4:10:a7:a7:00:e8:3e:cd:6c:94:27:
         c4:66:31:82:99:0c:a1:62:21:f5:05:5b:f8:02:87:16:6f:8c:
         89:35:c2:21:d5:30:33:ac:37:8d:59:17:69:f7:d7:ec:09:b4:
         cf:98:40:24:b5:6b:2d:2b:cd:92:85:b6:9c:30:ad:31:3b:a4:
         4a:ce:76:8c:d8:7f:6e:67:d0:12:c2:7f:52:d7:76:e5:4e:d9:
         e6:41:bd:5d:80:16:42:82:5f:ba:15:c9:51:fc:a9:20:1e:04:
         bd:90:f8:d5:2f:8e:b5:44:ef:ad:00:af:cb:d3:4f:af:56:98:
         1e:c4:a0:13:8d:41:76:ed:4f:10:35:9c:09:de:90:20:cc:80:
         92:f0:e5:4a:5c:e1:86:af:cd:59:2e:79:7d:d4:d4:30:79:70:
         78:69:43:5c:40:f5:92:26:b5:f3:9e:28:22:d1:8d:de:6b:00:
         8d:a3:5a:7b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QzZD
NEFGNjgzMkQ3RENERTc5QjA1MzVGMjYzN0RBOUNEODlENEM0MB4XDTI1MDcwMTAx
MzE1OFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQzAxRjE1MUIxMUU1NzQw
NzU5NUExMzREODJCQjM0RTJBODc2RjAyODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPFBfdISsUucjQM5P19hsUlVoTkauI2Q05QkY0lc5s8m9cpoIRWa
aHaXG3lfDZytfNrVrRuBhKItDPESd3UXB83gukTjzahw5pAj8mm9XuGF7E6gfpWS
RNRctFtB3gFganRp20da/dOWLG4wH8Q/dza4s+WvfGHjPIJtw+UG9K1fuknlAXdk
+Z+LPsyp2h1KSmHzcQJE2iriwsihgxAY7NYl8qaHzv/U/ai8WVUp4dwkotqmvh6R
woDKapSVOmCJI8F908wHDg+wpmxEMkK8IXItuWe5Z9zBJGt8fcIC8mAoZCQpj9qC
f2I0GFaKjA5QfcfMqgipA1cjc+tsbPOsQKECAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTAHxUbEeV0B1laE02CuzTiqHbwKDAfBgNVHSMEGDAWgBRMbEr2gy19zeebBTXy
Y32pzYnUxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MTcvVEd4SzlvTXRmYzNubXdVMThtTjlxYzJKMU1RLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVEd4SzlvTXRmYzNubXdVMThtTjlx
YzJKMU1RLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDE3L3dCOFZHeEhsZEFkWldoTk5ncnMwNHFoMjhDZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAOhgMA0GCSqGSIb3DQEBCwUAA4IBAQCuSmc7pQ58Lk/TvPC3vmcz
Hy1IFnDx3kUmU4L3dr9P02qgN0d2AC+wu6n9PlQr/34glHJEw0gxANmhLThmiHju
CElvxDm6oQLMyNTeWQVl5BCnpwDoPs1slCfEZjGCmQyhYiH1BVv4AocWb4yJNcIh
1TAzrDeNWRdp99fsCbTPmEAktWstK82ShbacMK0xO6RKznaM2H9uZ9ASwn9S13bl
TtnmQb1dgBZCgl+6FclR/KkgHgS9kPjVL461RO+tAK/L00+vVpgexKATjUF27U8Q
NZwJ3pAgzICS8OVKXOGGr81ZLnl91NQweXB4aUNcQPWSJrXznigi0Y3eawCNo1p7
-----END CERTIFICATE-----
Generated at Sat Jul 5 19:31:29 2025 by rpki-client