Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/DV-PD7YiMcjtVOq1AmhAZ5dTp-I.roa
File:                     DV-PD7YiMcjtVOq1AmhAZ5dTp-I.roa (raw, json)
Hash identifier:          xEK+MMsZJRsDMDkJMPQlTZnocVVorQeUOKQYDyTVX4g=
Subject key identifier:   0D:5F:8F:0F:B6:22:31:C8:ED:54:EA:B5:02:68:40:67:97:53:A7:E2
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       63
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/DV-PD7YiMcjtVOq1AmhAZ5dTp-I.roa
Signing time:             Fri 01 Aug 2025 01:28:53 +0000
ROA not before:           Fri 01 Aug 2025 01:28:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     16509
IP address blocks:        2001:300:fffc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug  1 01:28:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=0D5F8F0FB62231C8ED54EAB5026840679753A7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e5:72:34:b6:cc:23:f8:14:a1:6a:b0:a7:32:
                    d4:51:70:88:4a:55:82:90:3b:87:2f:c1:b8:64:c7:
                    d2:cb:e5:2d:60:ea:81:de:9d:c5:f2:d8:a2:56:35:
                    e5:03:58:d9:1c:2a:73:50:d1:3f:d4:36:33:c3:98:
                    52:81:7b:ef:4f:5c:6c:53:f7:85:48:39:74:7d:32:
                    f6:ee:02:e7:46:14:68:02:d0:ab:af:5a:7c:8b:4b:
                    57:84:c3:e8:53:3d:4a:1f:4f:e5:3e:20:1c:01:f1:
                    7a:71:cd:43:c5:c1:b1:cd:c7:64:83:a7:6d:59:52:
                    8e:7f:73:45:d7:65:81:dd:bb:71:bf:e1:63:9f:ac:
                    91:c7:33:d3:fe:e8:bf:8b:42:7f:6a:37:2a:c5:80:
                    c3:7c:36:50:5c:d7:d8:2b:57:32:a5:e4:84:8d:ca:
                    45:5d:12:5a:b2:a7:99:88:d2:ec:38:fe:c0:5e:dd:
                    c9:81:c8:5e:81:f2:e3:9a:3b:1a:6a:2f:30:f1:00:
                    84:9d:f1:fc:c0:f0:31:fd:74:c2:be:fc:c4:63:5c:
                    6a:e5:ef:6d:22:73:9d:ab:e6:6a:59:fa:b9:50:2f:
                    2f:5f:f7:33:44:b8:07:56:04:a5:af:b1:4c:68:1d:
                    a1:e8:d3:2e:c5:9c:84:78:23:1e:5e:75:da:52:07:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:8F:0F:B6:22:31:C8:ED:54:EA:B5:02:68:40:67:97:53:A7:E2
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/DV-PD7YiMcjtVOq1AmhAZ5dTp-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:80:65:16:29:ee:15:26:0d:09:fb:d1:cd:c2:76:d7:e5:
         f0:7b:df:7f:74:e8:9d:c1:7c:87:6d:fe:10:2f:3b:0c:cc:c7:
         a7:76:88:ee:5a:3f:1c:b6:c7:cf:ea:b3:4f:d7:fd:53:1a:4c:
         88:6e:4c:e4:c9:5c:60:c0:57:14:e9:e3:1f:70:2f:76:e4:1f:
         d5:48:4f:c4:88:a4:45:14:b0:fe:7a:08:8a:6f:00:a8:02:c1:
         f5:6e:f1:34:23:97:d5:1a:33:31:26:98:a8:e6:ca:e4:71:2e:
         71:42:34:fa:48:8d:86:5d:58:64:2d:d5:1a:53:e7:8c:92:c3:
         d5:2e:d7:f9:ee:20:c5:11:2a:26:37:92:ae:36:f4:9a:e1:17:
         e3:b4:e2:b5:c4:7d:cc:44:11:74:80:b8:c7:a1:6b:24:0d:ec:
         3f:82:2b:28:9b:34:ae:9d:79:4c:9a:a4:36:a5:88:ee:91:d8:
         66:c3:b7:b0:ae:17:64:19:20:99:38:37:aa:07:5c:e7:af:f4:
         dd:15:25:b5:3b:e8:d6:fb:64:64:75:c3:d2:d1:6b:fa:10:5f:
         36:ea:3e:6e:c9:c0:1b:63:8d:7b:e8:c6:bd:41:c0:69:30:b5:
         aa:ce:0a:3c:4c:d6:84:e2:ea:e2:42:d6:53:bf:81:2a:b0:f1:
         cb:2b:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:44:26 2025 by rpki-client