Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
File:                     WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa (raw, json)
Hash identifier:          K/OjM+qzrcpE/D4PwV58IsKcsx1EPa8QkW+JxapZIZ4=
Subject key identifier:   59:74:7B:33:0E:56:3B:03:4D:1C:10:93:56:FA:60:B5:54:A4:5A:41
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       62
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
Signing time:             Fri 01 Aug 2025 01:28:52 +0000
ROA not before:           Fri 01 Aug 2025 01:28:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     14618
IP address blocks:        2001:300:fffb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug  1 01:28:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=59747B330E563B034D1C109356FA60B554A45A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:17:08:1b:05:68:d6:9b:3c:c7:42:f9:ac:
                    83:2e:f0:77:78:c4:77:ce:50:80:58:a3:29:09:9b:
                    c2:03:91:f6:2b:40:20:5d:c8:f6:91:66:5c:57:f8:
                    a5:f0:16:cd:bb:da:ae:59:5d:62:aa:27:f1:05:2e:
                    2d:41:91:1b:5f:ea:49:74:24:57:12:d2:ed:d9:27:
                    c8:a1:9f:9e:d1:bb:63:d6:d7:44:9b:8c:26:61:ef:
                    01:ea:d5:91:7f:36:45:0f:2b:a7:6f:61:2c:40:c3:
                    0d:4a:40:cb:e6:ee:41:26:a7:09:33:56:75:ec:ce:
                    c0:e9:54:c5:00:92:89:ad:ef:cb:ec:34:67:2b:e9:
                    c2:37:6d:b2:1d:e4:d9:33:c6:ae:96:cf:73:86:c1:
                    6c:2c:1e:66:93:49:8c:00:2c:a9:e5:df:20:ae:17:
                    76:ff:1b:9d:28:0f:83:e4:5c:7b:a7:67:f2:cb:22:
                    5e:99:1e:bf:84:b6:e7:a1:b6:74:cf:ca:23:64:fa:
                    c4:9f:a9:d2:d1:3e:f3:3e:2b:93:81:6d:4a:a6:2b:
                    f8:80:e4:52:d6:e6:ce:cb:d8:7c:8c:1c:84:e5:c2:
                    93:79:fe:43:f5:18:61:02:f1:09:bc:0d:2d:e4:33:
                    2e:27:02:07:0e:a1:09:bc:3b:ae:df:65:7b:14:d5:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:74:7B:33:0E:56:3B:03:4D:1C:10:93:56:FA:60:B5:54:A4:5A:41
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:cc:18:42:90:1c:af:47:bc:8b:ed:a1:54:c0:6c:b7:e3:
         d7:94:8b:63:ad:9a:c4:e2:f9:20:c6:e3:4a:9e:7f:f7:20:20:
         76:b4:4f:73:99:82:bf:fd:1d:d1:79:8d:4d:27:0e:3d:4f:c5:
         de:c4:90:b1:38:2a:20:10:b0:b7:a9:05:b2:5f:41:0b:82:58:
         4d:a4:7c:31:35:c9:da:22:78:ba:1c:1a:7f:bc:ed:77:f0:b6:
         54:6a:4a:2f:d3:ff:ab:72:64:bb:14:78:38:6b:21:52:26:15:
         75:1b:0d:20:55:b3:30:39:cf:34:da:c0:87:a1:21:59:98:e9:
         a4:3d:00:ee:23:bb:b9:0d:a8:e7:bd:ff:3b:fe:cc:db:b5:17:
         9c:cf:64:fd:ee:5a:53:80:93:4b:0e:dd:89:ef:66:1d:3a:8d:
         ec:69:ef:d8:10:31:4f:c1:83:1a:c0:6c:cf:2e:4d:bb:5b:44:
         a2:52:62:74:a9:e3:d4:2f:ee:bf:14:10:3c:81:76:06:6a:ca:
         96:5c:ce:68:53:27:bf:ef:49:96:b0:fc:8f:0b:1a:3a:5f:86:
         f0:56:f4:81:16:97:2d:1e:d4:55:d1:4c:b0:bc:86:b0:47:75:
         5d:3a:3f:c1:fd:78:c5:4d:ab:35:e4:67:6a:aa:06:3b:0b:22:
         47:13:48:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDgwMTAx
Mjg1MloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNTk3NDdCMzMwRTU2M0Iw
MzREMUMxMDkzNTZGQTYwQjU1NEE0NUE0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANc9FwgbBWjWmzzHQvmsgy7wd3jEd85QgFijKQmbwgOR9itAIF3I
9pFmXFf4pfAWzbvarlldYqon8QUuLUGRG1/qSXQkVxLS7dknyKGfntG7Y9bXRJuM
JmHvAerVkX82RQ8rp29hLEDDDUpAy+buQSanCTNWdezOwOlUxQCSia3vy+w0Zyvp
wjdtsh3k2TPGrpbPc4bBbCweZpNJjAAsqeXfIK4Xdv8bnSgPg+Rce6dn8ssiXpke
v4S256G2dM/KI2T6xJ+p0tE+8z4rk4FtSqYr+IDkUtbmzsvYfIwchOXCk3n+Q/UY
YQLxCbwNLeQzLicCBw6hCbw7rt9lexTV2XkCAwEAAaOCAiswggInMB0GA1UdDgQW
BBRZdHszDlY7A00cEJNW+mC1VKRaQTAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDE2L1dYUjdNdzVXT3dOTkhCQ1RWdnBndFZTa1drRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQMA//swDQYJKoZIhvcNAQELBQADggEBAKQOzBhCkByvR7yL7aFU
wGy349eUi2OtmsTi+SDG40qef/cgIHa0T3OZgr/9HdF5jU0nDj1Pxd7EkLE4KiAQ
sLepBbJfQQuCWE2kfDE1ydoieLocGn+87XfwtlRqSi/T/6tyZLsUeDhrIVImFXUb
DSBVszA5zzTawIehIVmY6aQ9AO4ju7kNqOe9/zv+zNu1F5zPZP3uWlOAk0sO3Ynv
Zh06jexp79gQMU/BgxrAbM8uTbtbRKJSYnSp49Qv7r8UEDyBdgZqypZczmhTJ7/v
SZaw/I8LGjpfhvBW9IEWly0e1FXRTLC8hrBHdV06P8H9eMVNqzXkZ2qqBjsLIkcT
SGg=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:44:54 2025 by rpki-client