Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/_SDWeq3ibVxJTn7WG4U2rBFGoDg.roa
File:                     _SDWeq3ibVxJTn7WG4U2rBFGoDg.roa (raw, json)
Hash identifier:          eVgIK1ufu8Gx25IoM3e6F0Fx3KNqFF6SA0CswZLPTms=
Subject key identifier:   FD:20:D6:7A:AD:E2:6D:5C:49:4E:7E:D6:1B:85:36:AC:11:46:A0:38
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       64
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/_SDWeq3ibVxJTn7WG4U2rBFGoDg.roa
Signing time:             Fri 01 Aug 2025 01:28:53 +0000
ROA not before:           Fri 01 Aug 2025 01:28:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     14618
IP address blocks:        2001:300:fffc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug  1 01:28:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=FD20D67AADE26D5C494E7ED61B8536AC1146A038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:0e:65:a5:86:a7:94:9c:9b:66:93:8e:c5:
                    78:2b:d8:74:19:ca:58:cd:67:6e:4d:81:0c:87:91:
                    4f:e7:c1:bf:be:bc:a2:3e:82:85:7d:74:ab:13:1c:
                    32:e3:4e:95:a1:3d:e0:12:0f:dc:ff:6e:75:da:aa:
                    c8:72:80:d3:5e:2e:95:c5:b5:39:c7:d0:be:c5:c0:
                    7c:10:f6:db:d3:09:9c:4d:f7:b0:dd:07:89:84:be:
                    1a:df:4f:93:0b:e1:d1:a7:87:64:0e:28:57:94:36:
                    15:43:d9:4a:c6:77:d6:42:c3:42:93:a0:30:ca:a4:
                    e4:89:b5:fb:89:d5:e8:cb:e5:a3:a6:bf:14:e2:2a:
                    e4:0c:2e:92:61:a7:c8:92:54:de:3b:b9:ba:9c:9f:
                    df:e8:23:2a:7c:c9:b0:0c:e8:86:d4:96:9e:4d:b5:
                    ce:a0:9c:b2:ae:63:86:ad:71:b1:2b:57:85:86:12:
                    94:d1:a4:7e:f1:79:40:61:cb:9c:3b:d5:3a:10:fc:
                    63:09:b4:09:d3:cf:83:6b:42:f5:97:cf:29:e5:80:
                    47:99:21:e0:c6:ff:d3:99:dd:40:92:64:59:a8:a4:
                    b8:da:1c:45:3a:6a:fe:9c:18:9a:d6:09:77:57:60:
                    76:a1:0a:0e:b2:b9:f5:5f:7f:7e:a3:cd:38:e8:6b:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:D6:7A:AD:E2:6D:5C:49:4E:7E:D6:1B:85:36:AC:11:46:A0:38
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/_SDWeq3ibVxJTn7WG4U2rBFGoDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:73:7b:18:c0:eb:ed:77:9b:2e:63:2a:14:c5:8b:5e:66:
         82:95:6a:9a:d4:74:3c:95:9f:18:6f:44:89:08:8a:dd:ae:01:
         54:35:57:c5:e0:8f:e5:2d:82:c7:96:fa:1f:76:f8:b9:02:82:
         27:70:cb:30:61:d2:b4:e5:83:93:ec:6e:62:d6:71:52:f3:1f:
         cd:b4:81:36:5c:dc:bb:80:81:d5:75:a0:81:4a:bc:1c:2d:ce:
         4a:1f:bd:59:1a:37:48:54:85:da:0a:1b:ed:62:1d:d3:d4:5d:
         e0:e2:4c:f9:67:cb:d4:64:ba:22:ca:50:9b:59:73:54:ad:86:
         a6:0a:77:50:92:ea:f6:3a:5d:bd:2d:24:e3:8a:fe:de:5c:71:
         45:9e:ba:73:e5:d8:91:5e:06:5c:2b:e6:ee:90:3e:ab:87:46:
         1c:ec:78:e7:cc:19:8c:d4:8f:16:da:e0:60:b9:df:74:70:76:
         00:c8:c0:20:98:c0:0f:69:86:d1:c6:dd:ee:62:bb:ba:e2:cc:
         07:62:d3:20:fb:9e:bd:f1:3b:b8:cd:f7:f8:e6:5b:c2:28:e4:
         c8:5b:f0:dc:46:d1:24:f0:49:85:f7:57:b0:2f:8b:18:6e:51:
         3d:42:b9:63:45:8a:1b:dd:a6:a7:2c:f4:92:f2:12:dd:c9:20:
         fb:9f:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:42:52 2025 by rpki-client