Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30316/aXVN6tq9a84GESaT7hBnyJRRDhU.roa
File:                     aXVN6tq9a84GESaT7hBnyJRRDhU.roa (raw, json)
Hash identifier:          Qbk6SCFEz51JPydGXzdNCBvSYHpxb2QJfterqjhjQts=
Subject key identifier:   69:75:4D:EA:DA:BD:6B:CE:06:11:26:93:EE:10:67:C8:94:51:0E:15
Certificate issuer:       /CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Certificate serial:       22
Authority key identifier: 51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/aXVN6tq9a84GESaT7hBnyJRRDhU.roa
Signing time:             Sat 01 Nov 2025 01:33:15 +0000
ROA not before:           Sat 01 Nov 2025 01:33:15 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     24229
IP address blocks:        2404:168::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
        Validity
            Not Before: Nov  1 01:33:15 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=69754DEADABD6BCE06112693EE1067C894510E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:63:2d:ca:d3:65:b0:21:a7:63:e5:43:3c:
                    d4:1f:f4:d5:c4:ee:5f:fb:d6:88:db:1b:95:91:10:
                    3b:c9:2c:e1:0e:4a:ce:a9:f6:95:09:ec:0d:07:54:
                    55:51:85:3d:2a:80:14:1f:93:8a:d4:9a:6f:53:01:
                    a9:13:51:3f:06:32:94:c9:b6:f6:18:90:ac:3a:6e:
                    b6:da:a3:1e:30:8e:7a:4e:fa:2a:a9:49:15:7a:24:
                    7d:5c:95:2f:41:57:9e:40:f2:4c:70:7e:b8:71:b7:
                    5a:23:93:52:dd:1f:df:7e:0c:e1:6c:30:0d:ef:69:
                    31:f6:fa:b8:56:d8:ba:50:34:46:b3:1f:63:d6:94:
                    1b:da:f1:7c:4d:4a:a0:a6:15:c4:28:fb:e3:cd:a1:
                    86:15:d3:4e:6d:d8:dd:a0:79:6c:3d:8c:67:0d:49:
                    39:a4:fa:8f:37:e9:20:5a:9b:58:03:2e:06:07:c8:
                    c6:75:62:70:78:3a:19:9b:91:34:0e:28:24:65:83:
                    f2:1b:c8:38:69:f2:d7:bd:b1:1b:7f:e6:0e:f4:f6:
                    c8:b4:d1:6f:64:5b:35:94:3a:6e:42:27:43:e2:e6:
                    66:e3:8a:d4:24:c4:26:26:d4:b8:ee:d8:5c:76:90:
                    9c:48:60:e5:5a:8e:3b:1d:91:5a:fc:71:57:04:d8:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:4D:EA:DA:BD:6B:CE:06:11:26:93:EE:10:67:C8:94:51:0E:15
            X509v3 Authority Key Identifier:
                keyid:51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/aXVN6tq9a84GESaT7hBnyJRRDhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:168::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:31:12:3f:1d:4f:34:73:f0:38:95:e5:f7:bc:82:e6:8e:d6:
         9f:57:11:d1:ad:e7:22:96:ab:05:91:09:32:e8:57:33:d6:a1:
         cf:a3:26:43:5c:10:b0:33:3d:e9:49:1c:16:24:69:19:b5:ef:
         65:05:1a:74:19:1f:8a:33:52:6a:85:ae:8b:36:8f:a2:78:9e:
         26:6c:95:d4:eb:6c:3f:90:f8:20:06:d7:1c:bf:cd:db:1b:90:
         b0:00:6d:81:f5:c6:9e:b4:85:ba:53:14:ae:3f:b8:3c:f2:cd:
         9b:fb:bd:48:c3:64:9b:5c:29:03:25:65:6a:97:78:ff:6b:fa:
         3d:a0:26:79:1a:4f:35:1a:bf:91:c4:63:fd:7f:d5:40:08:45:
         98:75:7a:99:d3:88:55:b0:7c:36:a8:ae:7d:2d:94:51:fa:4b:
         2e:64:eb:e6:b3:96:d7:48:25:18:d1:eb:74:ca:0a:60:e2:d8:
         1a:97:1f:35:3e:2d:94:51:bc:56:57:42:46:8d:75:7c:ed:42:
         1d:f6:ea:c5:86:16:c5:b3:8a:a6:92:cc:cd:dd:3d:81:c5:b6:
         86:9e:73:e7:2a:49:1b:7f:52:92:6e:df:ed:be:ec:1a:6d:db:
         c5:d0:09:1c:84:35:a3:fd:02:f5:c8:89:2c:2b:60:dc:58:b8:
         ec:94:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:28:04 2025 by rpki-client