Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa
File:                     jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa (raw, json)
Hash identifier:          q4xY2bL+ahLjo1eN4/GUIWtRweDxWhb8lzO3KNMI/U4=
Subject key identifier:   8C:54:9C:43:D5:51:80:5D:6E:02:DA:7E:04:45:F0:AF:7F:C5:28:EE
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       4C
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa
Signing time:             Fri 01 Aug 2025 01:34:43 +0000
ROA not before:           Fri 01 Aug 2025 01:34:43 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131921
IP address blocks:        2406:a1c0:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Aug  1 01:34:43 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8C549C43D551805D6E02DA7E0445F0AF7FC528EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:49:f8:71:3a:be:d6:b0:13:c0:51:a5:f9:
                    98:29:65:37:80:83:e4:7c:21:14:12:fd:8a:0c:59:
                    72:48:65:d2:64:c6:2e:e5:5c:49:e3:f1:ad:96:a0:
                    56:14:9f:e4:d5:e4:02:ac:5d:e1:20:a1:f5:97:70:
                    73:69:cb:37:03:b7:a0:bd:d1:15:19:0a:92:f6:53:
                    83:44:3b:86:d0:de:ca:0e:1a:b4:3f:d3:62:81:46:
                    1b:b8:e3:45:6c:b4:0d:fb:38:16:6d:8d:30:a0:55:
                    a7:4f:8c:46:a2:9f:76:62:7c:fb:a3:22:a1:f6:c9:
                    66:68:6e:e9:46:50:ee:1e:bf:15:43:19:0c:c6:e8:
                    ac:1a:be:46:17:7f:63:89:17:b3:f9:40:d7:53:1a:
                    49:e4:93:99:21:3b:ca:55:a5:67:26:98:98:97:d6:
                    f2:fd:c4:39:81:31:d7:37:39:b5:7f:ef:67:06:41:
                    d3:0f:17:23:09:8d:9c:3d:ed:c1:43:48:16:8c:9c:
                    df:eb:33:4c:09:05:48:65:dd:b1:de:38:ea:32:86:
                    24:04:78:5b:b1:f3:d0:0b:60:47:43:f8:7f:81:a0:
                    18:0f:27:38:a0:e7:5b:6e:dd:fe:50:d4:5b:62:f2:
                    f1:b0:c7:9d:2f:9b:40:b5:1e:38:f8:52:41:2f:54:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:54:9C:43:D5:51:80:5D:6E:02:DA:7E:04:45:F0:AF:7F:C5:28:EE
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:03:54:41:5d:72:96:f7:3a:16:0c:20:8b:f2:db:3a:7a:a0:
         c9:b3:bc:dd:99:ac:e9:4d:e6:ae:70:4e:f9:bb:98:03:e0:db:
         e2:d2:db:e6:b3:c5:57:a8:ac:84:95:bd:2b:cb:d6:08:dd:fd:
         df:35:8c:72:14:e6:a4:f3:ef:b8:aa:10:05:49:7f:82:16:e0:
         31:64:28:77:2b:ca:d0:9e:0b:da:97:b2:fe:47:1f:80:19:61:
         ec:27:52:83:c8:14:1c:70:0c:7b:6b:7f:c5:a0:3f:19:d9:1f:
         53:2d:35:c6:35:60:46:f1:47:4d:ea:20:4b:c0:b0:e1:39:ed:
         22:5b:0a:74:fd:05:11:2f:7e:75:de:cf:18:30:8a:29:8d:50:
         6a:b4:eb:3d:23:8e:1d:57:3f:1b:5c:73:18:9d:5e:58:ae:1e:
         56:eb:bb:f4:af:09:d9:0e:a8:46:5e:1b:40:3f:b3:08:8f:c0:
         ac:75:07:c6:1f:f3:4b:98:40:53:e5:8a:09:f4:ba:3e:75:ec:
         e0:11:b9:03:4f:13:06:5f:31:ce:51:37:36:98:e5:d2:e3:f8:
         66:84:01:43:71:4d:98:33:6f:b9:28:0e:f2:e4:68:9f:c5:af:
         31:3e:d1:67:f2:43:ee:7d:25:09:f0:25:cf:e2:5a:40:b5:42:
         36:ef:39:22
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDgwMTAx
MzQ0M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOEM1NDlDNDNENTUxODA1
RDZFMDJEQTdFMDQ0NUYwQUY3RkM1MjhFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALwfSfhxOr7WsBPAUaX5mCllN4CD5HwhFBL9igxZckhl0mTGLuVc
SePxrZagVhSf5NXkAqxd4SCh9Zdwc2nLNwO3oL3RFRkKkvZTg0Q7htDeyg4atD/T
YoFGG7jjRWy0Dfs4Fm2NMKBVp0+MRqKfdmJ8+6MiofbJZmhu6UZQ7h6/FUMZDMbo
rBq+Rhd/Y4kXs/lA11MaSeSTmSE7ylWlZyaYmJfW8v3EOYEx1zc5tX/vZwZB0w8X
IwmNnD3twUNIFoyc3+szTAkFSGXdsd446jKGJAR4W7Hz0AtgR0P4f4GgGA8nOKDn
W27d/lDUW2Ly8bDHnS+bQLUeOPhSQS9UOQ0CAwEAAaOCAiowggImMB0GA1UdDgQW
BBSMVJxD1VGAXW4C2n4ERfCvf8Uo7jAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L2pGU2NROVZSZ0YxdUF0cC1CRVh3cjNfRktPNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBqHAAzANBgkqhkiG9w0BAQsFAAOCAQEAdgNUQV1ylvc6Fgwgi/Lb
OnqgybO83Zms6U3mrnBO+buYA+Db4tLb5rPFV6ishJW9K8vWCN393zWMchTmpPPv
uKoQBUl/ghbgMWQodyvK0J4L2pey/kcfgBlh7CdSg8gUHHAMe2t/xaA/GdkfUy01
xjVgRvFHTeogS8Cw4TntIlsKdP0FES9+dd7PGDCKKY1QarTrPSOOHVc/G1xzGJ1e
WK4eVuu79K8J2Q6oRl4bQD+zCI/ArHUHxh/zS5hAU+WKCfS6PnXs4BG5A08TBl8x
zlE3Npjl0uP4ZoQBQ3FNmDNvuSgO8uRon8WvMT7RZ/JD7n0lCfAlz+JaQLVCNu85
Ig==
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:33:35 2025 by rpki-client