Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ohdXgKctXmgQY3ELVi0RChYeEls.roa
File:                     ohdXgKctXmgQY3ELVi0RChYeEls.roa (raw, json)
Hash identifier:          GcISsiUMvwue3VHD0Ob+RkSW04dUAEFQz5FNVF2XLQk=
Subject key identifier:   A2:17:57:80:A7:2D:5E:68:10:63:71:0B:56:2D:11:0A:16:1E:12:5B
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       4A
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ohdXgKctXmgQY3ELVi0RChYeEls.roa
Signing time:             Fri 01 Aug 2025 01:34:42 +0000
ROA not before:           Fri 01 Aug 2025 01:34:42 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131921
IP address blocks:        2406:a1c0:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Aug  1 01:34:42 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A2175780A72D5E681063710B562D110A161E125B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:5f:ad:b7:74:3a:e5:a2:0f:3b:a8:15:9d:
                    47:6c:65:c3:9d:dc:a0:de:fb:9d:a9:67:b7:d8:86:
                    3a:74:35:e9:80:c0:a5:db:02:73:1d:f3:65:c2:37:
                    6e:dc:8f:38:ef:ac:08:61:ea:6a:56:50:d6:07:02:
                    ed:ba:e1:06:ef:77:7f:02:b4:a4:88:86:f5:6e:f2:
                    d2:81:77:71:68:33:ea:89:84:47:3d:84:b5:d7:2b:
                    f8:83:fd:e9:7f:81:35:69:bf:3d:f5:63:d4:f4:a8:
                    56:03:64:4f:41:9d:8d:ec:cb:55:15:df:74:fe:9c:
                    44:32:77:d2:dd:4c:05:95:0c:42:e2:7b:5d:ff:9f:
                    05:0a:d8:f3:2d:a4:fa:a4:22:14:05:47:61:eb:46:
                    63:b8:79:6b:4e:67:dd:e6:38:6d:12:bd:f5:76:56:
                    14:eb:31:09:e2:ad:10:22:18:fb:a6:5d:84:c6:4c:
                    8a:a7:69:7d:6d:cc:6f:55:8a:ae:28:ea:15:57:8f:
                    53:9d:35:eb:bf:1d:01:ab:0b:59:f4:f3:bc:7f:b0:
                    51:12:c8:4a:2c:75:4e:64:40:bd:89:3e:d1:82:c0:
                    5f:42:71:09:78:95:05:fe:c4:b3:d6:96:34:36:aa:
                    45:3f:e7:15:22:01:40:58:8c:17:bd:d2:54:67:4d:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:57:80:A7:2D:5E:68:10:63:71:0B:56:2D:11:0A:16:1E:12:5B
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ohdXgKctXmgQY3ELVi0RChYeEls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:6c:c6:85:7b:3a:89:90:e1:10:08:3d:c5:91:72:7b:a5:
         97:63:ba:54:c9:a9:54:8e:db:45:11:91:64:24:52:8a:2d:4d:
         4b:25:e6:86:90:e1:27:8e:b8:4c:cc:7f:e7:e3:bb:da:46:30:
         4f:74:8c:45:71:ea:84:12:24:40:a9:3b:9d:41:07:58:dc:4a:
         b9:92:48:48:11:77:a0:12:4d:0b:20:13:1a:63:fc:3e:6c:f4:
         4d:1c:26:75:0c:1a:5e:10:95:f7:05:15:4a:e6:69:5d:b9:8d:
         97:8f:f1:fe:45:50:9f:be:89:71:5c:e8:84:76:85:a4:01:be:
         24:8e:6c:29:5c:2b:3f:db:3b:26:7f:05:b2:85:4d:24:f2:ba:
         04:86:a5:c3:e8:c8:22:eb:ce:f0:7d:87:b6:11:51:b9:b9:65:
         f0:33:ef:c5:20:67:44:b2:7a:86:d5:e5:10:80:cf:6d:39:1e:
         3d:19:53:ca:a7:aa:87:ea:5f:40:fc:41:61:86:ec:6f:7b:dd:
         6d:55:7a:4b:62:95:93:59:d1:20:06:ee:d8:f1:fa:cb:d6:6f:
         23:b1:72:ec:15:f1:30:05:4e:5c:0c:20:46:93:c4:02:57:48:
         bb:06:5b:26:7f:36:e8:40:71:33:17:33:4e:95:69:2d:13:14:
         44:e7:43:f7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDgwMTAx
MzQ0MloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQTIxNzU3ODBBNzJENUU2
ODEwNjM3MTBCNTYyRDExMEExNjFFMTI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK8sX623dDrlog87qBWdR2xlw53coN77nalnt9iGOnQ16YDApdsC
cx3zZcI3btyPOO+sCGHqalZQ1gcC7brhBu93fwK0pIiG9W7y0oF3cWgz6omERz2E
tdcr+IP96X+BNWm/PfVj1PSoVgNkT0GdjezLVRXfdP6cRDJ30t1MBZUMQuJ7Xf+f
BQrY8y2k+qQiFAVHYetGY7h5a05n3eY4bRK99XZWFOsxCeKtECIY+6ZdhMZMiqdp
fW3Mb1WKrijqFVePU501678dAasLWfTzvH+wURLISix1TmRAvYk+0YLAX0JxCXiV
Bf7Es9aWNDaqRT/nFSIBQFiMF73SVGdNGlcCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSiF1eApy1eaBBjcQtWLREKFh4SWzAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L29oZFhnS2N0WG1nUVkzRUxWaTBSQ2hZZUVscy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBqHAATANBgkqhkiG9w0BAQsFAAOCAQEALdFsxoV7OomQ4RAIPcWR
cnull2O6VMmpVI7bRRGRZCRSii1NSyXmhpDhJ464TMx/5+O72kYwT3SMRXHqhBIk
QKk7nUEHWNxKuZJISBF3oBJNCyATGmP8Pmz0TRwmdQwaXhCV9wUVSuZpXbmNl4/x
/kVQn76JcVzohHaFpAG+JI5sKVwrP9s7Jn8FsoVNJPK6BIalw+jIIuvO8H2HthFR
ubll8DPvxSBnRLJ6htXlEIDPbTkePRlTyqeqh+pfQPxBYYbsb3vdbVV6S2KVk1nR
IAbu2PH6y9ZvI7Fy7BXxMAVOXAwgRpPEAldIuwZbJn826EBxMxczTpVpLRMUROdD
9w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:37:37 2025 by rpki-client