Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/udYM7a7I-gRxHF5vnPYcVzMotjw.roa
File:                     udYM7a7I-gRxHF5vnPYcVzMotjw.roa (raw, json)
Hash identifier:          1ZkXFw86F9LMEHQ7yMH989MOLMJvKUWhsgSwySsUQfE=
Subject key identifier:   B9:D6:0C:ED:AE:C8:FA:04:71:1C:5E:6F:9C:F6:1C:57:33:28:B6:3C
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       49
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/udYM7a7I-gRxHF5vnPYcVzMotjw.roa
Signing time:             Fri 01 Aug 2025 01:34:41 +0000
ROA not before:           Fri 01 Aug 2025 01:34:41 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131921
IP address blocks:        2406:a1c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Aug  1 01:34:41 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B9D60CEDAEC8FA04711C5E6F9CF61C573328B63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:09:03:65:22:7f:2d:87:08:7b:37:51:5f:
                    5f:08:78:82:e9:f0:a4:5a:76:46:92:af:71:72:83:
                    47:4e:9e:39:e6:d1:a6:cf:79:a2:cc:82:c2:f0:96:
                    3a:03:d3:c3:a0:61:bb:61:fe:f2:e6:a9:4a:6d:62:
                    04:a9:4e:5d:65:49:b3:5b:01:c1:ae:bc:af:13:94:
                    00:29:79:56:be:d9:50:36:0d:7f:17:ac:34:4e:f2:
                    36:3c:3a:6d:4d:c0:0c:a1:0b:95:43:b5:0f:e5:74:
                    00:9a:8a:ae:8b:41:39:ec:4d:d1:be:93:87:5a:df:
                    01:9b:b3:54:b5:a0:c2:ec:68:96:8e:c5:50:99:4d:
                    56:50:da:79:0c:43:4a:25:f4:32:ed:21:e3:78:08:
                    b0:b9:b9:42:5f:c6:04:15:db:cb:5e:a2:07:c5:22:
                    83:6e:25:ba:a3:b2:18:d8:c6:77:49:bc:a9:90:64:
                    1e:07:41:20:b9:93:1a:30:b8:2c:78:6e:94:91:91:
                    46:d4:46:52:5c:a7:a7:2f:d8:ab:78:59:7a:3b:ed:
                    f2:ac:7e:ef:a7:ea:39:54:e9:c2:81:3c:94:f7:7a:
                    6c:e7:c0:0e:4f:62:b7:88:9b:25:38:23:6e:9e:fe:
                    5f:b7:20:6d:a1:55:e2:e2:04:ab:b8:2a:6f:50:79:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:0C:ED:AE:C8:FA:04:71:1C:5E:6F:9C:F6:1C:57:33:28:B6:3C
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/udYM7a7I-gRxHF5vnPYcVzMotjw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:b2:89:b9:39:a5:eb:92:18:99:3d:06:be:ee:5c:73:ca:
         a7:26:9a:01:30:fa:01:bd:f4:9c:ad:d3:17:b9:e4:93:21:66:
         0b:e6:4d:f5:54:da:01:7d:08:77:85:07:cc:ec:19:8a:eb:b0:
         08:06:12:85:ca:46:5e:4c:94:69:94:1d:b3:95:3a:2c:48:04:
         3f:e0:7b:f7:87:1a:af:cb:36:f5:3c:86:cd:1a:ad:80:88:31:
         2e:79:bf:da:07:e4:eb:89:e2:f2:1a:d8:09:dd:ec:8e:08:cb:
         ea:39:8f:e0:d6:a8:0a:4d:8c:b0:4d:e0:7a:4f:5c:24:ce:a3:
         f5:58:a0:e8:e1:e2:98:bc:dc:e8:41:ab:13:d9:f9:e5:1b:7f:
         3c:93:33:ce:3a:df:de:ab:18:cb:04:6d:0c:e6:77:84:88:ca:
         be:9b:80:d1:9c:06:51:ab:96:71:de:c5:f4:ce:2c:9c:da:bc:
         4d:3c:3b:7d:ca:0c:86:e3:e7:cd:af:3d:bb:79:6a:3e:85:45:
         ef:20:cc:34:df:54:3f:fe:0e:36:18:15:de:b4:19:19:85:0b:
         42:13:13:36:75:57:2d:1d:d6:98:00:fc:84:b9:07:e8:e5:bf:
         f5:fa:ca:2b:24:46:7c:bf:48:0e:73:93:8f:22:f5:6e:73:f7:
         8b:11:86:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDgwMTAx
MzQ0MVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQjlENjBDRURBRUM4RkEw
NDcxMUM1RTZGOUNGNjFDNTczMzI4QjYzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ6RCQNlIn8thwh7N1FfXwh4gunwpFp2RpKvcXKDR06eOebRps95
osyCwvCWOgPTw6Bhu2H+8uapSm1iBKlOXWVJs1sBwa68rxOUACl5Vr7ZUDYNfxes
NE7yNjw6bU3ADKELlUO1D+V0AJqKrotBOexN0b6Th1rfAZuzVLWgwuxolo7FUJlN
VlDaeQxDSiX0Mu0h43gIsLm5Ql/GBBXby16iB8Uig24luqOyGNjGd0m8qZBkHgdB
ILmTGjC4LHhulJGRRtRGUlynpy/Yq3hZejvt8qx+76fqOVTpwoE8lPd6bOfADk9i
t4ibJTgjbp7+X7cgbaFV4uIEq7gqb1B5iFcCAwEAAaOCAiswggInMB0GA1UdDgQW
BBS51gztrsj6BHEcXm+c9hxXMyi2PDAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L3VkWU03YTdJLWdSeEhGNXZuUFljVnpNb3Rqdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkBqHAAAIwDQYJKoZIhvcNAQELBQADggEBAJd7som5OaXrkhiZPQa+
7lxzyqcmmgEw+gG99Jyt0xe55JMhZgvmTfVU2gF9CHeFB8zsGYrrsAgGEoXKRl5M
lGmUHbOVOixIBD/ge/eHGq/LNvU8hs0arYCIMS55v9oH5OuJ4vIa2And7I4Iy+o5
j+DWqApNjLBN4HpPXCTOo/VYoOjh4pi83OhBqxPZ+eUbfzyTM846396rGMsEbQzm
d4SIyr6bgNGcBlGrlnHexfTOLJzavE08O33KDIbj582vPbt5aj6FRe8gzDTfVD/+
DjYYFd60GRmFC0ITEzZ1Vy0d1pgA/IS5B+jlv/X6yiskRny/SA5zk48i9W5z94sR
hhg=
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:35:51 2025 by rpki-client