Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30333/mXXwsh9HACySXKr6V5wB59pnLec.roa
File:                     mXXwsh9HACySXKr6V5wB59pnLec.roa (raw, json)
Hash identifier:          /Vbg0lHXS4XYjQKYc52lDgsDjNRPT+CO949ikxqib9s=
Subject key identifier:   99:75:F0:B2:1F:47:00:2C:92:5C:AA:FA:57:9C:01:E7:DA:67:2D:E7
Certificate issuer:       /CN=07813FAF207135B89B16CDB5E3701E7AE61C186C
Certificate serial:       03
Authority key identifier: 07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/mXXwsh9HACySXKr6V5wB59pnLec.roa
Signing time:             Thu 24 Jul 2025 03:21:24 +0000
ROA not before:           Thu 24 Jul 2025 03:21:24 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        2406:600::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07813FAF207135B89B16CDB5E3701E7AE61C186C
        Validity
            Not Before: Jul 24 03:21:24 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=9975F0B21F47002C925CAAFA579C01E7DA672DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:a8:82:8e:c2:29:1a:1f:30:c0:b2:aa:d3:
                    db:60:05:a4:4c:58:cb:17:ce:8c:1a:6a:1f:ac:03:
                    10:ac:42:f2:cf:69:90:00:62:1b:7b:c0:f6:78:cd:
                    7a:5e:62:52:1e:dc:f5:90:8f:4a:5b:7a:32:ff:34:
                    01:83:96:09:de:cf:f4:0a:ab:a8:55:7b:2f:07:80:
                    41:79:62:44:14:3b:e7:50:5e:75:bb:8b:04:f9:5e:
                    e0:43:78:89:35:38:8a:07:10:e1:a0:9a:e4:94:02:
                    e7:ff:a2:ad:72:1f:cd:24:a9:85:11:33:be:0d:d2:
                    3b:88:d0:8a:6a:59:15:3f:76:3b:06:cc:03:9b:96:
                    e4:e7:06:ee:ff:c1:b4:fe:55:19:2a:57:b8:42:44:
                    35:a1:68:4b:f5:9c:0e:64:67:4a:84:d3:13:67:ea:
                    12:d6:f8:e3:33:96:cd:07:1f:2c:3c:15:99:14:ea:
                    29:5f:90:a0:0d:bd:17:ea:91:19:12:7c:7f:c5:cc:
                    d4:ba:46:4e:54:67:a9:0d:6e:d6:b5:27:61:cc:73:
                    70:1f:51:13:a1:f1:ee:0c:cf:a7:d1:96:da:df:1f:
                    7e:a0:58:1d:ce:16:8b:f0:2f:75:16:94:2c:d8:7c:
                    04:9f:a5:aa:fe:ff:bc:ec:fc:62:24:a7:bb:3f:14:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:75:F0:B2:1F:47:00:2C:92:5C:AA:FA:57:9C:01:E7:DA:67:2D:E7
            X509v3 Authority Key Identifier:
                keyid:07:81:3F:AF:20:71:35:B8:9B:16:CD:B5:E3:70:1E:7A:E6:1C:18:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/B4E_ryBxNbibFs2143AeeuYcGGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B4E_ryBxNbibFs2143AeeuYcGGw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30333/mXXwsh9HACySXKr6V5wB59pnLec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:4e:d6:ec:b0:f1:5f:ad:0d:86:b0:00:0d:c6:47:f0:59:
         b0:22:42:6a:87:74:9d:a1:2f:e0:33:6e:44:eb:85:bc:1f:d1:
         35:4e:0f:45:aa:e8:6b:29:5e:cc:aa:75:56:eb:db:94:63:81:
         ae:d6:b2:56:aa:fe:3d:88:98:46:58:3f:db:66:da:10:d8:31:
         ec:7b:92:19:ca:5a:51:c0:cd:72:dd:b9:3f:85:7a:75:16:a3:
         c1:a3:21:bf:c7:12:d1:2e:d8:eb:2b:3e:1b:1b:d1:2a:09:38:
         ff:87:10:52:10:1a:bf:a8:cb:f5:fe:a2:09:b5:87:22:68:e1:
         6e:7c:32:07:f7:56:a4:5c:fe:53:8d:92:80:ec:01:5a:86:8f:
         c3:60:d4:ee:d7:56:38:3a:da:fc:73:b0:fd:69:9d:b6:d0:1e:
         9a:ae:55:57:b1:46:52:90:b3:eb:43:dd:74:58:a6:1d:82:07:
         b9:67:f7:22:d5:d0:87:1a:d5:5a:25:b8:e7:b5:f0:ae:f6:ed:
         4b:a7:a0:71:d3:08:15:a4:cf:b0:74:0a:48:86:c9:8b:92:07:
         34:64:21:85:43:43:23:85:fb:bd:07:a4:c6:b8:b5:08:1c:cd:
         0d:df:07:c8:55:d0:b9:4b:e6:44:f5:60:fd:89:d3:59:1b:e2:
         98:72:50:6e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNzgx
M0ZBRjIwNzEzNUI4OUIxNkNEQjVFMzcwMUU3QUU2MUMxODZDMB4XDTI1MDcyNDAz
MjEyNFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoOTk3NUYwQjIxRjQ3MDAy
QzkyNUNBQUZBNTc5QzAxRTdEQTY3MkRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALv8qIKOwikaHzDAsqrT22AFpExYyxfOjBpqH6wDEKxC8s9pkABi
G3vA9njNel5iUh7c9ZCPSlt6Mv80AYOWCd7P9AqrqFV7LweAQXliRBQ751BedbuL
BPle4EN4iTU4igcQ4aCa5JQC5/+irXIfzSSphREzvg3SO4jQimpZFT92OwbMA5uW
5OcG7v/BtP5VGSpXuEJENaFoS/WcDmRnSoTTE2fqEtb44zOWzQcfLDwVmRTqKV+Q
oA29F+qRGRJ8f8XM1LpGTlRnqQ1u1rUnYcxzcB9RE6Hx7gzPp9GW2t8ffqBYHc4W
i/AvdRaULNh8BJ+lqv7/vOz8YiSnuz8Um/8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSZdfCyH0cALJJcqvpXnAHn2mct5zAfBgNVHSMEGDAWgBQHgT+vIHE1uJsWzbXj
cB565hwYbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMzMvQjRFX3J5QnhOYmliRnMyMTQzQWVldVljR0d3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQjRFX3J5QnhOYmliRnMyMTQzQWVl
dVljR0d3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzMzL21YWHdzaDlIQUN5U1hLcjZWNXdCNTlwbkxlYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBgYAMA0GCSqGSIb3DQEBCwUAA4IBAQCMjE7W7LDxX60NhrAADcZH
8FmwIkJqh3SdoS/gM25E64W8H9E1Tg9FquhrKV7MqnVW69uUY4Gu1rJWqv49iJhG
WD/bZtoQ2DHse5IZylpRwM1y3bk/hXp1FqPBoyG/xxLRLtjrKz4bG9EqCTj/hxBS
EBq/qMv1/qIJtYciaOFufDIH91akXP5TjZKA7AFaho/DYNTu11Y4Otr8c7D9aZ22
0B6arlVXsUZSkLPrQ910WKYdgge5Z/ci1dCHGtVaJbjntfCu9u1Lp6Bx0wgVpM+w
dApIhsmLkgc0ZCGFQ0Mjhfu9B6TGuLUIHM0N3wfIVdC5S+ZE9WD9idNZG+KYclBu
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:13 2025 by rpki-client