Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Z9w3xilN4vZwvKo7miLY3F30ujI.roa
File:                     Z9w3xilN4vZwvKo7miLY3F30ujI.roa (raw, json)
Hash identifier:          gcoGHZXXiVIoG34A1STdY60TXTpIb5/iDQdntaW0mPY=
Subject key identifier:   67:DC:37:C6:29:4D:E2:F6:70:BC:AA:3B:9A:22:D8:DC:5D:F4:BA:32
Certificate issuer:       /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial:       18
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Z9w3xilN4vZwvKo7miLY3F30ujI.roa
Signing time:             Fri 11 Jul 2025 01:53:19 +0000
ROA not before:           Fri 11 Jul 2025 01:53:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        2407:a6c0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
        Validity
            Not Before: Jul 11 01:53:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=67DC37C6294DE2F670BCAA3B9A22D8DC5DF4BA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:c8:45:a2:b0:da:25:ab:4a:b1:cb:cf:67:
                    25:9d:db:dd:3b:c4:1b:3d:ac:16:bf:59:af:59:07:
                    81:e2:b2:b0:df:fb:e5:61:73:c1:a0:66:9a:d0:59:
                    f4:b8:7c:88:be:83:22:5f:8e:a3:2e:87:47:f7:a1:
                    b8:c2:12:bd:f0:fb:c9:47:55:5e:52:77:c8:3c:bd:
                    70:e8:f8:d7:7a:7e:d7:93:b9:d4:c6:ad:f5:ed:39:
                    8f:4a:19:e9:dc:05:6a:31:af:c3:5e:16:bb:e0:30:
                    81:11:ae:89:8a:da:73:a4:c7:12:7f:38:43:9d:73:
                    e2:34:e9:1d:17:b1:a1:d2:1d:5a:b9:dd:98:6a:9c:
                    83:7d:f5:f9:08:4c:b6:e1:52:90:92:84:06:b0:e7:
                    db:3d:dd:53:80:17:13:b5:ec:fd:52:ae:d0:cf:e4:
                    2d:28:c4:af:4d:08:2f:6f:64:a8:48:a4:33:66:1b:
                    87:16:a8:2f:ca:2c:e4:d1:d6:65:ae:92:36:c3:91:
                    c5:9d:0b:e2:88:ae:4c:85:5c:6c:e9:71:80:f1:ed:
                    cb:b7:05:a2:b6:d0:3e:3b:24:57:6e:a1:e0:41:dc:
                    01:ee:d1:93:d3:af:51:38:9d:ef:01:9b:4c:90:56:
                    49:e8:c2:e8:e7:6d:a6:c1:82:43:09:27:54:7d:8d:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:37:C6:29:4D:E2:F6:70:BC:AA:3B:9A:22:D8:DC:5D:F4:BA:32
            X509v3 Authority Key Identifier:
                keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/Z9w3xilN4vZwvKo7miLY3F30ujI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:6a:9b:78:12:56:24:a0:d2:c9:93:bb:5b:20:c4:e3:36:
         f4:8d:c0:8c:c3:16:02:9e:37:45:8f:ab:c5:01:55:43:1b:30:
         7f:1e:02:61:51:d0:08:7a:8e:80:36:83:c9:a1:0c:56:7d:17:
         f7:86:d8:4d:eb:7f:2f:a7:e7:18:61:0a:af:83:ca:a5:5f:f0:
         a4:fa:0f:43:85:8a:98:19:ff:7b:8c:26:fd:52:46:75:86:28:
         7d:3d:ca:d2:10:3a:fb:d5:51:41:ca:af:10:7d:9f:f7:cc:2f:
         ad:7c:24:2a:c0:76:70:1a:ce:8d:f9:0a:3a:00:51:bb:4e:04:
         6c:63:7c:32:f1:0c:0a:72:c6:69:aa:45:aa:c1:74:91:8f:5f:
         1c:e9:bb:2f:c0:4e:c2:f2:15:15:3f:4e:25:be:77:7a:d1:d5:
         7a:f3:0e:fc:2f:fb:2a:30:ba:4a:40:7d:32:c7:f3:f8:78:39:
         94:69:04:be:87:62:07:fc:29:ed:12:5a:a2:bb:94:e4:47:a6:
         98:8e:dd:0f:03:40:b2:31:0a:12:eb:da:f9:3f:06:d2:67:67:
         aa:33:dc:c8:a6:2a:23:bf:68:fb:9c:d4:a2:60:dd:cb:e2:5b:
         c7:27:6e:09:9d:9c:db:f7:d8:cb:63:c2:6d:69:c7:f3:0c:40:
         bd:55:54:dc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRkRB
QTc5MkE1RkUwMjEzQkM0QUM2NEVERjIxREYyRUFDNDBFQjBFMB4XDTI1MDcxMTAx
NTMxOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNjdEQzM3QzYyOTRERTJG
NjcwQkNBQTNCOUEyMkQ4REM1REY0QkEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMwQyEWisNolq0qxy89nJZ3b3TvEGz2sFr9Zr1kHgeKysN/75WFz
waBmmtBZ9Lh8iL6DIl+Ooy6HR/ehuMISvfD7yUdVXlJ3yDy9cOj413p+15O51Mat
9e05j0oZ6dwFajGvw14Wu+AwgRGuiYrac6THEn84Q51z4jTpHRexodIdWrndmGqc
g331+QhMtuFSkJKEBrDn2z3dU4AXE7Xs/VKu0M/kLSjEr00IL29kqEikM2Ybhxao
L8os5NHWZa6SNsORxZ0L4oiuTIVcbOlxgPHty7cForbQPjskV26h4EHcAe7Rk9Ov
UTid7wGbTJBWSejC6OdtpsGCQwknVH2N/B0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRn3DfGKU3i9nC8qjuaItjcXfS6MjAfBgNVHSMEGDAWgBQf2qeSpf4CE7xKxk7f
Id8urEDrDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODAvSDlxbmtxWC1BaE84U3NaTzN5SGZMcXhBNnc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSDlxbmtxWC1BaE84U3NaTzN5SGZM
cXhBNnc0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzgwL1o5dzN4aWxONHZad3ZLbzdtaUxZM0YzMHVqSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQAri2qbeBJWJKDSyZO7WyDE
4zb0jcCMwxYCnjdFj6vFAVVDGzB/HgJhUdAIeo6ANoPJoQxWfRf3hthN638vp+cY
YQqvg8qlX/Ck+g9DhYqYGf97jCb9UkZ1hih9PcrSEDr71VFByq8QfZ/3zC+tfCQq
wHZwGs6N+Qo6AFG7TgRsY3wy8QwKcsZpqkWqwXSRj18c6bsvwE7C8hUVP04lvnd6
0dV68w78L/sqMLpKQH0yx/P4eDmUaQS+h2IH/CntElqiu5TkR6aYjt0PA0CyMQoS
69r5PwbSZ2eqM9zIpiojv2j7nNSiYN3L4lvHJ24JnZzb99jLY8JtacfzDEC9VVTc
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:33:40 2025 by rpki-client