Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/OdEtvKQJkvnRtTBiJjvNS9jT6ws.roa
File:                     OdEtvKQJkvnRtTBiJjvNS9jT6ws.roa (raw, json)
Hash identifier:          hzD9o3llJHe9lIzc8oMiIVMLKEAP8T5oI9XD7obZxnM=
Subject key identifier:   39:D1:2D:BC:A4:09:92:F9:D1:B5:30:62:26:3B:CD:4B:D8:D3:EB:0B
Certificate issuer:       /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial:       47
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/OdEtvKQJkvnRtTBiJjvNS9jT6ws.roa
Signing time:             Thu 13 Mar 2025 06:49:09 +0000
ROA not before:           Thu 13 Mar 2025 06:49:09 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     7514
IP address blocks:        2001:2f0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
        Validity
            Not Before: Mar 13 06:49:09 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=39D12DBCA40992F9D1B53062263BCD4BD8D3EB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:c4:5a:47:78:c9:eb:0a:aa:58:59:35:70:
                    df:32:a4:bc:a1:e9:a3:9e:2e:be:95:17:87:05:76:
                    b6:ed:96:18:86:ba:3c:75:7d:b6:32:b6:92:62:cd:
                    14:1a:81:5f:30:f6:fc:76:a6:a1:50:87:ad:05:2b:
                    fa:aa:64:21:c7:75:0b:c2:80:ac:7b:1d:d4:f3:e7:
                    af:02:97:fa:ad:70:2b:ca:dd:aa:02:e7:3f:e7:f6:
                    5d:97:29:db:6b:eb:78:fe:d4:8b:88:0e:71:cd:56:
                    82:22:48:11:80:f5:f9:d3:51:ac:d2:0d:ea:99:70:
                    e5:1f:a7:b4:99:19:d0:ab:33:47:ce:83:9a:2e:ea:
                    d6:6a:3c:c4:d6:51:5b:18:67:74:98:0d:c9:9a:c7:
                    77:81:26:e8:47:3f:69:ff:85:2d:05:b4:84:3c:98:
                    0c:d0:73:7d:20:de:45:a3:5e:19:e6:f2:76:1a:50:
                    51:10:1c:5b:34:e6:61:b7:da:bc:cb:40:c4:3a:57:
                    82:1f:04:da:e4:32:7c:03:26:e3:e9:a7:d8:38:04:
                    6f:44:b0:e2:4b:3b:50:16:ca:73:bc:dc:50:cf:62:
                    c0:71:5e:4a:62:c1:82:bf:2f:13:5b:37:11:2f:42:
                    09:df:b0:db:6b:8e:96:5a:7f:97:83:d4:b9:40:c1:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:2D:BC:A4:09:92:F9:D1:B5:30:62:26:3B:CD:4B:D8:D3:EB:0B
            X509v3 Authority Key Identifier:
                keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/OdEtvKQJkvnRtTBiJjvNS9jT6ws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:e3:14:eb:d7:68:db:6b:41:58:52:07:cd:36:87:54:05:
         ac:db:0c:d8:b3:a0:1a:c9:f7:ef:9d:ce:48:53:e4:16:ef:b1:
         3c:e8:50:bb:90:dd:a7:41:6b:e9:07:28:3c:ec:e0:14:53:9b:
         73:d9:a4:59:4d:18:10:ad:2f:c1:32:82:79:63:38:87:3d:14:
         6b:1d:94:52:44:77:34:14:31:2d:a3:92:cb:0b:5a:18:8b:31:
         70:03:0a:ef:97:17:d0:46:80:6e:23:4e:af:09:d4:2c:eb:eb:
         85:42:98:60:fe:86:b6:e8:52:e2:53:67:0d:e8:23:2d:f8:a7:
         aa:2c:9c:1d:aa:b7:3b:46:8e:1c:d8:c0:c7:2a:e0:f1:f3:da:
         2e:d0:a9:b5:63:f3:35:c6:0c:b0:dd:d2:d2:9e:dc:c4:4b:99:
         14:6b:21:df:f7:cc:5f:21:a5:3d:c4:46:2e:2e:85:60:7c:55:
         bf:ef:5f:0c:5a:fa:63:58:3e:4f:1f:78:93:3f:f3:fc:63:ed:
         1d:45:12:13:40:ac:e2:9b:ef:83:60:cc:bf:65:4b:8c:2b:d4:
         c0:c0:03:e5:e6:9f:3c:1c:03:5b:3b:01:f2:57:c2:45:b9:e4:
         00:98:3e:2f:58:52:d6:8a:ee:a9:7f:1a:ff:5c:2f:42:ea:cb:
         de:b9:19:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5N0Yy
QjRCOEZFMjVBMEMwQzdGNEQ2RkQ0RkExQkE3Q0FFNjEyQTEyMB4XDTI1MDMxMzA2
NDkwOVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMzlEMTJEQkNBNDA5OTJG
OUQxQjUzMDYyMjYzQkNENEJEOEQzRUIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOeSxFpHeMnrCqpYWTVw3zKkvKHpo54uvpUXhwV2tu2WGIa6PHV9
tjK2kmLNFBqBXzD2/HamoVCHrQUr+qpkIcd1C8KArHsd1PPnrwKX+q1wK8rdqgLn
P+f2XZcp22vreP7Ui4gOcc1WgiJIEYD1+dNRrNIN6plw5R+ntJkZ0KszR86Dmi7q
1mo8xNZRWxhndJgNyZrHd4Em6Ec/af+FLQW0hDyYDNBzfSDeRaNeGebydhpQURAc
WzTmYbfavMtAxDpXgh8E2uQyfAMm4+mn2DgEb0Sw4ks7UBbKc7zcUM9iwHFeSmLB
gr8vE1s3ES9CCd+w22uOllp/l4PUuUDBNm0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQ50S28pAmS+dG1MGImO81L2NPrCzAfBgNVHSMEGDAWgBSX8rS4/iWgwMf01v1P
obp8rmEqEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNjAvbF9LMHVQNGxvTURIOU5iOVQ2RzZmSzVoS2hJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbF9LMHVQNGxvTURIOU5iOVQ2RzZm
SzVoS2hJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjYwL09kRXR2S1FKa3ZuUnRUQmlKanZOUzlqVDZ3cy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQLwMA0GCSqGSIb3DQEBCwUAA4IBAQAmO+MU69do22tBWFIHzTaH
VAWs2wzYs6Aayffvnc5IU+QW77E86FC7kN2nQWvpByg87OAUU5tz2aRZTRgQrS/B
MoJ5YziHPRRrHZRSRHc0FDEto5LLC1oYizFwAwrvlxfQRoBuI06vCdQs6+uFQphg
/oa26FLiU2cN6CMt+KeqLJwdqrc7Ro4c2MDHKuDx89ou0Km1Y/M1xgyw3dLSntzE
S5kUayHf98xfIaU9xEYuLoVgfFW/718MWvpjWD5PH3iTP/P8Y+0dRRITQKzim++D
YMy/ZUuMK9TAwAPl5p88HANbOwHyV8JFueQAmD4vWFLWiu6pfxr/XC9C6sveuRl9
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:35 2025 by rpki-client