Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/6Yd2tvCgeWOjGifs47jIlVK1-qo.roa
File:                     6Yd2tvCgeWOjGifs47jIlVK1-qo.roa (raw, json)
Hash identifier:          l6xCq3iVH9m3H7LyRKgpqx6F0L/u/4MPVD/SDj3SoDo=
Subject key identifier:   E9:87:76:B6:F0:A0:79:63:A3:1A:27:EC:E3:B8:C8:95:52:B5:FA:AA
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       76
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6Yd2tvCgeWOjGifs47jIlVK1-qo.roa
Signing time:             Tue 01 Jul 2025 01:28:10 +0000
ROA not before:           Tue 01 Jul 2025 01:28:10 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        119.245.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:28:10 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E98776B6F0A07963A31A27ECE3B8C89552B5FAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:25:2f:02:1b:9e:a4:4a:ec:e5:47:d1:ef:
                    61:71:46:d5:69:3a:64:37:f0:9b:3e:63:91:cb:b3:
                    3b:87:a7:58:a3:1b:5b:63:ec:7c:d7:a1:f8:de:e1:
                    23:fd:8b:a3:05:61:84:91:a1:26:24:fa:c7:a5:0e:
                    f9:05:2e:70:a7:2e:21:f6:49:c9:08:80:51:e5:ea:
                    cd:3b:f1:7d:49:0e:eb:65:16:70:a4:ef:46:31:15:
                    2b:0d:c5:7b:ea:e7:ff:29:0b:db:37:7d:82:39:b6:
                    93:8b:ae:c4:73:18:79:eb:78:ea:46:f5:f4:d2:af:
                    74:0f:d5:32:57:78:41:0f:90:3d:0c:e3:5e:7d:7d:
                    8a:8b:ff:b9:6c:8b:c7:f3:71:3f:cb:61:f9:5d:fa:
                    79:89:74:5f:48:9f:46:c8:08:dc:7c:f5:e6:30:b8:
                    38:7b:6d:d0:01:cc:47:d1:83:c7:8f:3e:19:03:3b:
                    a2:ac:7d:5c:cb:ac:cb:b0:bf:b5:b5:b1:69:84:e7:
                    70:89:49:3a:28:bc:a8:1f:d8:b9:53:d1:92:f7:a6:
                    a4:70:12:46:26:9a:c1:00:f3:02:86:7a:a9:25:9d:
                    1c:5c:9e:69:b9:1f:bf:37:14:14:08:8a:41:cf:07:
                    c4:34:96:94:d0:7e:19:d9:8b:be:a9:39:d0:e9:a2:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:76:B6:F0:A0:79:63:A3:1A:27:EC:E3:B8:C8:95:52:B5:FA:AA
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6Yd2tvCgeWOjGifs47jIlVK1-qo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:73:e2:a2:c3:c9:eb:31:f0:76:cc:0b:b2:f7:0b:58:92:
         d9:08:58:19:b5:6f:f9:cf:f3:28:69:36:11:20:8f:e7:28:b7:
         11:ba:c9:d8:94:e6:48:ef:53:26:9b:36:ed:ff:3e:0f:ee:c2:
         90:c8:b9:ae:aa:1f:39:fc:e2:d5:8b:ee:1a:1c:52:4c:b7:80:
         cc:d1:eb:95:71:ef:c9:00:5a:66:d9:3e:2f:62:18:50:68:11:
         3b:77:d6:e5:54:36:3a:41:17:d3:71:29:39:f5:f2:10:39:6e:
         4e:fd:08:1a:51:1b:ec:81:ec:af:7d:c6:29:cb:a1:0a:65:6d:
         8f:29:e8:87:c0:99:c3:a6:16:74:c3:2d:af:54:a1:26:10:33:
         e2:4f:03:b1:35:79:95:30:b9:73:41:d4:51:83:35:f9:bc:83:
         a9:9b:fd:d4:b3:13:df:a8:96:66:77:ec:0d:aa:dd:fb:71:8a:
         1c:4e:69:0d:10:0c:d1:d6:50:6d:12:65:ab:2d:b4:d3:74:6f:
         b0:f0:8a:49:a0:bd:27:b9:93:dc:b6:6b:93:c2:02:ee:b8:2c:
         2b:45:45:c4:b6:19:cf:9a:ee:f5:43:98:c1:c5:71:c6:d4:15:
         1a:61:d4:62:6e:f4:92:6e:17:63:ab:fc:89:dd:41:9f:d2:f7:
         be:b1:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:53:52 2025 by rpki-client