Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/YuA8ewP8-34HMv7P2ncaWL_ZqG8.roa
File:                     YuA8ewP8-34HMv7P2ncaWL_ZqG8.roa (raw, json)
Hash identifier:          4cYrQwjhWMwavZnJgyKplDzWnU7vi121NuQtPMFV7XU=
Subject key identifier:   62:E0:3C:7B:03:FC:FB:7E:07:32:FE:CF:DA:77:1A:58:BF:D9:A8:6F
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       74
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YuA8ewP8-34HMv7P2ncaWL_ZqG8.roa
Signing time:             Tue 01 Jul 2025 01:28:09 +0000
ROA not before:           Tue 01 Jul 2025 01:28:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:28:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=62E03C7B03FCFB7E0732FECFDA771A58BFD9A86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:a1:56:ef:80:09:da:f1:5e:bc:f1:e9:d9:
                    a1:ab:ae:a8:ce:9d:b0:bc:4a:06:c5:bf:f2:76:e2:
                    c2:e8:c8:4d:17:03:a1:52:cb:ef:1f:1c:f7:50:e8:
                    d3:f2:94:7e:4f:1c:70:ff:51:b5:8f:20:48:94:bf:
                    da:da:56:4e:ba:1d:15:05:63:5e:99:f2:c6:3b:2d:
                    fb:68:ca:2c:64:b5:a1:2b:93:f3:af:dc:41:74:32:
                    43:9f:42:2f:60:7a:02:d8:a6:8c:cd:00:f2:5d:1a:
                    0a:94:4c:2e:26:3e:2c:39:a3:8f:9a:e3:75:8f:03:
                    f9:ee:76:bc:7e:1e:b0:e6:f4:2c:a5:e9:dc:66:de:
                    2a:a7:47:d2:8a:5d:16:c0:42:1f:14:f5:7d:8a:37:
                    de:d2:dd:7c:e7:a2:f9:39:0a:ff:63:a5:7e:dc:db:
                    5e:5e:6c:e3:d6:dc:9b:46:21:02:c6:f8:24:c7:d7:
                    a6:7b:3a:1c:af:a7:13:87:cb:90:62:04:ea:03:ff:
                    63:28:e6:54:78:ab:5a:57:59:5a:d8:0d:7a:24:b8:
                    40:53:39:e9:41:51:fd:27:c3:c4:72:8f:8f:9f:f0:
                    61:44:6c:98:57:0c:c0:d7:0d:b9:ed:48:eb:d9:94:
                    68:2f:c0:72:cc:ed:6d:46:4c:ba:b2:8a:64:3c:dd:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:3C:7B:03:FC:FB:7E:07:32:FE:CF:DA:77:1A:58:BF:D9:A8:6F
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/YuA8ewP8-34HMv7P2ncaWL_ZqG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:16:47:d7:42:ed:f1:7e:40:93:cb:7f:44:f4:64:a7:09:
         57:95:e3:ee:35:ec:4f:47:16:d3:f2:f8:a6:10:48:dd:bc:45:
         03:67:5e:82:d9:43:1d:f4:ae:2a:da:83:5a:b5:c6:7e:ff:a4:
         38:16:ac:60:78:45:ba:c4:82:e2:35:df:39:1a:c6:24:09:dd:
         fa:23:91:e2:56:dc:c3:00:0d:19:30:e2:66:29:1f:bc:cb:d4:
         90:2b:74:ff:92:d9:97:41:9a:63:f3:2c:6a:b8:a2:04:68:0d:
         6c:d9:bf:08:c9:79:48:be:74:c4:7a:f1:88:7c:aa:2a:8c:56:
         db:7d:ed:60:73:4c:77:41:f9:d6:1e:d4:08:03:9c:08:d0:6c:
         30:1d:23:e5:0e:da:9b:ed:5c:00:8d:69:58:be:ad:fc:d4:c4:
         4c:9a:f3:19:83:0e:68:d9:64:20:92:e0:ec:72:f1:d8:71:fd:
         4b:bb:f7:ca:f2:7e:c0:3b:71:ac:5e:4f:fb:a8:d9:f3:62:a5:
         92:f1:9b:e4:a1:8d:c7:a6:3b:6d:c5:b1:47:84:d2:48:ae:61:
         d0:2f:d4:f1:bb:18:9d:22:bd:ff:b3:17:1d:84:d1:ea:96:a9:
         56:dc:5b:e5:79:fd:17:f3:03:98:48:4b:e9:09:fb:91:8e:81:
         4d:f9:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:31:51 2025 by rpki-client