Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
File:                     B80TFmvGB2B8PcWgV35zHexL0hw.roa (raw, json)
Hash identifier:          QBLe25emIUN7523U7dTIgIR6ZI/mkUrdKSKApflOSTM=
Subject key identifier:   07:CD:13:16:6B:C6:07:60:7C:3D:C5:A0:57:7E:73:1D:EC:4B:D2:1C
Certificate issuer:       /CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
Certificate serial:       02
Authority key identifier: D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
Signing time:             Mon 30 Jun 2025 07:42:11 +0000
ROA not before:           Mon 30 Jun 2025 07:42:11 +0000
ROA not after:            Tue 30 Jun 2026 06:23:17 +0000
asID:                     4675
IP address blocks:        2001:338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FF1377DB901B1695A7AEF05DDDE1885E6AD8C6
        Validity
            Not Before: Jun 30 07:42:11 2025 GMT
            Not After : Jun 30 06:23:17 2026 GMT
        Subject: CN=07CD13166BC607607C3DC5A0577E731DEC4BD21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:82:0b:28:bc:90:58:f8:47:06:cf:a9:18:
                    76:4d:c1:79:aa:48:b5:8a:ff:6a:2e:86:09:9e:af:
                    d0:83:64:1e:84:f5:d8:04:7f:b0:65:4e:7b:fb:fb:
                    39:c9:ee:30:2d:51:69:a4:55:37:ea:21:96:93:96:
                    e8:52:9f:52:40:2a:b1:cf:19:cf:dc:b1:1e:0f:da:
                    ef:ae:2a:d5:a2:b7:79:ee:ac:34:67:bc:31:c2:dc:
                    6d:f0:69:89:a1:42:35:29:79:19:cf:b0:15:a1:a1:
                    1e:e5:e5:fc:04:f2:57:11:80:86:d0:7c:5d:d6:fd:
                    bb:cb:21:f9:a2:b0:f1:92:7c:2d:36:c1:d6:cc:27:
                    ec:5a:be:1e:b7:2b:b6:f8:ce:0a:4e:3e:d2:e8:f5:
                    e0:c2:6f:ae:ad:38:23:91:3a:35:60:10:12:3d:ce:
                    be:cd:86:5e:b9:c1:db:7e:8e:0d:1e:9d:67:a2:83:
                    d8:11:4c:b3:17:de:56:cd:0d:ec:32:17:a4:22:6b:
                    8f:14:43:56:65:13:42:d6:75:a4:d5:4e:08:db:2a:
                    c9:1b:03:ae:ff:73:89:a3:6c:10:66:11:d6:e4:04:
                    32:33:25:04:fe:2e:da:9c:d4:6e:61:1f:e7:52:4a:
                    da:3f:d3:5e:d9:76:2b:19:4c:d0:37:cb:65:f1:87:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:13:16:6B:C6:07:60:7C:3D:C5:A0:57:7E:73:1D:EC:4B:D2:1C
            X509v3 Authority Key Identifier:
                keyid:D7:FF:13:77:DB:90:1B:16:95:A7:AE:F0:5D:DD:E1:88:5E:6A:D8:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/1_8Td9uQGxaVp67wXd3hiF5q2MY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1_8Td9uQGxaVp67wXd3hiF5q2MY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30001/B80TFmvGB2B8PcWgV35zHexL0hw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:338::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:51:41:ca:1f:01:42:22:e3:55:49:21:19:20:3a:e7:6d:37:
         90:71:06:35:4e:3e:ce:9f:c5:26:39:77:82:71:a2:c0:57:6f:
         7c:c9:4f:d4:45:00:43:8d:3f:20:9f:1b:d8:a2:21:46:1d:b3:
         ed:48:0e:41:bd:8d:9e:06:66:fe:45:80:ab:95:70:0a:43:2b:
         85:dd:ab:33:ec:a1:fd:26:a6:2e:49:3e:d3:a3:97:1a:89:78:
         c5:59:1e:24:c5:25:fe:f2:a8:6c:02:a9:50:4b:54:76:f1:9b:
         15:74:aa:02:f3:ee:72:13:91:46:a9:c3:e7:f6:ad:22:83:72:
         57:f3:e3:c5:6e:b9:6f:cd:4f:a9:6a:44:0f:db:fd:d1:fd:6f:
         00:29:88:72:2c:08:ed:8a:71:09:33:b2:d9:82:94:e5:0f:65:
         71:69:43:ee:72:5b:0c:d5:2f:8c:53:52:46:78:e0:b1:61:4d:
         aa:67:b2:bd:77:d7:e8:51:9b:0a:5e:b3:a5:6f:05:4b:15:36:
         16:b0:26:0b:7f:94:d2:8d:9f:a4:5c:dc:89:74:37:52:44:ff:
         a6:32:b2:d7:21:e3:80:85:6c:46:a8:1b:c0:24:af:a5:c3:e4:
         24:3e:a9:6d:50:ca:d9:cb:95:fd:dd:d0:24:7e:b0:de:99:8d:
         74:d3:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:43:39 2025 by rpki-client