Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/YWd22z7LkVnQ86yvKuf6YaTPKaY.roa
File:                     YWd22z7LkVnQ86yvKuf6YaTPKaY.roa (raw, json)
Hash identifier:          MqEa+DXNOZq+Xq84zBDHoPCWVp4C0Z78MnsOFgSiseQ=
Subject key identifier:   61:67:76:DB:3E:CB:91:59:D0:F3:AC:AF:2A:E7:FA:61:A4:CF:29:A6
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       77
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/YWd22z7LkVnQ86yvKuf6YaTPKaY.roa
Signing time:             Tue 01 Jul 2025 01:34:20 +0000
ROA not before:           Tue 01 Jul 2025 01:34:20 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     38644
IP address blocks:        2001:3a0:f006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Jul  1 01:34:20 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=616776DB3ECB9159D0F3ACAF2AE7FA61A4CF29A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:45:99:b9:f3:f8:5b:ad:3c:94:f0:6b:be:
                    b7:32:a0:c6:71:72:b9:69:6c:45:00:54:6d:17:de:
                    0e:cf:d5:b8:2d:aa:67:50:18:5a:2c:b5:e4:1b:e8:
                    9f:57:71:e0:c6:15:73:e1:2b:34:10:8b:18:25:a9:
                    82:1a:b6:e6:07:ef:8d:78:a9:65:2e:73:56:bc:5d:
                    05:00:0a:13:80:73:65:7d:45:e7:7b:79:ad:72:e6:
                    72:d0:3e:7b:9d:af:d6:02:fd:6c:d0:94:1e:fd:fd:
                    15:f6:d9:52:20:47:7f:df:f8:08:3a:fa:0b:eb:2e:
                    f4:da:d6:f6:20:fd:26:5d:29:d4:f2:59:fc:c8:4d:
                    60:54:61:27:8b:0f:fc:e3:69:53:00:9c:16:8b:fc:
                    84:65:0e:6b:45:b6:36:65:48:02:86:de:eb:2d:b3:
                    d5:1c:29:f4:f8:39:d1:a7:15:e4:49:44:af:a9:78:
                    1a:94:fd:03:af:5b:ab:65:18:57:af:3f:fe:86:7c:
                    87:24:75:72:64:0d:f5:43:7e:80:e1:c5:97:60:04:
                    27:df:da:c8:c1:c8:f1:7a:c7:64:18:19:0c:52:1e:
                    de:16:68:57:7d:3b:b1:21:0e:a1:a3:c4:d9:d9:6f:
                    4c:bc:a8:78:2b:87:7e:f6:f6:72:f1:e2:09:fb:5f:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:67:76:DB:3E:CB:91:59:D0:F3:AC:AF:2A:E7:FA:61:A4:CF:29:A6
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/YWd22z7LkVnQ86yvKuf6YaTPKaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0:f006::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:10:0c:26:43:d8:39:04:ea:b8:d5:3f:94:82:12:de:c3:
         0c:4c:f7:1f:f1:cf:f9:05:da:24:83:a9:ba:c8:16:f8:a9:0a:
         d4:2c:b1:4f:32:b0:66:9e:44:39:83:1c:77:5c:87:ba:e6:59:
         65:96:d6:13:d3:9f:ab:ee:19:3f:23:97:f2:ec:76:72:4a:81:
         df:21:76:cb:60:74:96:d3:b5:a2:80:67:48:21:ee:12:39:8c:
         58:94:5e:ee:37:42:12:46:8d:42:75:ba:3d:29:33:4b:ee:7d:
         41:74:3d:c5:9a:b9:e6:f7:c9:2b:5d:cb:5d:80:c7:d0:d7:70:
         13:b6:c6:c4:49:19:eb:cd:d6:e8:a3:4d:28:fd:1f:b9:a8:40:
         90:30:37:70:38:8f:af:a2:e4:7f:51:ef:d4:69:44:26:df:ea:
         fc:5d:03:c8:a7:8e:74:b2:57:ee:68:44:b8:d3:7e:4a:ef:c5:
         4a:72:70:c1:da:2f:f8:be:f4:0f:c3:5d:3e:b5:75:f1:46:16:
         1d:1c:bd:f2:ca:96:a2:43:36:85:cc:92:de:e3:5a:48:34:2e:
         92:95:eb:cd:d8:52:e3:89:ba:bc:37:07:09:18:4c:bf:1d:1a:
         bf:e9:4c:10:d8:9c:a6:63:46:87:3d:d4:f0:67:40:c0:ce:ee:
         ed:bd:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:32:25 2025 by rpki-client