Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/ttRxN9kp1fDbDW91ILCSaBahZ18.roa
File:                     ttRxN9kp1fDbDW91ILCSaBahZ18.roa (raw, json)
Hash identifier:          YEfruXdtLY2JeKiBjivqTfeM5Xu6YIV6hT1rInSV17g=
Subject key identifier:   B6:D4:71:37:D9:29:D5:F0:DB:0D:6F:75:20:B0:92:68:16:A1:67:5F
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       4C
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/ttRxN9kp1fDbDW91ILCSaBahZ18.roa
Signing time:             Thu 01 May 2025 01:29:22 +0000
ROA not before:           Thu 01 May 2025 01:29:22 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        2404:7a80::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: May  1 01:29:22 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B6D47137D929D5F0DB0D6F7520B0926816A1675F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:ce:bd:2a:4e:89:2f:af:dc:ca:e4:98:47:
                    ba:4b:6a:0f:aa:3c:9c:89:d0:76:f9:79:0d:c3:77:
                    28:5c:ab:fc:52:78:00:f9:fe:2e:d5:7b:2d:78:19:
                    49:77:d9:d7:14:fd:38:54:48:56:2d:cf:ce:4c:18:
                    94:ff:61:5a:c5:3f:c7:86:37:43:81:0a:53:08:2c:
                    cc:65:5e:a9:d9:6c:5e:5e:5b:1d:27:7c:69:b4:ac:
                    fb:0a:b8:97:84:9c:0c:6e:c8:ec:52:ab:45:41:db:
                    4f:f4:47:1a:28:0a:b0:03:3d:ff:d3:34:a5:05:cd:
                    49:c8:f6:f3:e4:fd:58:fb:04:86:b5:57:b2:2c:90:
                    ea:3f:f2:e9:6f:2d:aa:c2:e3:e7:b9:80:da:00:2e:
                    b0:88:ac:85:b8:04:8f:e4:39:2b:89:ed:6a:48:4b:
                    7a:e2:62:85:d9:62:9e:32:cb:5b:22:f9:a2:53:cf:
                    1d:4e:3b:82:20:df:d5:5b:a5:3e:c7:3b:4a:8a:52:
                    2b:13:80:06:b1:4e:10:0f:92:9a:4a:28:56:f3:56:
                    20:59:c0:d3:e5:df:7c:94:bc:52:6a:a8:22:a2:a8:
                    ae:da:a7:7d:3e:bd:a0:7b:0e:42:05:1a:6d:cf:ba:
                    8e:47:4a:86:09:38:40:57:33:32:ba:53:df:41:cc:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:71:37:D9:29:D5:F0:DB:0D:6F:75:20:B0:92:68:16:A1:67:5F
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/ttRxN9kp1fDbDW91ILCSaBahZ18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:16:53:0b:ca:dc:e9:f1:a2:34:ef:b6:62:92:77:2f:8d:
         14:09:3e:ff:5b:11:48:49:62:84:fe:6e:7c:17:79:2a:63:0c:
         b7:d2:1d:8b:4e:c2:a2:e0:41:85:7f:e1:18:87:fc:04:0f:4d:
         a3:45:66:32:ee:8e:76:b5:83:7c:a0:92:e6:e6:3a:32:3c:c8:
         8a:5c:08:9a:14:9e:38:03:f9:e9:68:a8:11:67:44:41:d3:97:
         c0:b0:e1:fd:d2:41:eb:0d:90:e9:e2:04:a6:8c:f7:e3:4b:d2:
         83:27:9e:bd:22:a4:a7:04:a0:db:08:f7:f5:07:f3:c9:12:6f:
         8a:63:f7:3b:c3:e0:46:48:57:06:81:88:10:a4:5b:c7:2d:83:
         0d:cb:42:4d:3b:0c:a9:b7:d6:b2:7d:c6:88:d6:12:bc:dc:ff:
         ed:b4:2c:0b:d0:8f:68:27:10:06:01:de:47:88:a2:b0:1f:2c:
         35:0a:39:c9:6f:1e:ed:c1:10:13:a8:18:0a:4a:5c:ea:b2:a9:
         c0:14:5d:bd:13:1c:f1:be:2c:d6:ad:2b:4c:45:17:c3:71:f9:
         73:e3:b9:07:3d:77:01:98:d1:30:a0:67:77:0f:04:07:c3:98:
         6d:5b:27:7a:11:c7:9b:60:00:a0:10:a7:84:92:db:cf:5c:4f:
         6a:c3:f6:a3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRUE1
RDgyMTU2NThFNjQ0MzEyREE0NDA1NUExQTE2Qzk1MzI4RDhCMB4XDTI1MDUwMTAx
MjkyMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQjZENDcxMzdEOTI5RDVG
MERCMEQ2Rjc1MjBCMDkyNjgxNkExNjc1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvAzr0qTokvr9zK5JhHuktqD6o8nInQdvl5DcN3KFyr/FJ4APn+
LtV7LXgZSXfZ1xT9OFRIVi3PzkwYlP9hWsU/x4Y3Q4EKUwgszGVeqdlsXl5bHSd8
abSs+wq4l4ScDG7I7FKrRUHbT/RHGigKsAM9/9M0pQXNScj28+T9WPsEhrVXsiyQ
6j/y6W8tqsLj57mA2gAusIishbgEj+Q5K4ntakhLeuJihdlinjLLWyL5olPPHU47
giDf1VulPsc7SopSKxOABrFOEA+SmkooVvNWIFnA0+XffJS8UmqoIqKortqnfT69
oHsOQgUabc+6jkdKhgk4QFczMrpT30HMyysCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBS21HE32SnV8NsNb3UgsJJoFqFnXzAfBgNVHSMEGDAWgBTupdghVljmRDEtpEBV
oaFslTKNizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTUvN3FYWUlWWlk1a1F4TGFSQVZhR2hiSlV5allzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN3FYWUlWWlk1a1F4TGFSQVZhR2hi
SlV5allzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDE1L3R0UnhOOWtwMWZEYkRXOTFJTENTYUJhaFoxOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQMkBHqAMA0GCSqGSIb3DQEBCwUAA4IBAQBj6BZTC8rc6fGiNO+2YpJ3
L40UCT7/WxFISWKE/m58F3kqYwy30h2LTsKi4EGFf+EYh/wED02jRWYy7o52tYN8
oJLm5joyPMiKXAiaFJ44A/npaKgRZ0RB05fAsOH90kHrDZDp4gSmjPfjS9KDJ569
IqSnBKDbCPf1B/PJEm+KY/c7w+BGSFcGgYgQpFvHLYMNy0JNOwypt9ayfcaI1hK8
3P/ttCwL0I9oJxAGAd5HiKKwHyw1CjnJbx7twRATqBgKSlzqsqnAFF29ExzxvizW
rStMRRfDcflz47kHPXcBmNEwoGd3DwQHw5htWyd6EcebYACgEKeEktvPXE9qw/aj
-----END CERTIFICATE-----
Generated at Sat May 17 12:10:18 2025 by rpki-client