Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30025/jPOPe4aVgZkh1SkZvOkuxziY15c.roa
File:                     jPOPe4aVgZkh1SkZvOkuxziY15c.roa (raw, json)
Hash identifier:          PHx9526zGf47SNH6IetECQ+eZnCutMAR1jxYQm1vDZ0=
Subject key identifier:   8C:F3:8F:7B:86:95:81:99:21:D5:29:19:BC:E9:2E:C7:38:98:D7:97
Certificate issuer:       /CN=4CCDE4740FCD576D3A8EFBF6A4A3B9CF4661D917
Certificate serial:       1B
Authority key identifier: 4C:CD:E4:74:0F:CD:57:6D:3A:8E:FB:F6:A4:A3:B9:CF:46:61:D9:17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TM3kdA_NV206jvv2pKO5z0Zh2Rc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/jPOPe4aVgZkh1SkZvOkuxziY15c.roa
Signing time:             Tue 01 Jul 2025 01:32:50 +0000
ROA not before:           Tue 01 Jul 2025 01:32:50 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        2001:2c0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/TM3kdA_NV206jvv2pKO5z0Zh2Rc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/TM3kdA_NV206jvv2pKO5z0Zh2Rc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TM3kdA_NV206jvv2pKO5z0Zh2Rc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CCDE4740FCD576D3A8EFBF6A4A3B9CF4661D917
        Validity
            Not Before: Jul  1 01:32:50 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=8CF38F7B8695819921D52919BCE92EC73898D797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:60:3a:a6:f9:0e:d0:26:29:78:07:bb:76:
                    26:09:7f:d4:f9:c6:3d:6f:a9:9b:01:fd:ca:cd:51:
                    59:19:53:fb:64:cc:34:9a:77:01:92:60:7c:f8:c7:
                    7d:e9:bb:cd:9a:57:a7:0a:58:bf:7c:5b:62:0c:12:
                    55:0d:7b:6c:2f:15:a8:24:f2:a2:24:97:41:56:84:
                    91:5a:52:a4:4d:81:11:4d:ef:f7:26:af:5e:7b:09:
                    56:5d:91:e7:72:c9:eb:3d:cb:9a:9e:16:5d:c7:ad:
                    65:5b:06:c3:42:96:c3:38:96:44:7e:7b:a6:33:d4:
                    b8:06:4c:76:b1:4d:e4:af:02:f6:1b:e4:7a:82:ee:
                    fa:55:47:0d:a3:1a:6c:72:8d:9a:be:e8:64:69:73:
                    a8:55:05:1c:a6:e7:c5:c7:a3:95:1f:a8:dd:32:a6:
                    54:17:29:02:53:be:50:f7:a3:be:a2:8d:13:c5:e2:
                    24:94:8f:d6:17:b5:9a:d7:f9:cd:24:83:40:39:88:
                    a6:02:d9:d3:89:ba:39:d5:bb:98:24:7f:34:84:de:
                    cb:5f:c1:e9:b4:ed:37:ea:46:33:ff:26:b0:92:e0:
                    b7:48:95:f4:c9:6b:51:41:97:62:47:0d:63:53:b0:
                    32:45:88:4b:cc:02:e9:2a:e9:43:7e:5b:31:56:a1:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:8F:7B:86:95:81:99:21:D5:29:19:BC:E9:2E:C7:38:98:D7:97
            X509v3 Authority Key Identifier:
                keyid:4C:CD:E4:74:0F:CD:57:6D:3A:8E:FB:F6:A4:A3:B9:CF:46:61:D9:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/TM3kdA_NV206jvv2pKO5z0Zh2Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TM3kdA_NV206jvv2pKO5z0Zh2Rc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30025/jPOPe4aVgZkh1SkZvOkuxziY15c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:88:be:2a:00:ae:ea:b3:01:a1:c2:b6:26:46:9b:0e:a5:
         90:c3:e0:72:e1:78:35:80:76:ff:09:f4:ed:d0:f5:46:fd:12:
         bb:20:c9:fa:2c:61:9c:f6:f5:03:a3:c8:4b:2a:fc:f1:11:fc:
         4f:c0:70:5d:47:86:23:a2:02:00:92:86:31:45:89:dc:64:99:
         90:16:52:ce:8e:5a:6e:a2:a4:7d:28:6a:21:0c:dc:01:4c:16:
         84:76:89:7b:59:35:81:c2:4f:22:96:ca:76:0d:35:ad:2b:4b:
         c3:7c:e3:69:4a:73:ea:25:d6:93:ef:14:ed:d1:4c:c3:59:71:
         ec:e2:ec:76:ea:f7:dd:ea:78:79:b0:c2:72:c2:22:c0:4b:60:
         3a:e9:e4:3b:b3:7f:ff:50:88:02:86:2e:1e:98:79:2e:e3:dd:
         6e:6a:be:f0:59:f9:c7:1d:14:ef:f3:fe:8d:fe:fe:0c:c7:b3:
         39:29:b6:ce:4f:1e:aa:d7:fc:6c:38:98:a2:4c:17:82:81:81:
         11:ea:12:53:d1:c8:3b:de:e9:34:d0:ce:f6:34:4c:e5:d4:da:
         5f:e9:f4:0d:61:ab:f5:c4:c5:da:1e:54:76:e9:24:77:38:a5:
         73:3a:41:f2:c5:4d:c3:9c:22:91:49:4b:85:f7:ea:ee:b1:d4:
         a7:ec:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:27:23 2025 by rpki-client