Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30043/nUZ01P-FSiavB-IjjyqOltdUIoo.roa
File:                     nUZ01P-FSiavB-IjjyqOltdUIoo.roa (raw, json)
Hash identifier:          TtIyq5XQ2UI0dhbfsnj4sPtHXHZf1k7MRDN84f80Fws=
Subject key identifier:   9D:46:74:D4:FF:85:4A:26:AF:07:E2:23:8F:2A:8E:96:D7:54:22:8A
Certificate issuer:       /CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Certificate serial:       3E
Authority key identifier: 7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/nUZ01P-FSiavB-IjjyqOltdUIoo.roa
Signing time:             Tue 01 Jul 2025 01:36:18 +0000
ROA not before:           Tue 01 Jul 2025 01:36:18 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9621
IP address blocks:        2001:d28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
        Validity
            Not Before: Jul  1 01:36:18 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9D4674D4FF854A26AF07E2238F2A8E96D754228A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:d1:56:f9:60:ff:5f:cb:46:08:94:da:77:
                    3c:5a:ce:32:11:70:e8:f8:f7:9a:2a:c8:64:86:7f:
                    f6:ef:dd:b3:70:61:3f:53:0c:4c:a8:4f:26:93:2a:
                    46:4f:36:c5:52:5e:06:0a:4e:dc:88:82:c6:1a:88:
                    25:a5:d6:ca:3f:77:2b:49:b8:4d:13:79:2c:c5:77:
                    21:e8:ca:ca:a7:6a:ae:9b:18:7c:91:2a:ce:dc:e1:
                    cc:76:b4:fa:c3:91:6c:82:ea:a6:fb:1a:b7:41:73:
                    df:5f:42:3a:02:4c:a1:38:3f:72:f2:f0:29:29:70:
                    5f:b7:7d:eb:c4:48:92:2f:95:26:86:12:3e:73:4f:
                    04:ed:d2:b7:5f:16:d2:04:f4:d8:49:c2:ee:0e:92:
                    4e:77:9d:3b:b2:64:4a:44:f8:d7:b3:ed:a8:24:61:
                    e1:59:47:41:fc:e6:ce:2b:be:71:12:28:8b:3f:07:
                    ba:69:be:56:64:06:ae:80:2d:7f:1e:ef:47:ad:af:
                    67:88:28:86:e3:01:27:e4:0e:05:2b:56:7c:93:a3:
                    1f:8e:f0:e6:1b:0b:69:2a:6f:aa:a2:d1:62:76:d1:
                    b7:77:75:94:25:51:a9:76:97:7c:b7:86:ec:04:5d:
                    63:f2:04:e5:1f:3c:f1:ad:7b:c4:bd:22:e7:b6:e8:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:46:74:D4:FF:85:4A:26:AF:07:E2:23:8F:2A:8E:96:D7:54:22:8A
            X509v3 Authority Key Identifier:
                keyid:7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/nUZ01P-FSiavB-IjjyqOltdUIoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:ec:73:af:d8:89:f4:65:68:aa:62:24:79:39:31:04:99:
         e3:68:71:a3:72:26:19:07:07:67:f2:ba:26:35:c4:5e:70:35:
         cf:6e:94:e0:54:e6:2d:86:26:82:18:fc:69:00:07:34:b8:17:
         c5:54:08:3c:7a:d9:ea:20:f6:38:c7:bb:a7:c9:03:fc:66:44:
         77:d0:b0:ba:b7:dd:55:2b:07:96:ce:44:75:26:cc:37:00:55:
         9d:2f:60:4f:18:e4:3b:c9:68:fc:ab:aa:24:38:72:0e:54:43:
         3d:a7:96:09:39:46:ba:b8:dc:67:59:53:96:9e:ff:1c:6d:b4:
         e3:a9:9f:c3:c7:60:3c:34:55:a7:4b:c7:59:02:2e:dd:36:7c:
         a0:b0:e2:d7:f8:d7:30:5c:32:df:16:e5:25:e4:55:ad:15:4c:
         c2:17:07:3d:73:b4:85:d5:dc:b1:59:44:d5:08:e7:67:2f:77:
         3d:48:85:66:dd:cd:9b:24:4e:d0:8d:2f:31:e1:4e:af:49:ea:
         da:e8:20:25:f9:6e:17:49:95:e7:63:65:3d:aa:a7:42:3e:d0:
         18:9f:26:63:73:9b:1e:1a:3a:a5:a6:a9:3f:89:5e:44:73:e2:
         43:29:65:d2:4c:e1:6c:66:20:91:5f:46:d8:a2:3a:5b:38:b8:
         fe:ee:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:08:49 2025 by rpki-client