Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/LvCluQR_c3qFmMwyE6lCwFyr1TA.roa
File:                     LvCluQR_c3qFmMwyE6lCwFyr1TA.roa (raw, json)
Hash identifier:          JkLp0QDmQpqFN6gKDImr600vd1UdSQDvvFdh4XAHy14=
Subject key identifier:   2E:F0:A5:B9:04:7F:73:7A:85:98:CC:32:13:A9:42:C0:5C:AB:D5:30
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       48
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/LvCluQR_c3qFmMwyE6lCwFyr1TA.roa
Signing time:             Tue 01 Jul 2025 01:40:09 +0000
ROA not before:           Tue 01 Jul 2025 01:40:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     4721
IP address blocks:        2001:c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jul  1 01:40:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=2EF0A5B9047F737A8598CC3213A942C05CABD530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:05:62:f1:85:88:67:3c:04:e6:9f:e3:8f:
                    ee:6f:dd:3d:53:fe:1d:5e:b4:16:42:8e:47:75:c6:
                    c3:1a:17:fd:22:c4:08:64:0e:a7:d0:61:0e:80:7c:
                    2b:7f:63:c7:07:dc:89:84:f1:40:7b:14:e3:e1:c2:
                    47:33:69:ec:32:1b:06:6f:00:fe:32:5f:2c:90:ab:
                    21:4e:fe:3d:f2:39:b2:5f:02:bc:6b:0c:cd:ca:5e:
                    69:45:06:61:f5:11:4a:e9:de:34:8f:78:cf:a2:b4:
                    8a:e1:8f:be:8e:f2:11:c6:c1:05:bb:2e:2d:05:e5:
                    c0:29:99:34:a4:be:9a:8e:d4:de:a3:36:1d:b0:0c:
                    2b:0a:81:74:af:2e:9f:1f:b9:57:76:df:32:db:ec:
                    07:e0:35:c4:a2:e7:ce:dd:ef:31:56:3e:ea:7e:a3:
                    6a:bd:1e:2d:61:50:c0:37:35:e5:9b:69:ae:e9:24:
                    e4:76:21:b0:bb:bc:2b:55:6a:2e:37:f8:2a:41:37:
                    0d:82:35:b9:89:f6:44:f5:0c:df:79:41:c7:77:b4:
                    5d:d4:9b:1f:73:67:2d:2e:cf:2d:ea:dc:05:94:68:
                    18:f3:7e:df:ff:7d:19:85:de:10:9d:88:9d:07:31:
                    cd:05:4f:bf:61:8f:27:52:6b:9f:a6:f0:b1:62:f7:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F0:A5:B9:04:7F:73:7A:85:98:CC:32:13:A9:42:C0:5C:AB:D5:30
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/LvCluQR_c3qFmMwyE6lCwFyr1TA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:78:d6:64:3c:18:71:23:f5:84:83:5c:61:0a:81:18:f2:
         f8:11:7f:6f:dd:0d:da:53:99:28:e1:d6:7a:a4:37:65:70:41:
         92:bb:23:1c:a5:c2:84:cd:0c:55:ae:bc:d2:51:77:70:d4:01:
         0d:a9:80:c1:7e:d5:de:c2:a3:4b:bf:6d:6c:50:96:64:3a:d8:
         1a:dc:eb:e1:dc:de:1b:80:d2:40:a0:19:09:21:27:3e:23:c7:
         59:1e:1b:98:ba:f1:ff:d2:e2:c3:7b:0f:c8:0e:f7:cd:ab:44:
         12:c6:18:5c:8b:88:03:b6:9e:64:15:60:83:04:e7:17:eb:5f:
         76:35:22:c1:cf:b9:51:51:3a:cc:40:06:05:3a:39:2d:48:c4:
         79:e8:dd:c6:cb:ca:68:f9:0b:a6:64:7c:1b:25:20:f8:23:a9:
         76:cd:5b:fc:31:09:ef:28:42:ed:a2:c5:70:ff:a8:19:3c:8f:
         66:cc:0d:4f:b5:9a:d9:dd:9c:cf:bc:bd:4e:cd:2e:f4:dd:e1:
         3b:af:89:2b:75:a3:62:3a:44:4d:1d:c9:9a:5f:a6:73:e7:d0:
         40:9d:f2:b4:78:a9:f0:6d:e8:90:fd:a3:b9:10:01:3f:14:61:
         83:1d:1a:13:ca:eb:fa:2d:d7:cc:a6:d3:72:21:49:f6:06:88:
         70:28:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:07:41 2025 by rpki-client