Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/ZVP_SXGJSGyTFQxxGmuuo4vLlaM.roa
File:                     ZVP_SXGJSGyTFQxxGmuuo4vLlaM.roa (raw, json)
Hash identifier:          H9/XlNeoPKGSQY7EliyQ8B763w12pKAAORqSA6Elsvc=
Subject key identifier:   65:53:FF:49:71:89:48:6C:93:15:0C:71:1A:6B:AE:A3:8B:CB:95:A3
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       45
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/ZVP_SXGJSGyTFQxxGmuuo4vLlaM.roa
Signing time:             Tue 10 Jun 2025 10:48:11 +0000
ROA not before:           Tue 10 Jun 2025 10:48:11 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     4721
IP address blocks:        2001:c30:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jun 10 10:48:11 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=6553FF497189486C93150C711A6BAEA38BCB95A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:61:65:40:46:2c:bd:95:e6:51:06:93:09:
                    96:83:e5:c7:44:60:e0:5f:00:b5:15:2f:f4:ff:b2:
                    78:d9:fb:8c:14:50:f3:af:ff:03:af:46:ed:15:d3:
                    d1:3d:36:22:2f:46:8b:ea:fc:da:7a:7d:d3:23:70:
                    07:89:08:b5:f3:3b:d5:d1:3e:02:6c:d3:b7:f2:8c:
                    a3:3c:07:1b:bc:ea:5a:f7:b6:fa:84:3f:7d:46:c8:
                    9f:9f:97:44:55:8e:5d:a2:76:29:73:6a:21:78:a7:
                    bc:76:02:12:5f:e7:38:94:87:f5:8e:8b:f7:4f:dc:
                    49:05:33:17:fb:70:ae:84:70:c1:92:61:de:f2:c0:
                    bc:32:89:3f:3a:0d:4c:1a:20:20:e4:f3:fc:9e:7d:
                    5c:f7:5b:40:9f:7b:42:3c:5a:3b:23:97:93:ac:d6:
                    d9:53:c0:47:0f:46:a8:b5:5f:46:0f:af:c3:6b:ba:
                    f1:15:ef:8d:f3:c6:e6:8b:37:23:ae:c1:29:ae:24:
                    2b:eb:d8:69:8a:01:d1:80:87:cd:05:7b:d3:a3:24:
                    f0:dd:46:af:69:5b:22:b8:7a:f7:26:2a:07:ea:14:
                    6e:de:02:44:b1:e6:46:c9:8d:22:2b:69:97:0f:88:
                    71:23:8d:ba:7e:59:be:f5:81:34:39:e2:b0:87:d7:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:FF:49:71:89:48:6C:93:15:0C:71:1A:6B:AE:A3:8B:CB:95:A3
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/ZVP_SXGJSGyTFQxxGmuuo4vLlaM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:da:3c:b6:c6:e7:1d:51:63:9a:34:df:b6:c4:94:d3:fc:68:
         64:1f:3c:67:55:e7:0c:4f:97:22:51:6f:a8:d6:eb:67:01:9f:
         bc:0d:c3:6d:bd:20:d0:61:a2:de:d6:1b:33:57:5b:b5:3c:c9:
         d6:03:05:5a:6d:44:39:55:cd:fd:3f:44:b6:27:bb:8c:d0:f2:
         49:22:b2:b6:9f:41:14:45:ed:a6:dd:03:a3:5e:69:2d:a4:86:
         31:dd:ad:35:23:a4:3b:f0:b4:c3:a4:06:cf:30:ca:de:3b:69:
         63:9c:99:96:bf:54:fb:06:db:da:09:5f:53:c0:38:b3:82:f8:
         93:23:a8:75:58:bb:8f:1b:0a:db:d3:bd:8d:8a:80:c9:a5:9c:
         00:2f:ef:00:c3:5d:af:e0:dc:10:cf:0d:8b:1d:af:19:e8:07:
         47:2b:1b:27:e1:8b:2f:75:f8:83:e4:dd:99:97:95:96:cb:3e:
         d3:a3:4c:8c:a1:1f:cd:46:88:e6:5e:f6:76:ce:08:66:1f:52:
         4a:09:da:76:4b:7d:e7:8f:df:c2:a8:5b:ca:91:53:3f:e1:bc:
         2a:52:3c:78:ba:12:16:fc:c6:c8:50:97:80:fd:49:bd:a1:b9:
         99:e4:82:e8:bd:4e:c4:15:1c:08:7b:dc:e9:0b:b2:80:2b:75:
         32:1c:09:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 07:00:07 2025 by rpki-client