Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/yRb03NeYT8J1Y_ntHUr-ODZMspA.roa
File:                     yRb03NeYT8J1Y_ntHUr-ODZMspA.roa (raw, json)
Hash identifier:          N3v2Dt99BNAkxeE66fbdc7Ov5Ih032f/nqHVCG1XCCQ=
Subject key identifier:   C9:16:F4:DC:D7:98:4F:C2:75:63:F9:ED:1D:4A:FE:38:36:4C:B2:90
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       49
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/yRb03NeYT8J1Y_ntHUr-ODZMspA.roa
Signing time:             Tue 01 Jul 2025 01:40:10 +0000
ROA not before:           Tue 01 Jul 2025 01:40:10 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        2001:c30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jul  1 01:40:10 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C916F4DCD7984FC27563F9ED1D4AFE38364CB290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:db:30:02:59:92:83:0b:2c:2c:db:8b:d5:
                    2d:36:7b:21:89:27:69:69:74:ce:2f:90:73:49:df:
                    df:5b:33:76:22:65:e7:62:ba:22:a6:8d:66:d7:63:
                    91:f6:fe:ac:a4:a2:0f:ab:7a:2b:dd:4b:9c:66:58:
                    d5:cf:d9:30:ca:98:2f:53:20:48:c9:98:fd:07:16:
                    6d:b3:e7:75:ee:80:67:ec:7d:f2:7b:dd:9c:a4:a0:
                    10:95:8d:8a:2f:f5:e0:9c:b3:70:75:a0:17:67:70:
                    1a:4f:f4:f8:9e:cd:87:33:72:11:c6:ec:66:de:1c:
                    38:f0:ec:dd:48:2f:07:10:cf:49:7d:27:22:1c:a9:
                    92:bd:1e:39:aa:dd:b3:40:53:b4:ab:51:7e:ca:ed:
                    0a:81:bc:d2:52:cc:1d:db:da:ce:4a:ec:7e:4e:c8:
                    ba:91:61:fa:93:70:78:ed:13:31:1b:47:c2:c3:99:
                    a4:f0:f4:61:28:8e:3b:c1:3d:37:69:9c:d4:c0:cc:
                    f3:56:95:c8:55:d1:19:d9:51:73:be:ed:fd:83:2d:
                    02:65:b9:01:70:a9:c5:9a:be:f8:26:ce:91:bc:bf:
                    7d:76:fe:98:0b:cf:b5:8a:75:03:d7:7e:73:ed:d1:
                    11:23:81:8c:a9:e9:cb:b9:b3:2e:88:e9:25:49:2e:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:F4:DC:D7:98:4F:C2:75:63:F9:ED:1D:4A:FE:38:36:4C:B2:90
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/yRb03NeYT8J1Y_ntHUr-ODZMspA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:f7:1f:11:30:46:13:ea:a2:a3:68:7c:9b:a0:ca:2e:d0:
         1f:21:76:67:fa:ea:05:ad:c2:cf:cd:fd:69:51:f3:b5:21:8d:
         64:65:a3:8c:1b:5d:17:d3:70:36:28:70:a7:07:21:83:d8:29:
         b4:fe:56:ef:80:94:7f:6c:22:b2:be:80:80:fb:1e:df:a3:ca:
         5d:7b:af:eb:4f:e3:f7:37:ca:e3:f1:ab:a4:2a:9d:63:08:61:
         95:5e:a2:ec:71:89:45:5c:8d:ff:0f:23:c4:2e:38:83:0e:66:
         0b:1e:bd:ce:54:b5:0a:2e:ae:e1:a1:4f:e1:d7:dd:81:5a:86:
         fe:2e:5a:9e:05:33:b0:92:5d:5b:75:bc:07:ac:87:0c:4c:6e:
         98:53:b5:96:60:2b:34:6a:55:1a:9b:d0:45:03:0a:75:80:7b:
         48:8e:22:32:c5:a7:a9:c7:b6:ef:45:b3:b4:70:e6:83:65:71:
         0e:4c:ec:d7:05:68:f7:c2:f9:0e:39:9b:7c:ee:10:24:45:39:
         c2:30:98:13:bc:69:fe:83:da:b2:45:4d:3b:23:ca:d0:be:a8:
         91:a1:15:f9:a9:2d:ef:58:96:f8:d6:9e:e7:1c:77:38:f3:2f:
         df:3e:fc:1a:43:0d:4d:7c:97:4a:a2:a8:29:0a:e3:77:aa:ed:
         2d:70:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:31:13 2025 by rpki-client