Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/FSZL6PFcjesHslEc8pxNt_chvJ4.roa
File:                     FSZL6PFcjesHslEc8pxNt_chvJ4.roa (raw, json)
Hash identifier:          A6vgvy+DCYowTeydlJ3/dNwQr+IMaDC7SJte45wyXSo=
Subject key identifier:   15:26:4B:E8:F1:5C:8D:EB:07:B2:51:1C:F2:9C:4D:B7:F7:21:BC:9E
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       1A
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/FSZL6PFcjesHslEc8pxNt_chvJ4.roa
Signing time:             Thu 01 May 2025 01:30:13 +0000
ROA not before:           Thu 01 May 2025 01:30:13 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     18281
IP address blocks:        2405:7000:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: May  1 01:30:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=15264BE8F15C8DEB07B2511CF29C4DB7F721BC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:31:44:72:1f:21:02:a4:71:33:77:28:07:
                    94:71:cc:ed:78:e1:c0:59:53:66:24:fa:46:fd:32:
                    c2:f8:87:45:d6:c5:98:7e:a7:4f:69:d5:a2:72:69:
                    0c:51:14:b7:48:20:ee:a9:dd:60:3a:fa:9e:fe:e4:
                    18:ce:66:24:5a:ed:5e:dd:71:d3:78:69:41:66:f9:
                    46:34:07:d2:27:1b:fa:50:8c:7a:8f:43:1c:0b:3f:
                    9f:9f:9a:36:ef:d2:30:a0:fa:d8:c4:62:e8:0a:7b:
                    7e:99:12:59:b5:58:0b:b8:28:9c:b3:55:2c:db:1b:
                    53:20:74:b7:27:6a:dc:9c:e3:70:2a:78:c7:b8:c6:
                    3c:40:13:59:1e:d3:d1:70:a3:ed:a3:5b:b1:2a:99:
                    b8:51:da:d2:64:86:0f:92:ea:0a:a6:87:74:83:22:
                    a0:39:ee:42:23:65:08:00:85:f2:c6:a9:ec:1d:b0:
                    8a:43:c0:17:5d:23:01:fb:2f:40:8e:c7:f9:30:55:
                    94:6f:97:c8:42:56:50:ca:67:50:a5:2c:0e:c9:6f:
                    aa:73:ba:55:ad:88:34:14:ee:4f:37:73:51:09:a6:
                    a5:bd:7b:1c:b2:59:8b:c1:bc:88:33:b4:14:06:16:
                    02:36:78:31:e4:5f:02:33:99:44:c2:54:df:26:fd:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:4B:E8:F1:5C:8D:EB:07:B2:51:1C:F2:9C:4D:B7:F7:21:BC:9E
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/FSZL6PFcjesHslEc8pxNt_chvJ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:88:99:14:8f:83:53:6e:df:a4:b7:dd:77:1e:d6:f9:e0:
         c6:fa:3f:fd:62:9d:01:41:bb:9f:dc:ed:1d:8f:e4:99:e4:56:
         55:35:14:f3:c9:22:6a:70:34:10:76:6c:ed:a0:7e:56:fd:6d:
         6a:cd:88:43:27:8f:c5:40:85:c8:16:76:c2:01:e0:cd:a3:4c:
         9f:a9:26:dc:d9:bb:94:eb:cf:6d:3e:c4:e4:d1:6b:c5:0c:9b:
         82:8d:d8:7f:20:57:84:f1:ba:41:a4:8e:5d:d6:df:30:dd:f2:
         b7:df:df:62:5d:f7:9e:7d:ad:f5:44:15:29:a8:71:cc:3b:ac:
         84:bf:14:59:7b:f2:9b:a4:83:ab:04:2a:e3:38:f5:2b:8e:31:
         9f:61:80:4a:46:42:6a:d8:4e:93:99:cb:dd:5f:67:d1:18:2c:
         bf:7e:5a:bd:29:f7:6f:2f:9a:12:12:7b:7f:bf:85:27:f7:aa:
         36:da:37:e1:b1:e5:b8:c0:b7:5d:6d:1e:09:e9:52:12:26:b3:
         08:98:2e:9d:02:64:29:34:06:34:1c:fc:6a:c8:1c:6b:11:b2:
         f8:03:7c:7d:c3:46:0a:34:6e:40:0c:96:c5:17:8e:df:19:92:
         fa:e1:81:81:2c:e9:7c:23:c3:05:32:1b:18:52:00:ba:f0:93:
         9d:8a:9e:6f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzA1
MjFBNUY3OEYzODA5QTRDNEYzNENCMzJEMEE2OTREODcxNTQ0MB4XDTI1MDUwMTAx
MzAxM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTUyNjRCRThGMTVDOERF
QjA3QjI1MTFDRjI5QzREQjdGNzIxQkM5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMibMURyHyECpHEzdygHlHHM7XjhwFlTZiT6Rv0ywviHRdbFmH6n
T2nVonJpDFEUt0gg7qndYDr6nv7kGM5mJFrtXt1x03hpQWb5RjQH0icb+lCMeo9D
HAs/n5+aNu/SMKD62MRi6Ap7fpkSWbVYC7gonLNVLNsbUyB0tydq3JzjcCp4x7jG
PEATWR7T0XCj7aNbsSqZuFHa0mSGD5LqCqaHdIMioDnuQiNlCACF8sap7B2wikPA
F10jAfsvQI7H+TBVlG+XyEJWUMpnUKUsDslvqnO6Va2INBTuTzdzUQmmpb17HLJZ
i8G8iDO0FAYWAjZ4MeRfAjOZRMJU3yb9h9MCAwEAAaOCAiowggImMB0GA1UdDgQW
BBQVJkvo8VyN6weyURzynE239yG8njAfBgNVHSMEGDAWgBRTBSGl9484CaTE80yz
LQppTYcVRDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwODUvVXdVaHBmZVBPQW1reFBOTXN5MEthVTJIRlVRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVXdVaHBmZVBPQW1reFBOTXN5MEth
VTJIRlVRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDg1L0ZTWkw2UEZjamVzSHNsRWM4cHhOdF9jaHZKNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBXAALDANBgkqhkiG9w0BAQsFAAOCAQEAermImRSPg1Nu36S33Xce
1vngxvo//WKdAUG7n9ztHY/kmeRWVTUU88kianA0EHZs7aB+Vv1tas2IQyePxUCF
yBZ2wgHgzaNMn6km3Nm7lOvPbT7E5NFrxQybgo3YfyBXhPG6QaSOXdbfMN3yt9/f
Yl33nn2t9UQVKahxzDushL8UWXvym6SDqwQq4zj1K44xn2GASkZCathOk5nL3V9n
0Rgsv35avSn3by+aEhJ7f7+FJ/eqNto34bHluMC3XW0eCelSEiazCJgunQJkKTQG
NBz8asgcaxGy+AN8fcNGCjRuQAyWxReO3xmS+uGBgSzpfCPDBTIbGFIAuvCTnYqe
bw==
-----END CERTIFICATE-----
Generated at Sun May 18 17:38:31 2025 by rpki-client