Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/K23Nnm3UwT1JxzgazbyHG_DrV5Y.roa
File:                     K23Nnm3UwT1JxzgazbyHG_DrV5Y.roa (raw, json)
Hash identifier:          SnPxYW5ohZFPqwbWBHtFrU2SJPOxsfJhZAEkgqNoSAQ=
Subject key identifier:   2B:6D:CD:9E:6D:D4:C1:3D:49:C7:38:1A:CD:BC:87:1B:F0:EB:57:96
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       19
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/K23Nnm3UwT1JxzgazbyHG_DrV5Y.roa
Signing time:             Thu 01 May 2025 01:30:12 +0000
ROA not before:           Thu 01 May 2025 01:30:12 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     59108
IP address blocks:        2405:7000:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 14:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: May  1 01:30:12 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2B6DCD9E6DD4C13D49C7381ACDBC871BF0EB5796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:fe:85:a3:e5:a4:c6:24:68:d7:3a:13:a9:
                    62:af:64:05:f5:28:d6:f5:d3:4d:5c:bd:49:7c:28:
                    89:7b:80:c9:48:a9:bd:73:08:51:09:3c:7b:1c:3f:
                    cf:ed:43:fe:e6:e7:be:d0:17:7e:2b:40:63:42:4a:
                    e9:d3:24:72:d9:4d:1c:5e:85:68:30:10:bc:ff:6c:
                    d9:27:76:99:74:fb:94:af:55:48:6f:9f:05:8e:1c:
                    6e:89:77:b4:d5:0c:36:dd:0c:49:99:c5:d6:ed:07:
                    3c:66:4c:b9:55:f2:ee:cb:25:2f:b6:ee:9b:3f:8d:
                    1c:fd:94:81:94:9f:61:d3:0a:af:a9:bc:1c:52:1b:
                    fa:7b:4a:ba:cf:05:dd:87:df:e0:4d:e1:ae:c6:f8:
                    52:57:f1:c2:e6:4f:1b:29:aa:0c:7a:5f:42:fd:5a:
                    32:10:7f:a1:01:4a:40:f3:e1:cf:15:b0:5c:68:29:
                    0d:bd:f7:d3:fa:db:5f:bf:23:c9:bf:88:e3:bd:c8:
                    27:7f:e0:13:32:91:13:3d:8d:9b:72:46:cc:d9:cf:
                    4c:b3:c5:0f:f5:32:82:b0:ce:83:4b:3c:9e:d1:a6:
                    25:6c:a0:3d:80:59:92:ba:c8:b5:08:b6:5e:de:9c:
                    e7:6c:4d:c4:51:1c:5a:e6:21:f5:0e:de:e2:1b:09:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6D:CD:9E:6D:D4:C1:3D:49:C7:38:1A:CD:BC:87:1B:F0:EB:57:96
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/K23Nnm3UwT1JxzgazbyHG_DrV5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:66:9b:de:dd:40:66:ac:72:ae:f0:b9:f0:0c:e7:7f:f9:
         7d:7f:ed:97:e5:da:96:13:9a:b0:c9:8d:44:2b:76:c2:70:37:
         45:cc:32:d8:c3:08:a7:34:ef:e3:f8:3c:61:98:35:41:e5:8a:
         39:28:cf:9c:b0:af:c5:38:e1:a6:29:f8:83:42:03:32:da:be:
         87:58:95:2f:c9:96:d4:b5:3e:5e:a4:da:56:73:b8:28:34:38:
         b3:4d:f4:e2:44:ca:28:86:7d:ff:c1:98:86:65:8f:9f:ac:e3:
         17:41:d6:8d:aa:9e:e7:b7:b6:4f:1b:b3:97:36:2d:15:34:21:
         e3:62:b7:a2:a7:cb:ac:d1:31:37:74:65:c9:6b:2d:82:30:5c:
         6e:23:e3:de:98:86:3a:71:4b:ae:43:ae:7d:93:5c:53:45:a4:
         e5:f1:3c:72:f7:88:b6:b1:a9:f3:1d:da:e3:e9:5c:c4:8b:11:
         ee:03:33:00:8a:84:cf:8a:6c:a7:61:70:b8:7d:60:1f:79:d9:
         d6:4a:94:85:ed:5d:af:db:92:46:c3:83:47:b2:fd:aa:e8:55:
         bf:a5:91:e0:f0:0d:75:e8:08:a9:76:85:0c:77:b8:b9:3f:f9:
         93:f0:f1:e8:71:36:76:e0:3d:b6:ba:91:d0:a1:22:b2:2d:69:
         ed:e2:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 16:29:05 2025 by rpki-client