Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
File:                     -HXWOByHjv0r2ImzbF-IybXWwbc.roa (raw, json)
Hash identifier:          qXld1y4pmOgh7/G3L8LhpTa+NwaXsZRhkI9Pu0LUP34=
Subject key identifier:   F8:75:D6:38:1C:87:8E:FD:2B:D8:89:B3:6C:5F:88:C9:B5:D6:C1:B7
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       3D
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
Signing time:             Tue 01 Jul 2025 01:40:05 +0000
ROA not before:           Tue 01 Jul 2025 01:40:05 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9617
IP address blocks:        2400:3800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Jul  1 01:40:05 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F875D6381C878EFD2BD889B36C5F88C9B5D6C1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:1a:1d:4a:e9:15:fe:70:f0:26:a6:04:af:
                    51:b7:18:ba:d1:49:09:53:8c:81:53:bf:0a:91:f1:
                    2f:d2:f1:f8:39:bc:88:ae:7b:99:2e:4f:b9:7e:33:
                    15:56:c0:ad:22:3d:0d:ff:4e:9c:2c:65:63:13:ac:
                    63:44:c2:27:bf:f3:9e:47:2c:e4:18:91:76:56:9f:
                    d3:86:8c:0f:fe:64:c1:7f:5d:90:30:8e:ea:0c:d1:
                    8b:5f:f4:b7:b9:e4:e1:53:74:51:a2:9b:0b:c2:ca:
                    ed:60:bb:19:15:22:03:98:59:81:cb:41:87:3a:e1:
                    d2:96:1f:cb:4d:8f:f5:c5:e6:02:4a:84:4b:a9:30:
                    62:c2:3f:83:e6:c1:4c:47:d6:dd:e1:ea:d6:7d:09:
                    ef:00:54:47:30:a4:cb:42:c5:de:4d:aa:47:e0:27:
                    23:8f:e9:84:7e:30:8b:0c:b6:18:08:00:cd:0d:ef:
                    cc:26:4f:a2:de:bb:6a:6d:d8:63:a2:b1:9e:e0:53:
                    d9:00:fa:7f:29:6a:6a:d3:d3:ce:82:98:94:bb:9b:
                    6f:2e:4a:13:b8:52:1b:72:6e:75:8a:c6:8c:b3:47:
                    15:c4:16:d8:2f:a4:b9:b1:ec:38:81:dc:a7:92:2b:
                    7f:6e:2a:ce:9a:47:90:57:05:9b:c4:dc:52:47:c2:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:D6:38:1C:87:8E:FD:2B:D8:89:B3:6C:5F:88:C9:B5:D6:C1:B7
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/-HXWOByHjv0r2ImzbF-IybXWwbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:4b:73:b9:67:43:32:c0:ec:f3:d3:d8:ab:4e:8b:f0:85:
         c8:61:16:80:1e:28:7f:76:67:58:5d:15:f9:92:d7:24:f6:85:
         9b:07:4a:76:0e:1c:80:89:a8:43:9e:dc:78:80:8e:aa:6e:21:
         99:cd:e1:4b:2f:3c:02:ba:b8:4f:71:f6:7d:25:45:51:7a:de:
         52:b2:37:c7:fe:70:7a:e4:ce:6c:18:e2:c5:7c:6c:80:69:19:
         88:42:74:46:c4:3b:e6:c0:09:91:09:e1:84:25:7e:83:3f:28:
         33:3f:00:b7:c3:70:75:ca:78:a3:f7:27:eb:89:5a:a3:bd:ed:
         35:44:47:c7:a1:e4:de:46:79:7f:ba:a7:e9:71:c5:a2:53:b7:
         95:98:ec:d7:bc:d7:93:37:b3:70:a5:6d:ec:98:6e:cb:d3:7e:
         0b:a5:5d:be:aa:71:bf:0b:a4:37:75:c9:cb:3c:d8:5d:0e:d7:
         b7:a0:b8:d6:4b:9c:0c:3d:bc:31:d2:26:56:1e:9f:10:9c:2b:
         3f:b5:a2:18:fa:b7:71:a2:da:dd:f0:99:c9:db:65:e3:95:b8:
         0f:8c:3f:33:1d:7a:5d:39:9f:36:0c:fe:8b:a5:cb:f7:b5:88:
         24:ae:32:47:11:24:ee:f0:af:96:a3:2f:72:62:43:af:8e:f3:
         9b:3e:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:00:39 2025 by rpki-client