Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/UwDoRHEAknHbZLR2pF7R6FYkRTU.roa
File:                     UwDoRHEAknHbZLR2pF7R6FYkRTU.roa (raw, json)
Hash identifier:          OcpZPftp4fFb4vpMzTy2Klzl7p+nOYPPgIHq5tZ+daA=
Subject key identifier:   53:00:E8:44:71:00:92:71:DB:64:B4:76:A4:5E:D1:E8:56:24:45:35
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       3E
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/UwDoRHEAknHbZLR2pF7R6FYkRTU.roa
Signing time:             Tue 01 Jul 2025 01:40:06 +0000
ROA not before:           Tue 01 Jul 2025 01:40:06 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9824
IP address blocks:        2400:3800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Jul  1 01:40:06 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=5300E84471009271DB64B476A45ED1E856244535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:21:4f:b1:3f:3c:55:88:33:a2:25:58:0f:
                    c0:65:0c:fe:f2:93:59:9a:47:92:3f:c8:f1:d6:15:
                    27:46:09:75:ff:bb:7b:cf:6f:bf:d1:ba:ce:f9:a9:
                    4c:5e:92:89:cb:a4:80:0f:df:7f:ca:80:9f:cf:b4:
                    b0:e8:0e:9d:ad:76:ac:24:2a:6c:7a:e5:70:e1:77:
                    3b:2e:80:1d:34:7d:f3:c4:94:ac:b6:c2:52:ac:5e:
                    bc:16:90:b1:c8:3c:80:b8:bf:34:c8:02:9e:7c:8e:
                    b8:9a:a7:ac:00:60:ce:2d:f1:98:24:8f:7e:37:4e:
                    f1:8e:ed:78:7b:d4:ea:f5:9a:5c:58:02:c6:58:6b:
                    6f:3e:8d:fa:8b:7d:01:fb:0f:dc:be:cf:32:c8:e6:
                    84:31:94:19:b3:2b:7d:d6:f0:99:2b:11:f0:df:62:
                    fb:a2:1a:e4:12:ff:c2:da:18:c3:92:ba:d4:11:98:
                    c6:ff:36:e0:21:de:08:ba:ac:86:02:49:b2:02:aa:
                    30:12:81:c8:ee:e5:1e:c5:c0:d5:6f:36:57:da:a5:
                    51:18:7e:e0:61:53:6c:cd:75:89:0e:37:03:b0:3c:
                    76:02:eb:22:9b:7a:c7:ab:28:91:f3:b7:b7:95:37:
                    ec:98:38:10:32:47:15:7d:fe:a9:df:05:3f:2c:47:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:E8:44:71:00:92:71:DB:64:B4:76:A4:5E:D1:E8:56:24:45:35
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/UwDoRHEAknHbZLR2pF7R6FYkRTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:46:34:e2:4f:8f:a1:af:d1:99:dc:fa:87:70:83:87:da:
         99:6c:83:b7:10:e3:f1:e2:8c:15:17:af:05:4a:1d:b0:8d:d5:
         63:ca:cb:f1:e3:22:15:c7:33:56:24:d7:88:80:cc:a9:27:ae:
         fe:e2:86:47:9c:30:cb:a4:26:62:b3:85:91:50:84:d8:b6:f3:
         32:16:84:4e:7e:50:80:98:40:0f:cb:f6:07:70:4e:fa:fb:27:
         e3:eb:87:74:75:03:db:ed:28:ae:f3:80:84:3f:09:0e:97:cd:
         f5:bf:b6:a0:ff:8e:ec:b7:15:77:49:4d:6c:f4:b7:ee:57:fe:
         66:6e:aa:64:85:a5:b0:29:d2:76:ee:b5:ee:12:c5:ff:a0:4a:
         b4:a9:e3:60:e6:33:91:37:4a:e8:e7:14:61:34:05:16:f4:e8:
         8c:97:95:cd:20:e2:87:fa:b2:9e:64:83:7c:4a:a5:6b:b6:97:
         88:28:f1:80:b8:35:b2:42:77:30:b5:04:8c:db:b1:23:75:c3:
         df:ff:b7:f8:a6:0b:c4:f6:f9:cc:a2:37:e6:3c:ba:03:4b:83:
         4a:87:42:51:73:b0:9d:9f:60:e5:33:a7:8f:52:8a:d1:ce:00:
         0e:8c:21:c7:80:b3:a6:16:d4:d2:00:3e:16:fb:28:54:f9:61:
         a0:ed:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:12:51 2025 by rpki-client