Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
File:                     vjVbwXy9JIg8HRIYR4mrThPKHCM.roa (raw, json)
Hash identifier:          Y1fn9LhQerhOzDxeenujpFc9xIE/rJ38gWF5ZdMOSII=
Subject key identifier:   BE:35:5B:C1:7C:BD:24:88:3C:1D:12:18:47:89:AB:4E:13:CA:1C:23
Certificate issuer:       /CN=4C59DFB8820120EE459B07034008992439D4E7B3
Certificate serial:       3C
Authority key identifier: 4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
Signing time:             Tue 01 Jul 2025 01:36:19 +0000
ROA not before:           Tue 01 Jul 2025 01:36:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17675
IP address blocks:        2405:e800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C59DFB8820120EE459B07034008992439D4E7B3
        Validity
            Not Before: Jul  1 01:36:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=BE355BC17CBD24883C1D12184789AB4E13CA1C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:fe:00:cd:30:f3:22:91:8d:b6:c2:ca:66:
                    63:81:51:58:90:1a:c9:55:7a:6e:66:af:30:18:af:
                    70:c6:8d:57:ea:f6:e0:11:d9:4e:ab:2c:0e:5d:37:
                    8e:9c:70:6f:7e:0a:ce:26:1b:45:92:26:13:33:f4:
                    4c:18:81:d5:d2:8f:77:af:21:8a:e7:43:9c:4b:82:
                    a5:1f:eb:4a:a8:4d:39:80:99:4c:e6:23:6e:b2:4e:
                    fd:28:9e:a8:22:c0:5b:57:f1:2f:87:5f:49:34:81:
                    b8:89:48:a3:52:f4:3d:47:3b:0b:c1:d9:b0:51:7d:
                    c1:b7:23:f3:2c:27:87:c9:26:71:c2:10:00:b4:f5:
                    20:9f:7d:48:6b:47:03:3d:20:26:db:07:54:86:3f:
                    20:96:96:b3:65:f1:b9:cd:13:45:98:5f:4b:e3:bf:
                    7a:9e:60:32:21:cc:47:0c:3a:14:d7:64:10:3f:a6:
                    10:0c:0e:c4:3d:2b:68:c7:b9:ab:ea:16:9c:d5:35:
                    d9:40:96:53:dd:3c:9e:61:0b:ba:2c:85:84:d2:39:
                    ad:01:b0:83:28:fe:20:8f:13:dc:6c:04:f5:0b:c8:
                    95:79:12:84:c3:77:93:45:c3:1c:fa:a6:ea:f9:9f:
                    67:a9:41:88:33:95:8d:b2:58:1c:4c:f4:a6:4e:22:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:5B:C1:7C:BD:24:88:3C:1D:12:18:47:89:AB:4E:13:CA:1C:23
            X509v3 Authority Key Identifier:
                keyid:4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/vjVbwXy9JIg8HRIYR4mrThPKHCM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:e800::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:19:c4:fb:3d:bd:a8:a7:2b:a7:3e:a3:f7:e2:7f:6f:07:
         fa:31:3c:3b:dc:20:61:9d:ec:77:4f:88:b4:e4:c4:75:25:55:
         08:7a:0f:00:12:3d:92:d1:58:ab:8d:50:f7:9c:5a:1d:ca:92:
         f8:18:95:0e:7c:a1:b7:ce:01:fd:ef:31:37:d8:cd:26:bb:54:
         3a:2f:4a:54:8c:11:67:4f:c3:37:c4:e9:ec:77:82:de:5f:76:
         b2:9b:fd:b1:02:89:d7:1c:c1:50:91:2c:89:e4:8b:37:85:10:
         e8:33:dd:29:35:98:d5:8f:f1:1e:d0:ae:28:8e:98:f9:dc:d3:
         12:41:1f:52:70:35:63:54:e9:7a:cb:dc:41:1e:bc:fd:91:ec:
         78:f8:1c:36:94:d5:76:78:3b:12:ef:7a:92:8d:86:a1:fb:b4:
         25:aa:07:4c:e1:c5:ec:da:be:e7:58:c1:12:33:cd:b8:7a:3a:
         6f:b9:b9:84:f7:b6:02:cf:73:8a:73:e2:b4:74:52:4d:b9:50:
         7d:19:33:bc:ad:02:09:a0:38:86:74:f9:62:4b:0d:85:c1:d1:
         74:ea:ed:1b:42:cc:4b:4a:63:09:a7:3c:ef:9c:2e:24:d0:e4:
         55:de:f7:a1:58:5a:fe:b2:39:66:ad:0b:45:1f:c6:1e:c1:81:
         a5:51:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:37:03 2025 by rpki-client