Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa
File:                     3ZHta6F0GCWL_aonkPcbDVVfMvI.roa (raw, json)
Hash identifier:          cHfjkgj0YaKjtVd/EdvF7zGq2noLAFaYrHboqnGMQNA=
Subject key identifier:   DD:91:ED:6B:A1:74:18:25:8B:FD:AA:27:90:F7:1B:0D:55:5F:32:F2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0507
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa
Signing time:             Tue 01 Jul 2025 01:28:46 +0000
ROA not before:           Tue 01 Jul 2025 01:28:46 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul  1 01:28:46 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=DD91ED6BA17418258BFDAA2790F71B0D555F32F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:59:2f:fe:db:77:51:21:64:e9:ca:94:36:
                    d9:81:ae:2f:b9:65:d6:59:d3:4b:60:0a:12:a5:d0:
                    98:7f:28:4d:4c:05:be:83:0d:16:b0:25:ca:59:a1:
                    0c:39:5a:c4:89:01:5e:ec:7c:9e:ae:6f:8f:86:dc:
                    1a:80:a8:cc:e7:9b:3e:21:35:76:66:7b:56:48:e3:
                    30:12:03:4c:70:bd:65:6d:71:40:62:82:67:86:b7:
                    e9:5a:33:7a:68:50:51:2a:d0:ec:1b:6f:5c:30:68:
                    20:b7:02:97:be:09:f8:23:64:c9:93:94:8b:f8:ee:
                    23:8b:03:9d:93:55:02:74:42:c7:4a:ff:20:a7:24:
                    55:04:a7:a9:50:b5:3c:a9:5d:9c:4e:86:45:ba:b2:
                    ca:61:30:65:50:dd:13:54:f2:53:80:34:e0:61:ad:
                    af:06:cd:fb:cf:85:3a:2f:c5:e9:2e:3a:f2:3e:d5:
                    d7:57:c3:aa:c9:05:82:8d:62:d4:4c:cf:ef:3c:30:
                    71:24:7b:ad:37:6a:16:81:e3:9d:86:55:bd:8d:6d:
                    ad:b3:12:16:63:35:d4:d1:cd:d8:3a:15:b9:96:89:
                    d7:e5:94:ba:55:95:d9:40:59:6e:24:88:46:29:ce:
                    91:3c:3c:16:4a:5c:ac:71:b1:7d:72:50:ef:24:25:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:ED:6B:A1:74:18:25:8B:FD:AA:27:90:F7:1B:0D:55:5F:32:F2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:24:08:59:ac:66:67:2d:63:19:89:7c:11:00:56:34:bb:
         31:75:5c:ad:b4:bb:f7:12:89:62:72:5f:f6:75:cc:82:6c:2e:
         68:87:c6:9b:43:61:87:bf:93:f4:11:fc:50:f8:d7:d1:8a:3b:
         a3:05:00:58:a2:7a:22:24:28:c8:ab:21:c4:b6:46:97:e0:c2:
         f4:66:6e:9c:8d:3e:7d:e0:a5:95:8e:9b:14:82:41:ba:99:88:
         e7:6e:96:fe:05:e4:b8:e7:08:b6:d6:bc:c6:62:45:1d:05:88:
         f5:f1:6a:cc:82:92:7d:32:ce:bd:ae:82:6d:a5:83:75:ab:69:
         94:2f:01:1a:b2:54:b5:c0:56:75:8c:18:55:d6:cd:d5:c5:d3:
         56:d7:27:dc:14:0b:fb:85:ed:53:a1:f0:d5:e3:83:4a:b0:ac:
         18:02:f0:8f:c3:8b:01:a9:ec:9f:b1:f4:e0:c6:cb:05:f0:ec:
         57:9c:c1:d7:81:a3:17:c2:00:cd:09:11:3c:8e:6b:24:f9:b0:
         51:19:6f:11:9d:c2:11:4c:00:be:61:cd:92:43:e9:50:d0:61:
         e3:74:a7:42:ce:eb:8b:39:be:d6:c7:11:52:78:8c:ac:52:05:
         ca:7d:dc:0e:4b:6b:07:f6:f0:12:3f:8a:f0:d9:f5:4b:52:62:
         5a:b9:93:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA3MDEw
MTI4NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREOTFFRDZCQTE3NDE4
MjU4QkZEQUEyNzkwRjcxQjBENTU1RjMyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwfVkv/tt3USFk6cqUNtmBri+5ZdZZ00tgChKl0Jh/KE1MBb6D
DRawJcpZoQw5WsSJAV7sfJ6ub4+G3BqAqMznmz4hNXZme1ZI4zASA0xwvWVtcUBi
gmeGt+laM3poUFEq0Owbb1wwaCC3Ape+CfgjZMmTlIv47iOLA52TVQJ0QsdK/yCn
JFUEp6lQtTypXZxOhkW6ssphMGVQ3RNU8lOANOBhra8GzfvPhTovxekuOvI+1ddX
w6rJBYKNYtRMz+88MHEke603ahaB452GVb2Nba2zEhZjNdTRzdg6FbmWidfllLpV
ldlAWW4kiEYpzpE8PBZKXKxxsX1yUO8kJb/3AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU3ZHta6F0GCWL/aonkPcbDVVfMvIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zWkh0YTZGMEdDV0xfYW9ua1BjYkRWVmZNdkku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJAoAYUgwDQYJKoZIhvcNAQELBQADggEBAJibJAhZrGZnLWMZiXwR
AFY0uzF1XK20u/cSiWJyX/Z1zIJsLmiHxptDYYe/k/QR/FD419GKO6MFAFiieiIk
KMirIcS2RpfgwvRmbpyNPn3gpZWOmxSCQbqZiOdulv4F5LjnCLbWvMZiRR0FiPXx
asyCkn0yzr2ugm2lg3WraZQvARqyVLXAVnWMGFXWzdXF01bXJ9wUC/uF7VOh8NXj
g0qwrBgC8I/DiwGp7J+x9ODGywXw7FecwdeBoxfCAM0JETyOayT5sFEZbxGdwhFM
AL5hzZJD6VDQYeN0p0LO64s5vtbHEVJ4jKxSBcp93A5Lawf28BI/ivDZ9UtSYlq5
kwM=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:50:48 2025 by rpki-client