Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30162/JgdTUbcYJx64aXBji4JqjL0OnSo.roa
File:                     JgdTUbcYJx64aXBji4JqjL0OnSo.roa (raw, json)
Hash identifier:          qFnlrCaB5IanI5bRhy21cu1vaS1hqa+pM3HtCK0iWG8=
Subject key identifier:   26:07:53:51:B7:18:27:1E:B8:69:70:63:8B:82:6A:8C:BD:0E:9D:2A
Certificate issuer:       /CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Certificate serial:       3C
Authority key identifier: 7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/JgdTUbcYJx64aXBji4JqjL0OnSo.roa
Signing time:             Tue 01 Jul 2025 01:36:21 +0000
ROA not before:           Tue 01 Jul 2025 01:36:21 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     24295
IP address blocks:        2404:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
        Validity
            Not Before: Jul  1 01:36:21 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=26075351B718271EB86970638B826A8CBD0E9D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:e4:2d:cb:d2:56:a9:de:e8:e5:d9:37:16:
                    f4:eb:45:9e:47:de:c3:71:7b:62:d0:95:0b:e7:4b:
                    13:9b:c9:97:00:3d:46:11:8e:38:05:42:7a:ce:c9:
                    63:d9:fb:71:91:1d:35:e7:07:d6:00:5b:37:57:d1:
                    cf:b1:35:87:0d:3f:57:e3:fa:b1:d3:68:a6:9b:8b:
                    c0:02:ea:69:e1:9d:46:5a:35:a7:65:96:09:f7:54:
                    78:4c:7a:72:13:bd:e8:10:8b:1d:35:bc:c6:ef:d5:
                    12:a1:c6:ba:85:3c:71:a1:93:48:18:39:d5:ff:be:
                    62:63:4b:ec:a7:f6:01:07:bb:eb:c3:a4:0c:5f:9a:
                    85:ca:3a:8f:f7:b5:04:2b:b3:51:25:f7:15:79:02:
                    49:8a:6f:ae:c3:22:b5:58:c3:ac:39:8e:b2:32:ed:
                    45:e1:1c:0b:02:78:d8:60:a9:ca:dd:7d:ce:f3:c5:
                    24:01:1e:90:be:62:40:59:a3:5b:a0:94:93:dc:28:
                    85:2d:84:66:f1:b4:a2:99:b1:a0:64:63:03:b6:f8:
                    89:49:3e:09:94:67:1d:b5:fe:f7:85:7e:27:5b:02:
                    7a:e5:a3:87:81:a3:19:2f:f1:1f:12:97:4e:3c:c6:
                    90:15:95:2e:a9:b1:b3:ad:f9:ee:59:dd:fb:6d:48:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:53:51:B7:18:27:1E:B8:69:70:63:8B:82:6A:8C:BD:0E:9D:2A
            X509v3 Authority Key Identifier:
                keyid:7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/JgdTUbcYJx64aXBji4JqjL0OnSo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:1e:cc:5c:fa:9b:4d:39:b2:bb:5a:b9:3a:63:5d:29:14:63:
         6f:88:b8:ba:d2:bd:49:0d:b7:79:06:6e:97:2e:4c:1f:d9:3d:
         54:07:15:86:97:94:ef:ca:48:83:2a:cd:05:47:f4:1e:fc:67:
         09:f6:37:ad:79:4e:0e:65:90:4f:78:f1:f3:eb:5a:91:2b:66:
         b9:11:3f:b4:68:fe:38:29:38:f8:e0:e0:2d:b5:fd:af:83:8b:
         96:f6:34:2e:47:7c:4b:7c:5d:d8:3e:74:0a:6f:73:77:46:1b:
         64:97:82:f2:ef:38:35:bd:3b:64:26:73:29:77:c8:85:99:b1:
         7b:77:95:db:f8:d4:2e:d9:8b:3e:a5:2b:87:de:e2:2f:1d:0a:
         78:d8:7e:9a:12:48:c8:08:b6:07:e0:c6:5a:df:f4:3d:24:0d:
         fa:d5:2d:8a:83:22:64:8e:5a:8f:bf:1d:9b:ba:0c:69:bf:fd:
         b7:d2:a4:c0:b9:5d:ca:ca:04:07:6f:3b:74:42:1f:f2:79:de:
         b9:b5:28:49:7c:59:3e:77:b2:c9:be:8f:2e:52:02:91:e1:f7:
         9f:0e:a0:ca:bf:7d:f3:f5:2b:52:9e:50:d5:f2:4f:7f:2d:7f:
         32:6d:64:f2:bd:fa:fe:2a:d0:fb:d2:19:db:02:f7:5d:8f:b4:
         dd:4c:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:54:45 2025 by rpki-client