Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
File:                     YshT9_F4zxKhDZfg8d-D51dNGjg.roa (raw, json)
Hash identifier:          OZR0xVucQSuSXglV2CE7SP/ck1J/MHo0TEtmP5xfjv0=
Subject key identifier:   62:C8:53:F7:F1:78:CF:12:A1:0D:97:E0:F1:DF:83:E7:57:4D:1A:38
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       48
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
Signing time:             Wed 01 Oct 2025 01:35:19 +0000
ROA not before:           Wed 01 Oct 2025 01:35:19 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     37899
IP address blocks:        240b:253::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 08:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:19 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=62C853F7F178CF12A10D97E0F1DF83E7574D1A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:2b:2d:2c:ba:b5:01:04:75:ce:22:2c:80:
                    e7:67:12:d7:b1:96:cd:8b:83:f2:1f:70:1d:ba:5e:
                    f0:5e:5b:c7:18:79:a6:93:f1:4e:5f:91:dd:1e:04:
                    ed:ca:62:e7:ed:70:b5:7a:07:ba:03:5e:47:be:07:
                    24:49:26:a6:c7:0f:27:af:12:8b:84:25:22:3a:40:
                    05:5f:9d:2f:24:4d:52:52:b6:8d:71:3c:b5:42:17:
                    44:f8:91:f6:bd:e3:d8:a6:16:3b:f8:48:97:7c:69:
                    6a:29:db:34:2e:01:94:9a:16:d8:73:90:78:12:38:
                    f1:69:1e:5c:15:71:b5:1c:8e:07:4e:ca:ac:c0:4f:
                    99:00:40:0c:8e:96:46:3f:02:fe:40:7e:b6:0e:3e:
                    21:46:4a:60:35:68:a1:ed:30:81:81:ee:cd:6a:b0:
                    d1:54:02:ed:dd:ca:76:43:48:24:33:94:2c:df:75:
                    59:46:b0:b7:ac:dc:ae:2a:7b:6b:74:60:ad:86:2c:
                    91:f4:cf:3b:fa:78:df:40:ec:e5:47:4c:5c:7c:f3:
                    4a:f8:1a:d4:c0:38:3a:6d:ee:c2:1d:d3:b6:68:8a:
                    19:9b:71:ec:4d:b1:61:0c:f0:a9:6a:48:70:bb:93:
                    01:0d:82:f2:98:20:e7:3c:62:e8:dc:5b:dc:25:19:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C8:53:F7:F1:78:CF:12:A1:0D:97:E0:F1:DF:83:E7:57:4D:1A:38
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/YshT9_F4zxKhDZfg8d-D51dNGjg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:253::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:8d:9b:43:52:29:a3:b5:b6:07:f7:3e:c0:85:f5:a5:bf:
         9c:27:32:61:f0:c4:1f:86:93:c3:b9:c9:dc:d1:96:ed:9b:a1:
         00:20:38:6b:12:b6:4f:16:23:71:00:c6:6b:49:49:19:f2:ff:
         e4:35:b7:21:56:31:a8:c8:00:fb:ef:5c:ef:72:f2:c3:6a:2b:
         b4:79:79:13:55:62:cd:5e:7d:1a:a0:78:3d:2e:d1:ef:11:f1:
         da:7d:6e:28:82:d2:65:4c:a1:f9:72:30:73:14:60:72:f5:3e:
         50:14:31:50:5c:7f:66:39:0b:8d:17:0f:93:ec:5e:c5:fe:ac:
         62:bf:7e:0b:56:11:8c:35:c8:7a:ed:ce:24:11:f6:45:64:64:
         6e:db:78:f6:67:22:d2:a0:af:e5:6a:9f:3c:65:0f:4b:97:80:
         4a:a0:77:be:5e:0a:c9:60:cc:68:2b:9a:9d:c5:0e:a7:d4:57:
         c7:74:f1:0c:8d:6e:fd:eb:50:f0:e4:de:c1:3b:ec:1e:aa:76:
         5b:e4:9f:b7:c4:d6:8d:14:79:5d:ef:76:91:5a:06:43:72:ac:
         1c:1d:3c:34:8a:fe:5c:87:ba:b6:c9:12:7d:58:ac:99:40:68:
         0a:1d:c2:9a:8d:c8:7b:d7:71:bd:e3:0e:7c:8b:15:fa:e4:32:
         f0:04:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:14:35 2025 by rpki-client