Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/5G06XvUwVRRyOnIY8jxOro6h5Yw.roa
File:                     5G06XvUwVRRyOnIY8jxOro6h5Yw.roa (raw, json)
Hash identifier:          V20FFLwn9ua4V+AQ4TovNzBR9/9j1vF/i7yod1bYTy4=
Subject key identifier:   E4:6D:3A:5E:F5:30:55:14:72:3A:72:18:F2:3C:4E:AE:8E:A1:E5:8C
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       63
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/5G06XvUwVRRyOnIY8jxOro6h5Yw.roa
Signing time:             Thu 01 May 2025 01:28:48 +0000
ROA not before:           Thu 01 May 2025 01:28:48 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        2001:370:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: May  1 01:28:48 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E46D3A5EF5305514723A7218F23C4EAE8EA1E58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:f7:4f:e9:bb:65:74:3e:b0:95:12:c2:0c:
                    a0:8a:14:51:17:21:81:01:4e:b4:2e:f5:72:48:38:
                    76:c3:04:36:62:b3:8c:26:84:e0:59:5b:52:97:88:
                    b1:22:bc:13:50:43:02:dc:f9:04:a6:ce:3a:0a:61:
                    1f:ef:ef:27:2c:f1:2e:d7:15:0d:b6:d0:41:28:14:
                    83:82:ab:65:fd:1a:fd:e3:cf:3f:33:63:1c:4a:a3:
                    33:e4:1b:cb:a7:b3:10:a2:a5:51:45:42:12:98:a8:
                    6a:ef:80:11:c3:2f:72:fe:90:47:97:d0:83:04:23:
                    89:2c:d5:47:e0:8b:95:30:54:ed:fd:de:03:f0:1d:
                    ed:d5:52:59:9f:fb:17:36:53:4f:e9:67:4c:cb:7f:
                    dd:5b:c1:1f:c7:a5:e2:ea:f7:4e:42:d3:88:13:79:
                    d7:e0:5e:94:f1:4c:69:cb:f5:7f:e0:b5:c6:eb:73:
                    80:e7:d6:0e:fb:ae:c2:b9:cd:02:ad:fd:ca:02:b9:
                    aa:9d:08:74:03:f5:29:0d:a6:d2:14:5e:10:6f:d4:
                    ff:a6:17:3b:fe:7c:89:ec:19:9f:87:10:47:50:c1:
                    99:2b:da:da:1d:5d:c2:fc:6f:1a:02:a5:fc:ad:30:
                    47:8c:46:19:e4:79:3b:7b:e9:21:c5:7b:09:2f:81:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:3A:5E:F5:30:55:14:72:3A:72:18:F2:3C:4E:AE:8E:A1:E5:8C
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/5G06XvUwVRRyOnIY8jxOro6h5Yw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:32:3f:5b:05:93:67:9c:30:b0:38:66:71:9c:08:3c:61:
         49:83:d1:a7:31:57:e4:a4:7a:32:c6:1a:c0:ac:c6:cc:49:00:
         ed:5f:02:bc:d2:62:30:7e:95:46:db:15:b5:cc:e6:7c:ea:72:
         0d:54:7c:41:6c:6b:81:fd:8e:79:9b:16:e8:9f:52:be:d2:07:
         ce:f6:fd:66:5f:96:af:b9:ad:2f:3e:ad:0a:55:76:91:eb:eb:
         ad:50:99:cf:89:1e:10:03:be:14:26:87:b7:7b:43:6b:a7:2c:
         e9:dd:c4:db:49:ad:23:bb:97:57:d7:ed:3e:de:20:87:34:f6:
         84:bc:2b:97:fe:5b:09:b0:7c:3b:a4:d0:d2:86:bb:81:2c:db:
         b8:41:63:b8:20:82:79:07:5c:01:27:73:02:db:b3:68:1e:a8:
         3e:48:21:9c:f7:72:92:ee:a7:c4:13:f2:10:93:44:52:af:0a:
         66:a6:e0:08:5c:75:1c:45:00:d2:18:9f:11:ae:d7:5e:36:6d:
         47:f0:c2:1a:a7:5e:00:65:94:43:dd:7a:f6:30:ae:86:bb:8d:
         76:2b:c5:a0:9f:6d:a9:51:71:27:ff:5e:18:d0:0e:1b:b9:14:
         69:72:15:88:69:f8:6c:05:42:27:80:1a:f6:b8:45:10:e9:d1:
         1b:ef:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:42:56 2025 by rpki-client