Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
File:                     pguJAFboHCpJg-71kwS6LXq-zpw.roa (raw, json)
Hash identifier:          haFiVoTPMuFk0Eq6jG7ovfxNE1NDpVLQ+nW4Pzav4ck=
Subject key identifier:   A6:0B:89:00:56:E8:1C:2A:49:83:EE:F5:93:04:BA:2D:7A:BE:CE:9C
Certificate issuer:       /CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Certificate serial:       2F
Authority key identifier: B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
Signing time:             Fri 01 Aug 2025 01:31:03 +0000
ROA not before:           Fri 01 Aug 2025 01:31:03 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     45677
IP address blocks:        2407:8f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
        Validity
            Not Before: Aug  1 01:31:03 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A60B890056E81C2A4983EEF59304BA2D7ABECE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:25:44:fa:57:2e:36:4f:55:3a:81:6a:1d:
                    d5:ac:3a:9c:b7:54:18:a6:52:a8:6b:49:36:da:2f:
                    56:ae:f8:4f:b7:30:6e:0e:83:92:2f:17:72:74:90:
                    36:43:36:57:36:35:b7:6b:fb:3f:36:dd:36:37:b3:
                    f4:da:bc:85:0a:d2:1b:3e:d5:f0:47:18:69:1a:66:
                    80:72:c7:8d:ff:80:84:7b:f2:f4:28:fa:d4:ca:3c:
                    0a:90:92:29:f2:6e:d5:ea:35:e6:0e:7f:1c:17:f4:
                    11:fc:d0:f2:a4:17:ae:c0:50:11:23:8b:84:b3:ba:
                    d0:83:1f:6c:b8:18:09:08:e6:40:91:c6:94:da:24:
                    86:e6:3e:9f:e6:00:9f:c6:f1:45:5a:e3:f1:a2:94:
                    c3:d5:a1:f0:79:86:51:46:52:e7:e4:67:1e:37:27:
                    85:54:67:cf:5d:34:d5:be:d9:24:a6:35:bc:5c:65:
                    8e:90:10:0d:a5:1d:fe:43:2d:c1:ee:4d:14:4c:52:
                    d6:fc:6f:61:d0:84:32:8a:25:9e:16:32:dd:ae:40:
                    2b:a0:e2:7c:7a:22:ee:25:dd:ab:fe:91:a0:09:fe:
                    22:fd:95:bd:8c:68:b1:15:4c:02:7b:d6:ce:c7:d0:
                    14:71:aa:f4:b7:6b:48:e1:e6:b1:a9:1e:cf:a3:82:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:89:00:56:E8:1C:2A:49:83:EE:F5:93:04:BA:2D:7A:BE:CE:9C
            X509v3 Authority Key Identifier:
                keyid:B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/pguJAFboHCpJg-71kwS6LXq-zpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:8f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:e0:2f:da:42:a8:9d:ce:51:cc:81:14:cd:02:66:a1:28:
         f5:8b:ca:d3:c1:8e:c8:3d:4e:a3:47:2b:8f:33:b7:88:b5:32:
         79:fd:02:31:40:eb:f3:47:ed:61:a5:e5:da:ec:ec:87:82:25:
         51:c0:a4:11:e1:7c:d3:29:7d:96:53:26:ee:ae:7a:ec:ef:af:
         88:7a:8a:1c:e3:59:cd:d0:a5:25:9e:f8:e6:56:c5:d0:84:cf:
         ac:e0:6e:da:9f:a9:1e:1f:c2:f6:86:3f:69:7f:8f:57:d0:c7:
         34:00:33:6f:e3:17:54:e6:07:2d:10:e9:2f:01:7f:7e:2a:9b:
         cf:3e:a0:dc:98:d0:39:1b:34:ff:b2:15:08:e6:39:77:a1:98:
         3d:a2:ba:7a:28:44:fe:59:a3:68:0e:d7:b0:2c:1c:e4:c8:1b:
         f2:8e:1b:05:9f:9b:b0:28:a9:0f:d2:7c:be:a2:60:2b:9d:65:
         57:42:bd:1f:e6:87:f0:24:02:3e:db:da:b9:9b:8f:18:27:eb:
         80:0d:74:2f:f3:84:94:29:cd:ff:36:77:c6:42:41:fc:5c:d4:
         b0:b3:9e:2b:dc:18:ef:f0:b1:cd:36:f1:41:25:d9:c4:52:a0:
         e8:d8:65:74:ee:81:42:14:f1:6d:d3:6c:ad:39:09:e5:32:c2:
         12:23:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:29:29 2025 by rpki-client