Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/6qB3DhFV0hgB3SV4BzNDtau0IDE.roa
File:                     6qB3DhFV0hgB3SV4BzNDtau0IDE.roa (raw, json)
Hash identifier:          0ZDgpeH9CS5rR3FoOX/BQKvTGH0m8U6IXJgd/oe+Uag=
Subject key identifier:   EA:A0:77:0E:11:55:D2:18:01:DD:25:78:07:33:43:B5:AB:B4:20:31
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       36
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/6qB3DhFV0hgB3SV4BzNDtau0IDE.roa
Signing time:             Tue 01 Jul 2025 01:28:37 +0000
ROA not before:           Tue 01 Jul 2025 01:28:37 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:2960::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Jul  1 01:28:37 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=EAA0770E1155D21801DD2578073343B5ABB42031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:16:31:1c:38:4e:4a:56:5f:9c:51:50:36:
                    de:39:29:e1:0b:c7:66:b5:b2:ef:ca:3a:56:48:23:
                    16:62:70:6b:2a:bf:a6:fe:38:e1:ae:69:ba:1b:b1:
                    40:56:1a:b4:d4:2b:68:89:cd:e6:6a:9f:14:cf:24:
                    4b:80:ae:9c:58:5b:de:45:db:fe:d6:2a:94:b0:35:
                    9e:2f:05:2c:a3:94:4d:d1:41:9b:42:3d:58:8a:f6:
                    80:d1:29:e1:f3:bd:21:d8:13:e7:92:8e:f4:d9:53:
                    5a:09:9c:7a:a5:d0:d1:98:e1:b6:39:45:43:49:ab:
                    b3:68:87:51:e1:87:45:58:ee:d3:9d:2e:ff:b2:06:
                    e0:a5:08:43:36:c3:db:46:8b:70:44:f0:4f:d9:a7:
                    82:3f:30:82:7f:51:a6:a5:e2:55:20:fa:31:69:44:
                    78:e8:0c:56:03:5a:e7:f0:02:31:98:5f:20:17:e0:
                    75:b3:6e:ac:33:2f:4d:33:d6:d0:a7:d0:c8:a1:de:
                    91:b5:17:ff:7b:b5:04:cd:2d:10:cf:ea:95:8d:c0:
                    1c:b1:80:8b:89:4d:61:ae:ba:58:2c:a5:67:14:29:
                    6a:96:90:b8:7a:1d:07:1b:c4:0c:78:f8:d6:50:42:
                    dc:7c:4a:35:07:38:72:2f:a9:06:3c:d8:bf:b2:2e:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:77:0E:11:55:D2:18:01:DD:25:78:07:33:43:B5:AB:B4:20:31
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/6qB3DhFV0hgB3SV4BzNDtau0IDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:2960::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:13:f1:41:0f:9e:83:79:f6:44:d0:ce:4e:63:e7:25:51:
         30:9a:63:24:25:bb:50:22:40:f8:79:7c:23:4b:35:94:7c:c2:
         dc:6c:f9:2e:0c:6f:3a:07:92:bf:bc:e6:46:87:49:7d:99:fe:
         f0:7f:11:8f:1b:0b:e7:b3:5c:cc:a6:2f:4f:10:0e:93:9e:cd:
         54:5d:4c:16:31:a9:e7:b0:35:e4:d1:3c:14:1f:b3:e3:05:c4:
         dc:1f:69:f9:17:e0:58:19:7b:44:c2:49:aa:a7:13:3c:c5:45:
         86:62:b7:48:ab:9a:3f:39:22:24:3f:03:19:22:0f:e3:af:33:
         b7:34:1b:4a:59:a0:42:15:1e:b2:eb:fb:59:81:5c:ca:90:d4:
         6e:33:85:bb:de:af:09:96:3a:e5:3a:48:22:69:ba:8a:aa:ff:
         52:c3:ed:58:ee:8b:c5:4b:15:46:f9:ee:c1:02:bc:df:68:6e:
         a8:7a:37:bf:bc:64:00:0d:68:92:77:cf:98:c4:dc:9a:f4:bf:
         05:51:b6:0c:ec:48:cd:7d:55:f4:47:e3:56:9b:90:85:c1:f0:
         71:f6:a0:62:48:37:c8:fd:ca:fb:93:8c:12:61:15:69:4c:b4:
         30:26:8d:18:d5:7d:49:57:21:4e:f5:70:f2:40:ea:a6:9a:84:
         ca:2f:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:17:05 2025 by rpki-client