Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/cVNogJr9V5h0rV67TMLMIcZ0d0o.roa
File:                     cVNogJr9V5h0rV67TMLMIcZ0d0o.roa (raw, json)
Hash identifier:          yJXi73zTZi6c9TIrmK/xmOU5gLk4Z8wvghoeBIihhMY=
Subject key identifier:   71:53:68:80:9A:FD:57:98:74:AD:5E:BB:4C:C2:CC:21:C6:74:77:4A
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       29
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/cVNogJr9V5h0rV67TMLMIcZ0d0o.roa
Signing time:             Tue 10 Jun 2025 10:45:47 +0000
ROA not before:           Tue 10 Jun 2025 10:45:47 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     63771
IP address blocks:        2401:7640::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jun 10 10:45:47 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=715368809AFD579874AD5EBB4CC2CC21C674774A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:88:ac:50:56:ab:91:b0:32:8e:c6:d6:e2:
                    df:42:f5:e3:7d:5e:db:f9:96:b2:04:31:af:10:69:
                    32:0f:3d:3a:08:c4:02:19:45:7d:2d:e6:45:46:eb:
                    52:5a:c8:d6:52:eb:27:0b:3b:89:1e:6c:17:5f:a7:
                    0a:b2:e3:a2:b3:ce:88:17:a4:9e:36:6b:20:92:d5:
                    65:58:e5:3f:77:10:4f:b6:ce:3e:2f:32:0c:28:a3:
                    c2:dd:cd:c8:35:cc:3d:c5:f9:e8:e5:7d:10:38:6e:
                    4c:27:57:ce:a4:18:42:65:05:bd:d4:d6:01:53:e3:
                    90:5a:95:b6:b5:f6:87:88:06:52:b8:c9:38:a8:5c:
                    db:1e:24:45:43:18:d0:f4:d8:c9:cb:a3:70:84:56:
                    02:93:7b:a5:36:b2:1f:9d:e2:f9:a1:3a:c1:c7:c8:
                    cb:ee:bd:50:07:8d:7c:fd:a4:fa:74:a7:bb:15:2a:
                    28:b8:ae:d8:34:d3:8a:05:5a:6b:ba:b9:41:f2:33:
                    61:b6:2f:38:f6:83:1a:c5:cd:35:c9:90:6d:85:e0:
                    ec:d6:b9:ce:28:5a:ce:aa:ad:b1:de:0b:6f:89:36:
                    fc:39:4a:a4:16:f1:3e:d5:6b:04:46:bc:81:23:ba:
                    51:c9:af:bf:08:df:87:5e:d1:74:eb:b6:4f:62:6a:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:53:68:80:9A:FD:57:98:74:AD:5E:BB:4C:C2:CC:21:C6:74:77:4A
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/cVNogJr9V5h0rV67TMLMIcZ0d0o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/31

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:0f:e2:1a:e5:16:3c:02:40:20:0d:d4:6f:1f:82:86:d1:
         51:ec:73:4b:57:59:84:07:51:c2:17:72:7d:38:a2:ee:d5:e1:
         b7:14:91:f8:aa:40:60:2b:95:e2:0c:59:0a:42:2f:fb:70:a6:
         40:61:33:a7:c2:03:47:ca:34:4f:c1:2d:f5:1a:83:8f:07:31:
         40:c5:7b:d9:d0:29:4d:6e:b1:70:f7:bb:68:a7:b0:8e:56:52:
         7f:51:76:6e:3f:6d:89:8f:c7:b4:e6:53:11:e8:52:66:c9:0c:
         fe:4a:29:de:34:9c:e3:fd:0e:99:96:a5:39:ba:3a:fb:1f:9d:
         1f:fe:2b:d9:e6:f9:53:55:0b:3a:31:6e:14:e4:39:7b:63:21:
         e6:bf:08:ce:f0:ad:32:f9:a2:a2:05:2d:34:a1:e7:42:7b:b2:
         2f:7b:d2:f8:43:2d:dd:2a:af:11:b7:92:be:10:6a:48:77:c2:
         95:98:ae:3d:58:fc:ce:23:e2:91:c2:95:db:45:4f:fb:2d:bf:
         83:60:f2:7a:6d:21:5b:67:39:51:72:b3:65:ff:13:f6:cf:b2:
         b8:19:f3:3a:6b:a7:91:e2:fa:5e:73:51:4c:93:ce:de:b8:14:
         70:24:93:bf:6d:5d:60:01:d3:84:b3:25:5b:54:58:3c:92:f1:
         42:fd:81:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Njk1
OTVFQzRBMEMzMUQ3NEJBODk2M0MyRUNBN0VCNDgyMjUxRjc0MB4XDTI1MDYxMDEw
NDU0N1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNzE1MzY4ODA5QUZENTc5
ODc0QUQ1RUJCNENDMkNDMjFDNjc0Nzc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALwXiKxQVquRsDKOxtbi30L1431e2/mWsgQxrxBpMg89OgjEAhlF
fS3mRUbrUlrI1lLrJws7iR5sF1+nCrLjorPOiBeknjZrIJLVZVjlP3cQT7bOPi8y
DCijwt3NyDXMPcX56OV9EDhuTCdXzqQYQmUFvdTWAVPjkFqVtrX2h4gGUrjJOKhc
2x4kRUMY0PTYycujcIRWApN7pTayH53i+aE6wcfIy+69UAeNfP2k+nSnuxUqKLiu
2DTTigVaa7q5QfIzYbYvOPaDGsXNNcmQbYXg7Na5zihazqqtsd4Lb4k2/DlKpBbx
PtVrBEa8gSO6Ucmvvwjfh17RdOu2T2JqPiUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRxU2iAmv1XmHStXrtMwswhxnR3SjAfBgNVHSMEGDAWgBRmlZXsSgwx10uoljwu
yn60giUfdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDMvWnBXVjdFb01NZGRMcUpZOExzcC10SUlsSDNRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnBXVjdFb01NZGRMcUpZOExzcC10
SUlsSDNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzAzL2NWTm9nSnI5VjVoMHJWNjdUTUxNSWNaMGQwby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQEkAXZAMA0GCSqGSIb3DQEBCwUAA4IBAQAcRg/iGuUWPAJAIA3Ubx+C
htFR7HNLV1mEB1HCF3J9OKLu1eG3FJH4qkBgK5XiDFkKQi/7cKZAYTOnwgNHyjRP
wS31GoOPBzFAxXvZ0ClNbrFw97top7COVlJ/UXZuP22Jj8e05lMR6FJmyQz+Sine
NJzj/Q6ZlqU5ujr7H50f/ivZ5vlTVQs6MW4U5Dl7YyHmvwjO8K0y+aKiBS00oedC
e7Ive9L4Qy3dKq8Rt5K+EGpId8KVmK49WPzOI+KRwpXbRU/7Lb+DYPJ6bSFbZzlR
crNl/xP2z7K4GfM6a6eR4vpec1FMk87euBRwJJO/bV1gAdOEsyVbVFg8kvFC/YFr
-----END CERTIFICATE-----
Generated at Sat Jul 5 02:29:11 2025 by rpki-client