Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
File:                     HTQZHZI57G81PjLkqrIYsY_8A34.roa (raw, json)
Hash identifier:          6EWy+rb6CW9+FBEyPayWg8F/eSJi1w6LdqP9/aIHSe8=
Subject key identifier:   1D:34:19:1D:92:39:EC:6F:35:3E:32:E4:AA:B2:18:B1:8F:FC:03:7E
Certificate issuer:       /CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
Certificate serial:       15
Authority key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
Signing time:             Thu 19 Jun 2025 05:31:12 +0000
ROA not before:           Thu 19 Jun 2025 05:31:12 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        2406:2800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7
        Validity
            Not Before: Jun 19 05:31:12 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=1D34191D9239EC6F353E32E4AAB218B18FFC037E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:32:05:6a:cb:33:ed:71:d1:2a:16:4e:72:
                    8e:51:f8:b5:6f:02:eb:f8:81:91:08:90:86:15:8b:
                    7f:d3:24:59:e5:94:4c:09:7d:78:34:e6:cf:06:be:
                    72:90:c0:fc:2d:9c:f6:46:c1:c5:cb:15:9f:e4:96:
                    c8:1a:51:86:23:f1:8a:98:35:00:ab:ce:e7:8e:d8:
                    b4:e0:07:59:20:6c:bc:9f:31:26:9d:c3:29:47:b8:
                    cb:22:94:35:50:43:70:61:58:69:92:66:37:8f:ef:
                    ac:ef:df:32:47:b7:16:5b:33:eb:ee:81:20:8f:e6:
                    22:be:41:8f:05:34:6c:ee:88:96:47:33:29:96:46:
                    92:f0:bb:58:3b:60:6d:53:a2:f1:85:da:e1:a4:cd:
                    57:1d:ce:1f:6c:fd:57:e7:ed:06:d8:0b:5b:75:c7:
                    c8:0e:6f:ed:8e:b5:1a:85:95:f9:23:ad:85:8a:f1:
                    ca:f3:ea:97:57:38:0a:c8:a5:c5:67:ff:c6:b0:c9:
                    73:45:fc:e5:ff:36:f2:62:e7:af:73:a6:3f:cd:6b:
                    2e:e2:bc:ed:09:4a:e7:cc:39:8e:a6:92:af:90:30:
                    a3:62:af:9c:09:77:7b:e0:75:62:7a:31:b0:4b:c3:
                    19:cc:91:6e:76:bc:3f:dc:7f:cd:9e:50:f3:30:11:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:19:1D:92:39:EC:6F:35:3E:32:E4:AA:B2:18:B1:8F:FC:03:7E
            X509v3 Authority Key Identifier:
                keyid:8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/HTQZHZI57G81PjLkqrIYsY_8A34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2800::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:30:2d:6d:25:db:13:a9:6e:ed:2c:f2:bf:97:ef:7c:82:ac:
         9b:fd:23:4e:75:a9:fd:52:3a:29:6a:df:05:16:0d:fa:69:61:
         e6:31:70:21:5b:52:36:e7:a9:c6:bc:f9:74:d2:45:a5:b1:c1:
         d9:17:55:50:99:9e:2e:4a:5f:25:38:c4:61:b2:25:8f:3c:e3:
         da:77:66:d1:dd:d5:b4:7f:c9:5c:64:02:6c:f2:23:42:51:b3:
         cd:3d:f1:b6:a6:c7:02:64:ea:87:cb:2f:95:d8:ba:ef:02:29:
         04:1a:28:e2:aa:28:15:f3:ff:73:37:97:c2:b7:fb:ce:98:d9:
         e7:92:b9:ad:2d:b1:eb:84:18:f1:f5:32:f4:47:33:8b:9d:1e:
         16:fb:30:58:72:3e:1a:37:53:ee:d4:28:29:56:76:e4:e7:77:
         40:b7:fd:20:6f:25:64:44:c3:18:9f:bb:03:1c:d0:e7:63:26:
         0b:70:84:ac:00:24:a1:16:bb:dc:74:54:fe:2f:49:9d:05:e6:
         da:88:bb:52:ab:f7:9e:a5:ff:1f:ec:94:d6:34:32:69:c2:65:
         cd:d0:a7:39:ad:c6:70:cf:32:85:85:bd:0c:de:43:29:bb:99:
         22:46:cd:2b:67:75:0c:cf:1c:41:ba:64:b9:6b:0d:12:07:f9:
         8e:9b:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:46:26 2025 by rpki-client