Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30391/VghrzpNR3yPHdfKx9oox-NAk2x0.roa
File:                     VghrzpNR3yPHdfKx9oox-NAk2x0.roa (raw, json)
Hash identifier:          jnY62vcxbjAgUzV+YHN3ZHLXysE/Ux9blhSyjAfujDE=
Subject key identifier:   56:08:6B:CE:93:51:DF:23:C7:75:F2:B1:F6:8A:31:F8:D0:24:DB:1D
Certificate issuer:       /CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
Certificate serial:       2E
Authority key identifier: 4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/VghrzpNR3yPHdfKx9oox-NAk2x0.roa
Signing time:             Tue 10 Jun 2025 10:48:28 +0000
ROA not before:           Tue 10 Jun 2025 10:48:28 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     146974
IP address blocks:        2400:1920::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
        Validity
            Not Before: Jun 10 10:48:28 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=56086BCE9351DF23C775F2B1F68A31F8D024DB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:99:06:b5:13:b8:d1:d2:2c:71:3d:d3:a1:
                    2e:5d:78:5e:c2:0d:79:ce:18:8e:39:59:4a:ae:70:
                    cb:ec:69:d9:81:a9:9c:bb:47:c6:f0:35:3c:bf:e6:
                    9c:54:09:e1:c8:ec:94:03:cb:ff:b3:53:c9:41:e3:
                    a1:6d:4d:92:72:d8:5a:e3:a2:67:f0:97:4c:9c:71:
                    e0:e1:12:e7:c2:cc:bc:83:99:e9:f6:c2:bd:58:3b:
                    f2:bc:fe:ab:c5:40:99:b7:b9:2a:da:26:4b:7a:ba:
                    7e:e4:5c:d2:83:2b:cb:67:67:c5:ca:00:ff:63:b4:
                    59:42:28:64:0c:b8:75:a2:4c:8d:3d:3b:fd:7c:35:
                    88:50:92:77:c2:3e:e1:02:ad:f2:f8:d6:9d:7d:d4:
                    c0:f7:9a:0b:be:f5:7a:39:ba:6f:b4:e4:ab:a1:7e:
                    0e:23:0a:2b:7d:96:d7:7d:57:4a:ff:40:c6:ca:9c:
                    fd:11:4a:db:c6:fc:b7:e0:fd:51:71:a1:71:32:6b:
                    f0:cf:9a:8c:fa:b7:5d:cb:d3:9c:a7:17:66:c8:65:
                    ec:dd:19:c5:e2:42:1c:30:77:59:5b:f8:ed:d9:7b:
                    c0:64:c3:49:7d:d4:be:9f:76:f2:7b:9c:aa:e8:6c:
                    47:98:da:d6:7f:e8:84:03:a5:29:9e:02:b4:47:a1:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:6B:CE:93:51:DF:23:C7:75:F2:B1:F6:8A:31:F8:D0:24:DB:1D
            X509v3 Authority Key Identifier:
                keyid:4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/VghrzpNR3yPHdfKx9oox-NAk2x0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:51:d6:fd:66:c9:b5:6e:01:65:1c:5a:07:de:cb:52:25:75:
         fb:79:6e:10:01:ab:e1:96:b8:59:68:59:91:16:fc:50:0b:ad:
         c1:80:ba:b7:50:c3:80:5b:53:30:9e:4f:10:d5:d2:c9:8f:8c:
         07:98:e8:f0:89:e5:7c:a4:f8:67:80:71:4d:14:ee:08:05:2c:
         fd:19:5e:a9:a6:a5:0b:31:b1:30:10:26:a8:e8:aa:f4:de:43:
         17:cc:14:58:a6:ae:a3:1d:ed:8f:a9:2c:76:dc:35:d0:0d:c7:
         c9:28:97:d1:12:52:74:a0:0f:e4:0c:b2:3e:7e:00:eb:fa:ea:
         f0:de:38:ba:a5:e8:0e:02:35:28:5d:a0:f5:d0:c6:8b:6e:00:
         68:94:ba:26:e7:51:cb:06:6c:d6:01:cf:c3:e1:bf:38:aa:f7:
         a3:16:cb:1b:4c:84:23:e0:b5:20:99:4b:f3:e3:aa:ab:a1:da:
         f9:9c:6e:5f:b5:37:0a:63:3e:11:cd:34:02:7d:d0:a3:c6:81:
         43:ee:da:fd:44:40:84:44:51:94:61:72:c6:13:e6:ef:db:06:
         97:54:50:61:ab:10:eb:84:37:af:df:ae:b3:2d:73:9d:70:3c:
         f3:34:1c:03:eb:ce:27:01:f0:4d:23:77:c7:b6:91:9b:35:0f:
         3d:03:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:22:09 2025 by rpki-client