Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30401/Y4JRmeOq7K3KvS1u0jU_VMtPr-M.roa
File:                     Y4JRmeOq7K3KvS1u0jU_VMtPr-M.roa (raw, json)
Hash identifier:          uNGrufC2Kt0uLukgLNATQDpQ7NXxmYC6v1u6C8xO7Ac=
Subject key identifier:   63:82:51:99:E3:AA:EC:AD:CA:BD:2D:6E:D2:35:3F:54:CB:4F:AF:E3
Certificate issuer:       /CN=0385E3DE4BBF017034BC7083637F05DA4F473533
Certificate serial:       2E
Authority key identifier: 03:85:E3:DE:4B:BF:01:70:34:BC:70:83:63:7F:05:DA:4F:47:35:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/Y4JRmeOq7K3KvS1u0jU_VMtPr-M.roa
Signing time:             Tue 10 Jun 2025 10:48:25 +0000
ROA not before:           Tue 10 Jun 2025 10:48:25 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     63795
IP address blocks:        2400:7ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0385E3DE4BBF017034BC7083637F05DA4F473533
        Validity
            Not Before: Jun 10 10:48:25 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=63825199E3AAECADCABD2D6ED2353F54CB4FAFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:60:3c:2c:11:b6:86:09:00:1c:6c:81:c2:
                    de:ff:87:12:a6:4f:97:c7:17:4c:43:bb:2d:47:50:
                    84:d7:1d:c1:68:36:8a:7a:05:29:69:00:0b:15:5b:
                    b6:0b:ea:61:08:46:28:bc:13:88:17:93:f7:8b:05:
                    98:50:25:99:e4:be:18:b3:05:88:27:df:59:aa:12:
                    53:d4:7f:6d:e3:28:73:cb:7e:27:99:17:65:6a:7b:
                    31:80:2e:27:03:1c:48:f5:6a:ca:1f:12:e4:24:12:
                    f6:67:3f:4a:0d:3b:97:9f:26:27:22:d9:9c:5f:39:
                    77:0d:7e:26:59:21:9a:e4:e3:25:5e:1d:80:3b:72:
                    b0:43:43:19:38:06:b8:1b:bb:70:93:ad:f6:4a:60:
                    c2:81:24:70:bf:a0:20:ec:68:20:94:bf:6b:05:4c:
                    db:9f:6d:49:62:c3:e9:62:1e:73:ba:3d:b7:3e:75:
                    21:66:97:d2:7d:1c:0c:1d:6e:5c:28:81:fb:59:d6:
                    61:8b:fe:bf:0f:48:d5:d7:f0:83:f7:14:89:d6:7c:
                    49:c7:56:31:e1:88:85:cc:a6:9f:01:76:a9:a6:a3:
                    76:8a:bb:ee:83:df:c9:31:80:78:0c:c5:a2:96:b6:
                    85:04:90:30:9c:47:6a:b5:54:f1:03:89:82:c2:ad:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:51:99:E3:AA:EC:AD:CA:BD:2D:6E:D2:35:3F:54:CB:4F:AF:E3
            X509v3 Authority Key Identifier:
                keyid:03:85:E3:DE:4B:BF:01:70:34:BC:70:83:63:7F:05:DA:4F:47:35:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/A4Xj3ku_AXA0vHCDY38F2k9HNTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A4Xj3ku_AXA0vHCDY38F2k9HNTM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30401/Y4JRmeOq7K3KvS1u0jU_VMtPr-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d9:e9:89:cd:0e:7f:21:ed:4c:db:be:e6:15:03:e6:4f:70:
         a2:28:f2:a0:c6:08:41:e3:28:c1:9a:b9:cf:d1:25:c7:f5:d7:
         e0:75:92:27:08:8c:b6:47:3f:a4:b1:ba:d6:25:c4:a3:97:a3:
         6f:4d:ae:6a:64:6d:7d:6e:eb:36:e4:1b:f5:a3:74:9c:6e:6a:
         83:e3:51:d1:a0:9d:36:78:a8:aa:0d:ed:17:fa:65:03:ca:56:
         16:ac:a3:71:e5:fd:5f:6b:f7:5f:61:9e:8e:f5:37:88:5e:a6:
         44:7e:24:e4:50:e1:35:9b:d5:4b:bc:70:8d:c9:c7:a7:e9:88:
         c9:e9:20:f1:12:44:f0:ed:99:82:a8:d1:57:27:3e:75:64:c8:
         54:bb:6d:d4:4a:63:28:cb:f5:13:6f:07:3a:6d:17:bb:97:58:
         75:ac:ef:60:22:83:e1:b1:27:72:a8:de:07:b5:56:9c:d9:10:
         ba:a0:4d:7c:20:38:f1:ac:77:00:cc:98:37:9c:36:87:70:d3:
         8b:4e:78:65:01:5b:d1:45:66:8b:ed:cf:db:5f:8c:db:f8:3f:
         28:dd:da:a8:8b:6c:4a:fb:33:b7:7f:fa:70:74:39:cd:3f:0c:
         fa:fa:c6:1d:2f:31:72:35:16:03:c8:9d:d1:35:85:d8:15:b5:
         b2:bf:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:38:30 2025 by rpki-client