Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30152/7Gck7pEQ4JegF4pMc8nkyimYAlU.roa
File:                     7Gck7pEQ4JegF4pMc8nkyimYAlU.roa (raw, json)
Hash identifier:          p8iWJSvqoQ0VqpdSq4nv2x6OC/pG/KESBqnuo37yz0Y=
Subject key identifier:   EC:67:24:EE:91:10:E0:97:A0:17:8A:4C:73:C9:E4:CA:29:98:02:55
Certificate issuer:       /CN=32A9405644783B786C8DDF2454BB5BDF511983B4
Certificate serial:       23
Authority key identifier: 32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/7Gck7pEQ4JegF4pMc8nkyimYAlU.roa
Signing time:             Fri 01 Aug 2025 01:32:13 +0000
ROA not before:           Fri 01 Aug 2025 01:32:13 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18121
IP address blocks:        2404:a00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A9405644783B786C8DDF2454BB5BDF511983B4
        Validity
            Not Before: Aug  1 01:32:13 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EC6724EE9110E097A0178A4C73C9E4CA29980255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:46:f7:b2:84:97:c4:31:2c:f2:75:0e:54:
                    db:64:5a:a6:74:0a:58:00:9e:05:82:b1:1e:99:26:
                    89:ed:d8:1d:41:8e:63:62:f8:40:e7:37:f4:8c:c4:
                    c8:7b:15:98:12:11:ab:5c:1d:e7:81:13:51:4f:5d:
                    bb:9c:7f:01:d6:89:a3:e3:23:80:b0:79:d5:53:ef:
                    c6:53:c3:34:a9:dd:f8:35:82:54:6a:1b:3f:31:6c:
                    ff:53:a1:71:c8:87:02:f9:e3:02:ac:87:d4:b5:8d:
                    67:f8:90:ac:dd:7f:8a:77:87:7f:cd:cf:ae:70:d3:
                    0e:1e:eb:74:9e:eb:fb:fd:be:d1:b9:0e:c5:b8:e2:
                    a3:bb:2e:ed:d4:cb:fa:95:e5:da:35:b3:fb:77:0b:
                    b0:2a:ff:39:10:d7:df:ff:32:34:0b:1f:d5:19:da:
                    99:a0:eb:16:6b:94:0a:29:0a:65:02:09:f8:ed:20:
                    f7:21:fd:74:50:08:10:14:88:1b:ce:a8:48:c2:dd:
                    a7:a2:8a:df:b4:66:ab:87:02:f2:8c:56:7d:6d:39:
                    90:24:4d:58:d3:cd:7f:7c:5a:ce:ee:4c:38:39:d9:
                    49:c8:64:b5:60:81:74:02:71:78:97:6d:00:d2:50:
                    30:68:51:b7:da:16:dd:75:b2:4b:3d:8f:e5:bc:a3:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:67:24:EE:91:10:E0:97:A0:17:8A:4C:73:C9:E4:CA:29:98:02:55
            X509v3 Authority Key Identifier:
                keyid:32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/7Gck7pEQ4JegF4pMc8nkyimYAlU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:f5:f1:c7:88:1c:c6:b8:77:3e:1c:5c:7d:1c:b8:21:2e:
         02:23:ab:ac:34:4d:e1:c0:93:70:ab:26:ce:20:95:57:57:84:
         8d:d9:06:c4:54:ee:f3:67:44:3d:10:20:c9:47:df:45:f6:cd:
         94:db:fa:a9:eb:e1:15:e3:1f:17:7b:09:4e:3d:6f:e5:07:9c:
         68:e7:f5:8b:51:87:6b:b0:77:22:dd:90:4e:4b:b1:80:01:ca:
         6e:e8:b0:67:1e:14:7a:d3:01:de:27:9f:a5:cf:2d:c1:0d:30:
         49:d2:3f:70:7c:3b:aa:25:fb:aa:a7:21:24:b9:80:a7:41:51:
         34:be:31:c3:96:0b:1d:e1:5c:e2:a3:79:05:25:b9:4e:81:89:
         e2:8f:0a:24:39:3d:85:e7:ed:af:5d:6c:a7:a7:55:81:63:af:
         d7:28:44:06:8d:ad:2f:42:1c:1e:b4:97:bb:bf:fa:86:d8:ce:
         da:24:75:0a:ff:d5:bf:42:16:d6:d5:1e:bd:e6:b1:da:45:fa:
         c5:24:26:91:7e:f5:0e:5d:c0:f3:0d:35:d1:30:85:0d:d8:8d:
         4c:95:8f:ed:dd:0c:24:04:69:59:4b:1b:00:e2:d7:95:f7:1f:
         43:37:4b:47:5c:68:40:57:6b:b5:30:f0:70:bd:6e:77:c7:a9:
         0f:29:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:09:52 2025 by rpki-client