Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa
File:                     SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa (raw, json)
Hash identifier:          6QbL946kEypxQdnrV2RPoRf+4i0+ug7Fs0mz81CCzgg=
Subject key identifier:   48:20:5A:AB:7C:01:FA:AF:38:9F:E6:F0:4B:E5:92:26:76:75:74:1B
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       2F
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa
Signing time:             Fri 01 Aug 2025 01:31:56 +0000
ROA not before:           Fri 01 Aug 2025 01:31:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     20940
IP address blocks:        2403:c780:7203::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: Aug  1 01:31:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=48205AAB7C01FAAF389FE6F04BE592267675741B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:0a:64:04:65:d6:53:c8:b4:5c:f0:36:8f:
                    21:8c:11:62:52:32:de:5d:b4:01:45:c7:44:de:64:
                    55:5f:28:71:bb:58:d2:97:6a:13:f5:f8:05:7a:b7:
                    dd:5f:ae:2a:ff:8d:e2:e4:6d:65:2f:f0:aa:8f:75:
                    35:0e:3b:34:4e:8e:69:36:1f:2a:64:a9:2d:94:bc:
                    62:50:00:56:77:80:ee:9a:fd:66:ef:f4:a1:b8:4a:
                    b3:11:20:eb:a1:92:85:f8:1c:6b:3f:f5:bd:c5:0f:
                    a4:0d:12:97:d5:76:d3:31:55:cf:91:9a:b5:f7:d3:
                    d6:0b:8a:09:f3:21:18:0f:43:bd:92:94:db:f1:c1:
                    98:2c:14:ed:71:a9:e7:9b:6d:b9:90:ad:72:1e:44:
                    8f:ad:f2:3f:72:d0:72:7f:b0:1e:b7:af:2d:d3:9d:
                    ca:28:8a:b2:8d:1b:df:c6:76:2b:24:fe:35:9b:0c:
                    83:ae:aa:59:9b:52:57:97:77:35:cc:28:1c:6e:01:
                    5d:2a:3f:0a:5e:ca:70:0e:b5:3c:04:a4:36:d8:49:
                    fa:bb:62:dd:a7:9a:e2:a8:b4:d3:47:d0:3e:67:51:
                    44:af:6f:27:d1:63:4c:34:6d:9a:26:19:3f:ca:8a:
                    3b:e9:6e:8b:54:64:d3:b7:c9:af:ff:38:a9:9f:7d:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:20:5A:AB:7C:01:FA:AF:38:9F:E6:F0:4B:E5:92:26:76:75:74:1B
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:7203::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:12:ea:97:f3:f0:e7:fe:f7:5c:ca:ab:a9:b8:34:4e:65:8e:
         6f:8d:d5:1c:e8:7c:55:47:a1:e1:f2:08:c1:3d:8b:31:a8:a4:
         9f:ca:a5:4f:ef:d8:5c:fd:e5:cf:67:d6:53:00:79:62:e6:c2:
         a7:09:7f:4c:fc:6b:d8:f8:03:b2:4f:3e:01:33:84:1e:55:0d:
         41:8f:02:fd:ab:67:b9:26:d9:d0:f0:7f:ae:d7:2d:37:a9:2c:
         0a:f7:fd:69:c9:07:ec:b6:aa:2e:e9:4b:ff:a5:f9:45:a2:6e:
         5a:f4:dd:5b:5f:6f:20:d2:ec:7a:94:ef:dd:e8:fd:18:79:07:
         7c:31:3c:8e:92:ec:73:bd:8a:e5:95:9f:60:42:57:38:c2:68:
         d1:da:3e:c5:5b:b0:ff:a7:0d:54:7c:47:ff:ff:1c:6c:2f:55:
         74:52:38:ad:bb:42:98:b1:aa:af:3c:34:14:b5:a0:7a:d1:3c:
         23:5e:3c:84:70:ea:3a:60:6b:b9:e5:cb:73:c3:d3:76:33:b6:
         f0:6f:c0:49:39:28:7c:4a:97:86:da:88:83:cf:50:95:77:dc:
         99:30:5d:18:d1:13:9f:ab:d3:4b:f6:a5:42:6a:19:14:7e:2d:
         99:fd:a6:f6:97:4b:e8:38:5a:09:24:b0:9a:63:8e:ba:8b:e8:
         58:ea:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:32:13 2025 by rpki-client