Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30279/f7FvMYdFB5Y7ZlISAbErWhLFOB0.roa
File:                     f7FvMYdFB5Y7ZlISAbErWhLFOB0.roa (raw, json)
Hash identifier:          ipHCAs4QQGopImh3pFQcubN/XNtNd/u5+gyVxDGTDsI=
Subject key identifier:   7F:B1:6F:31:87:45:07:96:3B:66:52:12:01:B1:2B:5A:12:C5:38:1D
Certificate issuer:       /CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
Certificate serial:       5D
Authority key identifier: 16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/f7FvMYdFB5Y7ZlISAbErWhLFOB0.roa
Signing time:             Fri 01 Aug 2025 01:33:21 +0000
ROA not before:           Fri 01 Aug 2025 01:33:21 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     59105
IP address blocks:        2403:bd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
        Validity
            Not Before: Aug  1 01:33:21 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7FB16F31874507963B66521201B12B5A12C5381D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:61:17:fe:e1:f4:8d:2f:4a:f9:45:98:90:95:
                    e9:59:4b:34:38:d5:43:e3:05:c6:ef:11:69:83:b6:
                    1a:b2:3e:da:40:4b:fb:01:ec:da:cb:db:da:e9:10:
                    e7:1d:73:f7:e4:74:70:b9:0a:f6:51:8c:ef:25:8c:
                    a6:df:dd:76:f1:f5:0c:ec:fc:34:b6:dd:9b:09:6f:
                    e4:5e:5c:bc:96:98:73:36:e6:2b:7b:04:36:d2:c5:
                    20:d5:aa:55:90:2c:96:81:a0:5c:b3:f4:fc:49:3b:
                    4c:50:56:7c:f4:f4:76:9b:b4:67:65:f8:c1:0f:90:
                    df:66:7b:1e:08:34:48:27:2f:04:5b:88:17:3b:e2:
                    f2:07:35:3d:b2:c5:c9:cf:8f:08:02:72:37:ec:3f:
                    e3:95:8b:a4:9e:87:7b:e4:51:ae:0e:ff:c3:70:49:
                    87:93:a6:00:c3:96:43:24:a7:f4:da:8e:c4:52:c4:
                    2f:0e:f1:69:11:28:9a:20:71:1b:82:76:3e:62:33:
                    4d:74:f3:be:84:a7:80:91:eb:40:3b:d3:6b:57:9d:
                    7c:69:91:73:e0:ca:69:00:d1:8f:c4:e2:d1:ec:41:
                    cc:d7:d5:9c:92:51:a6:ab:7c:d5:3d:74:f0:bf:42:
                    06:1d:23:bf:02:35:f1:11:72:81:60:55:60:14:75:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:6F:31:87:45:07:96:3B:66:52:12:01:B1:2B:5A:12:C5:38:1D
            X509v3 Authority Key Identifier:
                keyid:16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/f7FvMYdFB5Y7ZlISAbErWhLFOB0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:95:2d:09:5b:3a:92:32:f8:f5:9a:30:20:b1:a2:19:5c:
         9c:06:ec:12:61:72:76:a9:9f:9c:e2:4b:3e:fa:50:29:89:78:
         23:03:7b:dc:e3:f2:c0:3b:f1:6c:99:42:b8:97:6b:61:35:a6:
         c6:7f:f0:76:26:30:6a:e5:57:0c:cb:bb:a1:56:30:3c:de:fb:
         c5:51:75:ba:ee:9f:94:40:45:20:da:c3:e5:3d:de:4c:25:06:
         de:fa:3e:99:89:c7:55:08:e2:21:17:bf:57:8a:e9:a8:07:33:
         4e:1f:b8:87:58:6c:7d:83:2d:25:fa:20:9c:36:df:9c:98:6b:
         20:e0:62:16:c4:8e:28:4a:2d:63:1b:a3:2f:03:47:13:3c:c2:
         9b:69:0d:09:8b:cd:6b:b0:b3:04:b5:51:df:42:ee:1f:57:29:
         0a:71:88:bd:cc:2f:fd:27:10:98:7c:4c:52:54:a9:0a:d5:39:
         bb:b8:21:29:f4:1f:c2:1a:aa:a3:22:ca:ce:ce:08:9b:8b:8a:
         33:67:76:e6:13:25:84:6c:3d:3d:6d:62:8b:a0:f2:24:1d:38:
         b0:16:30:4d:0e:21:21:3c:53:a9:4a:76:6d:d5:8a:8c:02:9a:
         c7:13:04:e7:6f:80:c6:a4:c4:06:ef:0e:8d:33:70:51:b0:d5:
         9c:6c:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:01:11 2025 by rpki-client