Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa
File:                     nrQp7yjxSWPwhUYIfMmx6A42WOw.roa (raw, json)
Hash identifier:          vLZY0EJXHAE9yWoOd+s8xAbymhAsi2HgKx1TXk7Gb/c=
Subject key identifier:   9E:B4:29:EF:28:F1:49:63:F0:85:46:08:7C:C9:B1:E8:0E:36:58:EC
Certificate issuer:       /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Certificate serial:       23
Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa
Signing time:             Fri 01 Aug 2025 01:36:14 +0000
ROA not before:           Fri 01 Aug 2025 01:36:14 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        2402:3000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
        Validity
            Not Before: Aug  1 01:36:14 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9EB429EF28F14963F08546087CC9B1E80E3658EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:d2:2e:76:d4:67:ee:1c:f3:b4:6a:b4:b7:
                    91:37:a4:42:76:dc:95:73:e4:4f:11:cd:de:9d:d9:
                    c2:f8:7f:68:9c:67:a5:1c:df:d6:cd:04:5a:95:57:
                    77:f2:75:f1:41:22:49:8d:d5:db:1b:38:dc:9a:82:
                    b6:84:ab:56:d9:05:f7:70:99:93:3c:3e:9a:67:e5:
                    5e:14:8e:db:3e:c6:77:4f:6e:b8:a0:45:71:7e:9a:
                    8a:9a:b1:75:e3:26:06:e9:3c:e5:67:d7:ac:bd:56:
                    b8:3c:f3:16:5d:aa:47:e5:a6:44:38:ed:68:78:a7:
                    b4:f0:51:26:dc:4b:f6:59:60:b6:96:8d:9c:33:20:
                    c6:99:f2:19:ea:fa:f0:d2:59:82:74:f0:d5:69:46:
                    45:94:d6:7d:bb:46:93:96:50:f1:9b:0d:98:75:a0:
                    5a:82:31:9c:3f:2b:36:9e:71:3e:34:9a:4b:08:2e:
                    81:6c:14:19:7d:7c:c7:db:db:85:a2:f0:0b:a2:1e:
                    f7:aa:96:71:95:16:8f:8b:32:2c:d6:76:af:d6:e9:
                    90:e9:48:3f:45:85:1d:9a:48:7a:dd:a3:96:6e:85:
                    42:14:db:98:11:8f:2a:78:f9:56:01:a6:51:3c:d9:
                    67:cc:f5:ed:d2:05:26:d1:66:7d:66:3c:f6:ed:73:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:29:EF:28:F1:49:63:F0:85:46:08:7C:C9:B1:E8:0E:36:58:EC
            X509v3 Authority Key Identifier:
                keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:1d:cf:6d:af:1f:88:6f:53:f7:4b:9d:3d:41:10:a0:ba:
         30:d3:a1:e9:cf:d4:50:07:71:3d:1a:de:21:f2:db:4b:f0:49:
         4c:42:5d:6f:c9:9a:5a:52:eb:25:ab:f7:95:c9:f8:88:69:10:
         dd:c7:c2:f1:0e:6a:e0:8e:0e:3e:7e:0f:47:a2:72:e5:f7:b0:
         b4:fc:fc:2c:1a:90:08:cd:13:64:62:ab:59:6e:cf:8f:97:a2:
         c8:ff:fe:93:ef:97:f1:07:e0:4b:8e:69:b5:20:ca:2d:3e:09:
         2c:a9:90:1d:06:0b:1c:0d:06:dc:0c:1b:b1:fd:5c:a0:95:64:
         fe:5e:2e:dc:24:1f:9b:32:ee:6e:da:e8:02:30:0c:26:67:3f:
         72:43:58:59:58:b6:96:03:5e:fa:41:81:f0:a9:1f:02:55:b1:
         34:aa:d7:76:36:bc:6a:d6:fa:74:34:cf:36:3d:a1:ae:2d:7d:
         e1:f6:8a:3e:8d:b0:ed:c3:21:5a:f2:77:d9:f9:8d:0b:fc:68:
         e7:1c:bb:3e:14:e2:8d:65:a8:dd:d7:65:ed:81:89:8b:a9:28:
         22:c9:00:6b:8c:f4:54:39:b3:4e:09:40:61:d3:2e:f0:46:75:
         4d:70:2e:bc:f3:71:a8:9e:dc:32:9a:43:3e:29:bb:49:b8:de:
         28:17:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:40:18 2025 by rpki-client