Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30368/9bnB5gM2BPoQq5cQfr8KAzMX3zw.roa
File:                     9bnB5gM2BPoQq5cQfr8KAzMX3zw.roa (raw, json)
Hash identifier:          puL/i+dX1YERdMBRe1vCd/s6JUEVDa1x3R+BRpgFchs=
Subject key identifier:   F5:B9:C1:E6:03:36:04:FA:10:AB:97:10:7E:BF:0A:03:33:17:DF:3C
Certificate issuer:       /CN=C0666494C79D30AD5FEB98EA1ABC97CB87073F70
Certificate serial:       13
Authority key identifier: C0:66:64:94:C7:9D:30:AD:5F:EB:98:EA:1A:BC:97:CB:87:07:3F:70
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/9bnB5gM2BPoQq5cQfr8KAzMX3zw.roa
Signing time:             Thu 17 Apr 2025 02:17:36 +0000
ROA not before:           Thu 17 Apr 2025 02:17:36 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     37922
IP address blocks:        2406:a3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0666494C79D30AD5FEB98EA1ABC97CB87073F70
        Validity
            Not Before: Apr 17 02:17:36 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F5B9C1E6033604FA10AB97107EBF0A033317DF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:b3:f0:73:21:99:40:06:77:7d:c7:e8:86:
                    c2:3e:1f:6b:67:29:3c:dd:25:44:90:b2:f5:ed:5c:
                    89:db:de:ea:6e:88:6b:a7:db:9d:85:60:9c:ef:66:
                    8e:96:84:93:3d:9a:df:44:4b:ca:b9:ad:66:bd:12:
                    e6:2b:cb:84:22:5d:d7:a9:54:77:9f:01:67:a8:d7:
                    7d:d4:f9:2e:8f:2e:16:aa:01:0c:7a:8a:ec:41:c3:
                    b1:e2:28:22:a3:2d:16:49:f2:20:34:83:a4:70:64:
                    04:80:7f:0b:0c:ab:1d:8e:53:ef:fc:82:9e:32:96:
                    11:29:12:5c:e4:59:0d:8a:ea:eb:c6:9f:8f:db:b3:
                    d8:37:62:b0:f4:d7:6b:34:3b:16:e0:05:9e:db:33:
                    0d:80:31:6c:2a:a0:81:ec:b3:f3:7e:f7:90:1d:bb:
                    e2:7a:4a:c6:97:c9:79:72:27:97:a6:e4:db:19:b6:
                    b7:bb:2a:1e:e8:21:28:b0:09:5c:aa:99:0d:21:bb:
                    74:4c:c2:5c:02:ee:90:d6:fa:de:32:94:d6:86:0d:
                    e0:40:00:1e:4f:95:97:ee:11:61:a0:93:ed:3e:41:
                    83:48:a7:3b:88:8f:9f:df:16:85:fd:b9:f5:a6:f2:
                    f4:78:f7:5e:56:c4:5c:29:75:d6:9e:28:2d:7f:d5:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B9:C1:E6:03:36:04:FA:10:AB:97:10:7E:BF:0A:03:33:17:DF:3C
            X509v3 Authority Key Identifier:
                keyid:C0:66:64:94:C7:9D:30:AD:5F:EB:98:EA:1A:BC:97:CB:87:07:3F:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/9bnB5gM2BPoQq5cQfr8KAzMX3zw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:37:1a:bc:fa:5a:7f:04:6f:fc:9a:3f:99:3b:a0:0b:54:6d:
         7a:fc:ee:c9:c7:b2:67:f1:0f:e3:b9:61:1a:61:fb:23:21:a3:
         84:e8:1c:94:b1:80:45:80:47:79:7c:ba:9c:98:71:12:52:45:
         f7:ad:b6:97:f5:c8:19:ac:d4:e1:b9:79:20:e2:40:72:eb:8c:
         b5:6f:ae:2d:aa:83:3f:f8:d6:69:f4:a9:0a:c0:b5:9f:8b:01:
         e9:07:ba:f6:ce:2d:02:a3:36:de:8e:5b:38:b8:0b:46:cd:4e:
         20:8d:48:54:15:62:81:23:7c:98:a5:3b:85:1d:0c:42:bd:81:
         79:d7:5b:98:55:d2:3d:43:d2:a8:18:c9:ca:60:5c:cb:71:d4:
         50:50:ad:9f:99:4d:24:bb:85:30:e5:7e:74:42:d0:13:4a:f5:
         bb:7a:28:99:95:84:48:fc:c1:27:d3:73:43:a8:7d:cd:9c:d5:
         04:7d:0b:19:af:5e:f6:bf:7b:6a:6e:2a:50:48:b3:5b:e1:5e:
         c7:f0:2a:1b:99:bc:24:43:99:83:a8:21:f7:83:82:1f:39:55:
         91:e3:9c:8d:b6:c1:a1:77:ac:0b:87:85:61:79:bc:bd:5c:53:
         ee:73:e5:31:55:83:21:82:c3:eb:0d:4b:49:9c:36:8c:49:d6:
         ca:7b:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:26 2025 by rpki-client