Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/FECYB7YFshePkqXgVZnxW9um28I.roa
File:                     FECYB7YFshePkqXgVZnxW9um28I.roa (raw, json)
Hash identifier:          SYeF2Qc6GUBZV62Ei2uMKD9hcDA0br1jE32ZrDcCatw=
Subject key identifier:   14:40:98:07:B6:05:B2:17:8F:92:A5:E0:55:99:F1:5B:DB:A6:DB:C2
Certificate issuer:       /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Certificate serial:       3E
Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/FECYB7YFshePkqXgVZnxW9um28I.roa
Signing time:             Fri 01 Aug 2025 01:35:06 +0000
ROA not before:           Fri 01 Aug 2025 01:35:06 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24277
IP address blocks:        2407:58c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Validity
            Not Before: Aug  1 01:35:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=14409807B605B2178F92A5E05599F15BDBA6DBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:8f:bd:57:77:cb:2c:ce:c1:87:ed:62:74:
                    41:3e:17:96:d2:2f:ce:9c:36:78:d0:2d:4f:fc:73:
                    f4:0c:bd:bc:be:31:3b:a7:a4:b5:5a:00:19:73:e1:
                    93:be:23:1e:af:33:5a:c3:4b:86:37:f0:22:3d:cf:
                    cf:19:69:1b:ae:ed:e3:d8:0f:9a:a8:b8:1c:a9:54:
                    ed:ec:21:e1:c3:51:b3:4f:04:03:7b:7e:93:ba:b7:
                    72:ba:11:20:60:89:9f:cf:16:8b:6c:9a:8e:2f:40:
                    d5:3f:df:58:eb:ae:6e:99:eb:5a:ac:da:aa:05:b3:
                    07:89:4e:1d:32:56:e1:1c:9a:34:ed:2e:ae:3c:e6:
                    7a:6d:c4:a7:08:01:9a:62:52:c9:9f:ac:fa:aa:cc:
                    26:3a:d8:6f:30:41:d5:7a:3b:85:5d:c0:0e:07:62:
                    bd:3a:cf:05:10:fe:f9:92:2d:43:97:b1:60:68:41:
                    2e:43:c7:4f:7f:63:46:01:db:63:81:6d:15:d2:49:
                    83:94:ac:2c:e8:f0:89:6b:30:a0:27:72:2b:57:19:
                    a7:0c:d3:37:df:fe:f5:c8:13:7d:2d:63:fb:d3:8e:
                    3a:0c:2b:65:c9:39:73:e3:dd:75:80:a8:24:22:23:
                    cf:c4:5d:2d:94:d2:ad:df:4f:3d:78:a8:81:be:8c:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:98:07:B6:05:B2:17:8F:92:A5:E0:55:99:F1:5B:DB:A6:DB:C2
            X509v3 Authority Key Identifier:
                keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/FECYB7YFshePkqXgVZnxW9um28I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:b4:3a:2f:ec:7f:91:b2:2a:2c:f1:62:35:98:69:4a:38:
         ec:45:9b:13:5b:05:8e:c1:53:6c:5b:85:63:a6:af:b4:30:9b:
         b2:68:7f:0e:27:dd:17:25:b0:62:06:73:38:e6:a0:6f:8f:6c:
         80:1a:13:d8:d8:71:e4:c0:45:ec:f6:fe:18:01:8e:91:c5:4d:
         6a:68:4d:21:4b:0c:59:18:cb:e3:08:a0:01:ac:6e:63:78:7e:
         f2:8c:39:41:20:21:d9:f8:70:ab:11:6a:32:00:10:d3:5f:a4:
         ee:41:7e:c4:5b:65:fe:96:ca:38:c3:7d:c0:27:3c:ab:57:61:
         1f:78:ee:27:c6:cf:c5:c0:d0:fe:eb:8a:a6:34:5f:84:89:11:
         6e:9e:48:d9:d8:f9:57:c8:d7:f1:ce:96:46:99:bd:17:8e:9c:
         86:99:13:7d:4d:65:b2:1b:c7:fe:fe:f4:73:23:0a:64:4a:f8:
         1c:c6:75:86:70:49:c7:bd:b3:5d:90:df:ff:15:b1:c3:21:96:
         5c:7d:3d:ec:da:e6:5b:46:73:91:6c:ef:51:a8:23:55:39:1b:
         8d:f9:cb:2c:2c:ed:fb:ed:5b:4f:de:fa:3c:d7:99:c1:b0:95:
         64:a8:e5:88:7b:b1:58:b2:32:a3:e7:29:1e:ec:d1:71:8a:e7:
         f8:ae:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:14:08 2025 by rpki-client