Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
File:                     nI838UGau49QEdF4UQd8z8wBXHA.roa (raw, json)
Hash identifier:          9Pl6rblN4qMxLJmSc+W3wZVGSr6xp9NgQu/OOSgBcI8=
Subject key identifier:   9C:8F:37:F1:41:9A:BB:8F:50:11:D1:78:51:07:7C:CF:CC:01:5C:70
Certificate issuer:       /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Certificate serial:       15
Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
Signing time:             Sat 26 Jul 2025 13:07:47 +0000
ROA not before:           Sat 26 Jul 2025 13:07:47 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     63801
IP address blocks:        2401:b420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
        Validity
            Not Before: Jul 26 13:07:47 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=9C8F37F1419ABB8F5011D17851077CCFCC015C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:35:83:9e:a1:48:50:a8:8d:db:82:5c:69:
                    99:27:bd:c4:f7:e0:d3:37:6b:f1:00:19:6c:e7:f0:
                    f5:5d:a2:e0:8d:81:77:4f:e1:8e:5a:7f:ae:43:c3:
                    8f:c8:ac:2d:a1:5a:7d:94:20:c9:cd:45:e4:09:46:
                    cd:1c:df:b7:42:91:d9:d3:8c:0b:c5:32:bc:4f:f1:
                    84:90:77:8c:89:7e:b1:6c:55:11:95:b0:0d:de:29:
                    d3:8a:fa:b0:aa:bd:59:47:7d:35:a0:82:6d:ed:e7:
                    f2:81:3b:9c:b1:1d:6b:50:ef:f4:8b:00:8a:18:63:
                    b4:97:2e:13:18:79:19:6f:fd:ea:45:b4:56:2e:3c:
                    c8:b5:90:17:f5:02:0a:46:67:4e:43:ec:ad:9c:83:
                    c3:34:0b:e7:00:01:e5:5e:d8:51:17:66:e5:bf:c4:
                    36:a3:d4:05:d7:95:60:8a:82:ca:dc:c7:a6:99:c1:
                    dc:54:cb:ef:d7:d7:3d:5e:22:ec:22:a5:71:26:05:
                    83:b0:a4:ff:11:cb:88:65:70:92:6b:f4:8d:1e:a6:
                    1c:34:b4:6a:8b:ab:6a:d2:f5:66:06:27:56:e4:39:
                    56:1c:21:d1:6e:55:48:bc:90:34:1d:4a:44:9f:22:
                    38:68:84:58:14:da:8b:e5:1a:51:e3:a8:37:84:b9:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:37:F1:41:9A:BB:8F:50:11:D1:78:51:07:7C:CF:CC:01:5C:70
            X509v3 Authority Key Identifier:
                keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/nI838UGau49QEdF4UQd8z8wBXHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:85:87:11:a7:ec:62:04:48:cd:05:c1:41:91:86:1c:db:b2:
         53:e6:9b:83:89:bb:25:53:70:91:cb:18:ca:12:5b:b5:07:39:
         d1:2d:9b:e4:e3:37:bd:8a:ae:19:56:45:00:90:a3:19:d1:fa:
         8f:d8:7b:63:5f:39:cc:db:47:02:21:97:ca:c0:69:1c:9b:b5:
         35:93:bc:31:a6:a8:e3:1b:3b:79:ca:25:54:a2:bd:e8:c3:28:
         ee:ff:14:54:ed:97:dc:13:e9:98:9f:0e:10:64:d8:16:32:69:
         f8:b7:f9:bd:09:01:72:38:b8:a3:a9:fe:9a:2c:48:92:e5:2c:
         0c:e8:d2:ad:16:f2:ef:f9:ec:f8:65:9e:fd:d9:1e:b9:6e:be:
         6e:9f:ab:ee:9f:d3:ae:bf:93:73:d2:2c:24:b6:0b:21:8e:03:
         51:7c:fe:c6:4d:4d:3b:81:77:f8:4d:8b:99:65:03:f5:2d:d1:
         c3:2a:8b:b2:0c:5a:7c:15:73:d7:db:43:59:89:13:a2:49:88:
         96:8a:09:3d:89:d7:c4:69:dc:9f:f0:61:d3:0e:17:85:29:7e:
         48:44:c6:77:13:11:e7:87:de:cb:43:5a:7e:5f:0a:80:b3:ae:
         87:6a:88:72:bf:f5:d5:87:5c:2e:f0:f9:07:3b:4c:69:e8:82:
         70:bc:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:21:13 2025 by rpki-client