Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30080/KSIRfFZ09zME6whk9XtnwJ-fMH4.roa
File:                     KSIRfFZ09zME6whk9XtnwJ-fMH4.roa (raw, json)
Hash identifier:          Qfzswxl31fvQ5dsv+g4JEzMW0lp836mp7BCRvnMFQkg=
Subject key identifier:   29:22:11:7C:56:74:F7:33:04:EB:08:64:F5:7B:67:C0:9F:9F:30:7E
Certificate issuer:       /CN=82B5396882AE787524B1D26734661DFCB9F25600
Certificate serial:       12
Authority key identifier: 82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/KSIRfFZ09zME6whk9XtnwJ-fMH4.roa
Signing time:             Thu 03 Apr 2025 06:41:25 +0000
ROA not before:           Thu 03 Apr 2025 06:41:25 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17955
IP address blocks:        2406:8000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B5396882AE787524B1D26734661DFCB9F25600
        Validity
            Not Before: Apr  3 06:41:25 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2922117C5674F73304EB0864F57B67C09F9F307E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:9c:e7:d0:18:7b:d4:9a:5e:51:5c:23:77:
                    13:b4:f8:75:5b:3d:97:58:c8:19:c5:40:b3:e4:23:
                    12:92:f2:0f:73:d1:40:26:af:5a:9b:34:8c:8c:6b:
                    73:56:0d:40:d5:37:1f:fa:bd:c8:34:1c:85:07:b1:
                    50:78:2c:be:eb:13:20:21:84:dc:d0:b7:86:13:c9:
                    da:14:92:4e:4e:34:c7:b7:43:40:9f:4b:c6:9a:a3:
                    21:a0:d3:ed:5f:16:5b:2e:1d:68:55:20:bf:78:2d:
                    7d:a3:76:1d:24:83:c5:55:d6:d5:9d:e2:55:c3:cd:
                    38:0b:ca:3b:68:6d:87:04:c3:d2:ac:1a:75:61:34:
                    87:09:e2:8a:ff:37:0e:af:6d:59:38:80:13:3f:f9:
                    00:17:7c:c1:4d:0c:bb:c1:a3:ef:f6:c3:be:67:fe:
                    f6:a5:71:4b:0e:a6:d9:b9:f8:29:30:6c:8b:45:64:
                    07:a1:b1:cc:a0:51:48:ad:7f:70:5e:38:3f:9b:bc:
                    5a:3f:9f:26:70:15:bb:79:13:3e:19:d6:17:c8:a7:
                    db:b1:15:33:0b:6a:7d:61:08:b4:9e:ac:2c:10:09:
                    41:9e:d0:85:63:66:9e:61:06:52:63:6c:65:7a:02:
                    1e:32:36:c9:6f:87:2a:5b:2f:7c:2e:fb:d7:87:1f:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:11:7C:56:74:F7:33:04:EB:08:64:F5:7B:67:C0:9F:9F:30:7E
            X509v3 Authority Key Identifier:
                keyid:82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/KSIRfFZ09zME6whk9XtnwJ-fMH4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:14:96:61:a2:f8:15:92:19:cc:c6:af:d7:1d:56:3a:28:62:
         27:1b:47:fd:b1:4c:6c:31:7c:b0:46:4d:c3:84:03:ec:49:3a:
         b4:a3:21:4b:03:e4:94:64:aa:44:7a:4f:55:1c:1f:36:f3:79:
         23:e5:b2:06:10:65:71:0b:5f:7c:eb:60:70:e1:16:b6:ec:bc:
         5d:23:01:54:fa:4a:fd:c9:36:98:e9:f8:48:91:67:ae:1b:bf:
         c6:b4:ce:9d:d2:19:9c:78:b4:11:bd:c7:43:03:15:76:ac:11:
         d4:72:38:a6:34:26:b4:04:6c:1b:7c:81:87:e4:02:9b:c3:ed:
         9e:de:e2:5a:a6:c3:3d:41:19:13:df:da:55:2d:e4:b0:20:2f:
         27:93:8a:07:c2:6c:03:1e:2a:e2:8d:28:ac:00:7b:3c:3e:f4:
         f3:01:5e:67:b1:7f:af:34:f4:41:b5:f1:c8:3a:96:a6:25:02:
         00:6e:6c:53:82:af:c4:e3:7e:36:9b:35:05:74:77:fb:21:76:
         d3:62:3e:82:ba:8f:d6:c3:7a:a0:72:61:ff:96:41:78:b3:88:
         f9:93:31:d2:47:e2:f4:ac:21:2b:0b:da:02:c0:91:8c:05:06:
         97:0c:c5:00:d8:7b:55:8f:5e:03:f1:8d:af:bc:fc:f5:15:76:
         18:f0:44:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:47 2025 by rpki-client