Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/o6oqpOHB_2PDg7OFzgpcOA39H0Y.roa
File:                     o6oqpOHB_2PDg7OFzgpcOA39H0Y.roa (raw, json)
Hash identifier:          9heYQ0YQH6ZCKh8pS5lBT2WlNryA/fjHs6z2U1yK3G4=
Subject key identifier:   A3:AA:2A:A4:E1:C1:FF:63:C3:83:B3:85:CE:0A:5C:38:0D:FD:1F:46
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       16
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/o6oqpOHB_2PDg7OFzgpcOA39H0Y.roa
Signing time:             Thu 27 Feb 2025 02:54:00 +0000
ROA not before:           Thu 27 Feb 2025 02:54:00 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        2405:7000:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Feb 27 02:54:00 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=A3AA2AA4E1C1FF63C383B385CE0A5C380DFD1F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:63:be:4d:a5:7e:6b:0b:5f:5f:aa:4a:eb:
                    fb:9c:e4:f9:c0:85:08:f9:12:de:c2:a1:ca:4b:d8:
                    e7:93:80:3f:14:2e:4c:d0:e5:92:71:22:66:7f:20:
                    e1:5c:53:0e:8e:1b:3e:28:0e:38:ca:e5:1a:b3:b1:
                    62:4c:a1:85:b9:ac:55:8d:ac:2b:fe:bb:21:59:b6:
                    4d:6f:37:b8:92:e7:1d:67:76:04:e4:ab:72:93:12:
                    90:5f:77:ce:8d:0d:91:b9:83:5c:ca:35:d1:c5:98:
                    ad:3f:90:76:0f:aa:c1:83:cb:98:82:c0:ba:47:8b:
                    22:dd:30:48:23:78:18:f3:5b:d7:f1:bb:0c:e0:cf:
                    2a:fe:f4:df:02:34:f3:e5:28:af:ac:40:12:55:f3:
                    36:bc:0c:68:da:cb:e9:f2:2f:38:9c:2e:1b:14:90:
                    85:4c:69:c1:07:e1:55:b6:37:76:15:5d:6e:f5:19:
                    ce:14:80:cf:b3:ec:59:8a:c3:fe:2a:f6:1c:3b:fb:
                    4f:bd:12:2e:21:a2:0a:5c:01:1f:cf:48:66:76:1f:
                    9e:9f:71:05:e8:34:08:aa:39:5f:37:f9:0a:72:bd:
                    2b:61:81:40:a1:46:60:f1:24:be:af:2a:5a:0c:b4:
                    e5:86:bb:24:9c:f1:d4:f2:99:df:db:ab:02:98:67:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AA:2A:A4:E1:C1:FF:63:C3:83:B3:85:CE:0A:5C:38:0D:FD:1F:46
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/o6oqpOHB_2PDg7OFzgpcOA39H0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:97:9b:9d:2d:72:c7:d8:ee:3a:c8:5c:4e:ec:33:45:20:65:
         7c:3b:ed:de:ec:96:82:f0:aa:07:10:76:b8:7c:c1:17:63:9f:
         21:c5:02:b3:76:f8:0d:78:45:d9:8e:6a:d0:51:a4:4c:da:3a:
         49:be:34:88:1c:8c:5b:e0:ca:8f:2f:85:94:02:b2:8c:af:d1:
         b2:fb:67:69:7f:1c:9b:c0:00:b3:94:aa:51:d2:c3:e4:f3:f8:
         c0:9c:73:e2:3d:26:0f:e1:ed:4e:84:d5:f8:e4:90:42:f7:c0:
         ad:fa:75:fa:9c:30:3a:01:34:65:cd:ea:aa:37:3d:33:90:a6:
         8d:cb:b2:e2:22:5b:8c:81:2b:de:1a:e2:c1:49:31:df:90:c4:
         6c:b4:89:c1:3f:6c:6b:5d:08:c5:21:8a:27:3c:50:e9:4e:6b:
         83:20:8c:e0:ba:5e:2d:c0:7d:82:b8:84:08:7a:27:9d:f0:55:
         43:9b:e7:fb:e8:58:ac:7a:5b:ab:38:5a:49:65:07:57:9d:53:
         cf:86:8c:cc:76:f2:60:03:2a:0e:ff:a5:d6:06:d8:49:66:63:
         8e:35:1b:02:67:76:8f:5d:f6:18:3f:88:57:f5:b6:34:cf:65:
         a3:0e:2d:36:ae:a6:88:f3:8b:c2:af:49:01:db:67:52:53:f8:
         44:44:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:23 2025 by rpki-client