Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
File:                     35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa (raw, json)
Hash identifier:          IQWFrw28m+md+UU5S2Cq4IZ3+EjaYMWJhWL7N+pHQuw=
Subject key identifier:   DF:9A:73:BF:64:E3:6C:0F:CC:8F:91:A8:AB:01:E1:09:08:59:03:19
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       4B
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
Signing time:             Tue 01 Apr 2025 01:30:33 +0000
ROA not before:           Tue 01 Apr 2025 01:30:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 12:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=DF9A73BF64E36C0FCC8F91A8AB01E10908590319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:0e:49:63:ab:82:9c:49:0e:d0:b7:c6:4a:
                    4a:02:a5:13:d5:4d:6e:e9:fa:d9:a5:c7:53:89:07:
                    c9:c3:ad:a3:8c:71:1e:f1:54:27:f6:7b:42:96:54:
                    11:47:f6:c0:40:50:d0:ab:dd:cc:a6:0c:9a:07:ce:
                    89:cc:f4:16:d1:6a:5e:da:4c:66:08:d8:c9:52:72:
                    3e:fb:2c:2d:cb:30:32:da:b8:85:4f:be:38:b1:38:
                    6a:dd:14:fc:7d:47:eb:13:81:59:ba:9d:e6:8f:b3:
                    4f:96:7d:c2:4f:6e:11:61:bc:65:69:e2:a2:fa:cd:
                    5c:0a:23:5b:a1:20:d6:a2:e6:20:93:41:1e:d3:6d:
                    41:5a:2e:97:30:9a:84:16:20:d2:02:72:39:b8:c7:
                    9e:d0:84:9a:15:cb:c1:62:89:a0:0e:24:0f:b0:f4:
                    b1:60:3b:5c:15:ac:f3:2d:b0:99:f7:d7:7c:d4:63:
                    1d:fb:21:77:fe:cd:e9:3d:7f:7b:a2:d9:01:9f:be:
                    69:ce:18:61:29:bd:2c:2c:5b:0f:e9:84:4f:d3:92:
                    ee:93:81:08:27:bf:36:9c:40:8f:40:ba:2d:22:4a:
                    97:61:2f:36:03:e6:61:36:ee:a9:06:62:6f:66:36:
                    01:ab:1a:95:f1:ff:d5:d6:b1:03:b8:62:0b:dc:ae:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9A:73:BF:64:E3:6C:0F:CC:8F:91:A8:AB:01:E1:09:08:59:03:19
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/35pzv2TjbA_Mj5GoqwHhCQhZAxk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:e5:2b:f0:24:2d:18:32:16:20:bb:c7:cd:4e:bf:ec:6c:83:
         12:31:49:c4:d9:66:07:4e:11:69:e1:e9:b0:c8:f2:ee:d7:d7:
         2c:46:5d:34:95:28:03:13:f2:94:32:25:e7:a9:25:11:ff:f8:
         7f:28:c1:c3:08:21:ae:a9:f6:62:c8:46:5b:b2:d8:cc:be:13:
         4e:e9:50:7d:b4:11:6f:7d:54:bb:de:8b:dd:1f:70:65:41:3a:
         aa:ae:a3:5d:06:71:a7:96:66:cc:b3:fc:59:af:bd:91:9f:db:
         95:e3:70:96:de:bc:6e:9a:a3:43:8a:e0:03:79:44:0c:19:54:
         31:df:55:98:2c:bd:ea:61:80:82:4d:94:6a:b2:96:fc:8a:7d:
         b1:da:49:59:b0:18:ed:a3:1c:a7:66:cd:5b:98:e6:e2:f1:8b:
         e2:aa:7a:ca:c2:eb:52:8f:55:52:c3:72:5e:ad:be:8f:50:82:
         96:f9:2a:6a:7f:50:2c:1f:f8:3c:f6:70:aa:a5:8a:2d:00:35:
         93:65:1d:92:ce:4c:bf:45:a8:91:ee:98:44:5c:b6:68:57:ff:
         ad:69:b7:27:dc:2e:7c:76:2b:0e:be:7e:a2:d0:4a:97:6f:47:
         10:24:95:3f:b6:02:56:ac:9d:18:42:c5:d2:f2:a5:35:7f:44:
         89:da:4c:e1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI1MDQwMTAx
MzAzM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoREY5QTczQkY2NEUzNkMw
RkNDOEY5MUE4QUIwMUUxMDkwODU5MDMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKF9Dkljq4KcSQ7Qt8ZKSgKlE9VNbun62aXHU4kHycOto4xxHvFU
J/Z7QpZUEUf2wEBQ0KvdzKYMmgfOicz0FtFqXtpMZgjYyVJyPvssLcswMtq4hU++
OLE4at0U/H1H6xOBWbqd5o+zT5Z9wk9uEWG8ZWniovrNXAojW6Eg1qLmIJNBHtNt
QVoulzCahBYg0gJyObjHntCEmhXLwWKJoA4kD7D0sWA7XBWs8y2wmffXfNRjHfsh
d/7N6T1/e6LZAZ++ac4YYSm9LCxbD+mET9OS7pOBCCe/NpxAj0C6LSJKl2EvNgPm
YTbuqQZib2Y2AasalfH/1daxA7hiC9yudZsCAwEAAaOCAiowggImMB0GA1UdDgQW
BBTfmnO/ZONsD8yPkairAeEJCFkDGTAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0LzM1cHp2MlRqYkFfTWo1R29xd0hoQ1FoWkF4ay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7A0DANBgkqhkiG9w0BAQsFAAOCAQEAS+Ur8CQtGDIWILvHzU6/
7GyDEjFJxNlmB04RaeHpsMjy7tfXLEZdNJUoAxPylDIl56klEf/4fyjBwwghrqn2
YshGW7LYzL4TTulQfbQRb31Uu96L3R9wZUE6qq6jXQZxp5ZmzLP8Wa+9kZ/bleNw
lt68bpqjQ4rgA3lEDBlUMd9VmCy96mGAgk2UarKW/Ip9sdpJWbAY7aMcp2bNW5jm
4vGL4qp6ysLrUo9VUsNyXq2+j1CClvkqan9QLB/4PPZwqqWKLQA1k2Udks5Mv0Wo
ke6YRFy2aFf/rWm3J9wufHYrDr5+otBKl29HECSVP7YCVqydGELF0vKlNX9EidpM
4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:53:58 2025 by rpki-client