Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
File:                     ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa (raw, json)
Hash identifier:          UBh0F9kZRoqgLV4ILu+QEte2FZ9tKTSKq/P38vwfBp0=
Subject key identifier:   67:3C:41:4B:F4:03:FC:D1:48:45:B8:1B:BF:42:BA:AB:2D:CA:EA:CD
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       41
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
Signing time:             Tue 01 Apr 2025 01:30:29 +0000
ROA not before:           Tue 01 Apr 2025 01:30:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=673C414BF403FCD14845B81BBF42BAAB2DCAEACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:76:0a:27:4f:4f:64:4e:29:cd:a0:04:83:
                    94:1c:5b:5e:f2:fe:ac:f7:75:43:eb:59:ff:c8:51:
                    0e:81:8a:17:78:0f:03:25:8a:3c:2b:86:f4:bf:ea:
                    db:79:5e:45:ba:dc:db:2c:70:cb:1f:82:ec:33:fd:
                    3a:b8:84:8e:2e:62:6f:0a:ed:65:b0:b6:b0:41:f3:
                    52:a4:ad:dd:f8:2a:4e:07:64:3f:4f:76:21:5d:3f:
                    11:eb:67:1c:3f:89:1d:03:ac:24:6b:76:41:ea:08:
                    a8:92:a1:4b:d0:26:fe:71:34:e4:70:61:7d:f3:0a:
                    50:0b:ff:9c:a8:1f:34:1e:2b:3c:a0:de:7c:42:ce:
                    b1:2c:f4:87:f9:8e:6b:d2:12:86:ca:81:3d:6f:21:
                    a4:a1:b5:73:ee:80:d8:b6:e6:ea:d8:a6:84:73:d5:
                    44:9f:3d:07:50:86:df:62:65:7a:11:9e:98:90:dd:
                    81:f2:8f:b5:9f:9a:bf:d5:67:02:fb:d8:db:01:4a:
                    09:5b:e7:ba:94:d1:02:dc:2e:5f:d7:54:7e:03:70:
                    7b:c7:ee:1a:f0:19:b1:5e:5a:4d:45:39:06:f3:ae:
                    48:60:6a:54:e7:fe:2d:c8:e2:eb:8c:6e:3b:a3:e0:
                    22:a4:95:3d:34:05:fe:70:7f:7f:41:13:94:ba:35:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:41:4B:F4:03:FC:D1:48:45:B8:1B:BF:42:BA:AB:2D:CA:EA:CD
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ZzxBS_QD_NFIRbgbv0K6qy3K6s0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:fd:18:77:35:30:99:4d:ce:e8:69:f9:be:2f:07:56:33:
         9c:f2:89:77:32:10:93:42:52:fb:d0:1f:48:8b:03:63:05:5e:
         ff:a9:ba:4c:39:05:f3:80:48:66:fe:6b:32:8f:8e:b0:79:bd:
         91:68:ad:c7:5c:51:84:b2:93:32:ac:49:2e:89:30:f2:99:29:
         f5:af:39:9a:80:eb:09:d4:65:2c:04:c5:9f:2d:06:b5:6e:2d:
         ad:ad:7c:66:be:c7:cb:58:e6:01:ae:f3:8e:fa:1a:3b:13:58:
         90:d7:40:60:0b:09:6b:8f:17:ef:9b:ec:32:0b:76:b0:de:55:
         0e:60:ca:4e:66:e5:c1:c4:41:e3:48:80:bc:54:82:61:d1:6a:
         a0:8f:a7:52:01:e7:71:0a:20:aa:f8:e3:d7:b7:59:63:4a:f2:
         f9:c2:d0:d5:30:83:f4:96:7c:b8:23:b8:a0:1b:5c:9b:ca:d6:
         76:40:c7:ce:f9:fd:e3:ce:0b:bf:be:0e:dd:c5:3a:c4:0d:86:
         4c:75:74:f6:a7:24:0c:05:7f:51:5b:2e:09:c4:36:85:9a:2a:
         7f:b2:6c:5d:e8:5a:9b:98:7e:c8:d0:03:e3:7e:82:31:62:04:
         db:ea:3c:e1:b3:54:c8:8c:34:cc:f5:1a:1c:47:c2:b5:8e:7c:
         d2:72:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:09:07 2025 by rpki-client