Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/YsJIgATB39tNRPLD2FYqu0Fd-So.roa
File:                     YsJIgATB39tNRPLD2FYqu0Fd-So.roa (raw, json)
Hash identifier:          85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=
Subject key identifier:   62:C2:48:80:04:C1:DF:DB:4D:44:F2:C3:D8:56:2A:BB:41:5D:F9:2A
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       12
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/YsJIgATB39tNRPLD2FYqu0Fd-So.roa
Signing time:             Fri 07 Mar 2025 01:57:36 +0000
ROA not before:           Fri 07 Mar 2025 01:57:36 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     37892
IP address blocks:        2402:c840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: Mar  7 01:57:36 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=62C2488004C1DFDB4D44F2C3D8562ABB415DF92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:e7:bf:f8:28:78:36:49:d0:d8:11:4b:04:
                    f9:9f:0c:f0:6c:ae:05:70:53:ab:7f:76:71:3f:1a:
                    ce:17:36:71:be:49:27:72:6e:7d:82:79:d6:e4:d5:
                    5c:35:ac:02:7b:65:52:43:39:12:dc:ae:94:21:27:
                    4f:08:ea:70:a5:0c:44:9b:9b:5e:fc:ff:07:c7:6d:
                    c1:d8:15:ba:b2:6c:09:0f:d6:98:55:e8:aa:52:48:
                    b2:a7:b7:7a:5c:a4:9a:e8:6a:5e:b4:23:08:65:09:
                    9b:00:78:62:68:11:9f:40:77:89:df:e8:93:88:02:
                    ca:9f:42:2c:60:7b:bd:c0:38:b9:f4:57:82:2d:a5:
                    f1:40:84:67:93:14:05:5f:28:e2:57:c6:b2:d3:e7:
                    fe:81:f0:18:69:c4:9b:d6:11:0c:f3:5f:b8:b5:4a:
                    eb:df:12:17:e4:1c:3e:88:02:40:7b:27:c0:1a:14:
                    3d:9c:24:84:d0:e9:db:f4:a5:ac:71:dd:20:cd:8e:
                    1c:ef:85:f7:1b:ad:7b:8c:e4:61:19:f9:37:c2:03:
                    85:93:90:04:f1:f5:a1:fa:ce:92:03:c6:e7:91:b1:
                    26:f3:0c:af:1f:06:ef:fc:24:54:e2:d9:ab:ce:32:
                    52:99:3e:39:12:18:28:d6:d4:2f:d5:75:94:56:a2:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:48:80:04:C1:DF:DB:4D:44:F2:C3:D8:56:2A:BB:41:5D:F9:2A
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/YsJIgATB39tNRPLD2FYqu0Fd-So.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c840::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:67:22:00:f5:76:e6:fd:4b:01:26:a0:4e:20:58:be:4e:b5:
         6f:d0:21:99:ad:62:83:02:2f:fe:5b:5d:e2:74:30:c3:b1:46:
         6f:c9:4c:bb:6d:2e:73:15:26:9f:91:40:61:b4:74:21:ae:a0:
         03:51:47:ae:85:f2:4a:eb:9e:9e:f7:3b:29:09:a5:e6:50:e6:
         af:3a:5c:23:c9:07:69:fc:4d:42:89:58:8c:42:b9:c4:40:e8:
         42:1f:ac:17:c8:b2:32:1b:e5:81:f1:d5:08:b6:b8:16:58:07:
         03:38:bb:74:0a:56:9a:b1:e1:64:6b:14:9f:e5:b4:8d:c8:bd:
         3d:8a:38:3d:5d:c2:db:78:e1:0c:fe:f7:59:9a:a4:8f:c0:93:
         8f:86:05:32:92:66:10:c7:66:6b:ce:e7:9e:73:80:23:76:c5:
         a5:57:96:ff:b0:49:1c:c3:56:32:8e:eb:1d:d4:44:ad:d7:2a:
         98:8e:91:ed:8c:46:a4:cd:19:22:54:10:e0:17:b3:5c:5f:7e:
         fd:d9:db:bf:c4:00:a7:24:1e:b8:94:4a:15:55:4a:8c:1f:31:
         d1:75:a9:96:23:be:aa:ef:1c:1a:00:ab:5a:62:3b:47:ea:75:
         43:de:27:27:99:01:57:f4:ef:c6:87:6f:6d:76:f1:67:61:9e:
         91:ba:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:54 2025 by rpki-client