Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30330/JBzInJevDDCnl0mr88rdSzO5qwE.roa
File:                     JBzInJevDDCnl0mr88rdSzO5qwE.roa (raw, json)
Hash identifier:          woUF1988gHSiiA56G8q0EB2H/Cif5duWmbD6kVszY24=
Subject key identifier:   24:1C:C8:9C:97:AF:0C:30:A7:97:49:AB:F3:CA:DD:4B:33:B9:AB:01
Certificate issuer:       /CN=98DBBFF3587F0119F6DC1E227DD81ECC47FD1F98
Certificate serial:       21
Authority key identifier: 98:DB:BF:F3:58:7F:01:19:F6:DC:1E:22:7D:D8:1E:CC:47:FD:1F:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/JBzInJevDDCnl0mr88rdSzO5qwE.roa
Signing time:             Thu 24 Jul 2025 02:55:45 +0000
ROA not before:           Thu 24 Jul 2025 02:55:45 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        2001:d88::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DBBFF3587F0119F6DC1E227DD81ECC47FD1F98
        Validity
            Not Before: Jul 24 02:55:45 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=241CC89C97AF0C30A79749ABF3CADD4B33B9AB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:6b:2d:75:56:cf:cf:89:22:93:67:7f:1e:
                    0f:15:fd:86:a2:2f:bb:65:5d:67:79:3a:81:7a:12:
                    b4:f6:79:5c:f2:fd:df:62:0d:84:3d:a3:c3:03:ad:
                    cf:a9:4f:33:aa:59:a2:94:c5:c9:79:19:5f:8b:42:
                    1d:17:41:b9:e0:1f:8b:d6:d7:02:2d:9b:35:36:4b:
                    eb:1b:ea:31:84:ab:82:48:64:f1:b3:bf:9e:d7:03:
                    1b:89:a0:34:d0:3f:8d:d8:8e:9a:3f:7d:af:6b:8e:
                    f0:df:c0:29:a6:66:81:db:76:ee:f4:dd:13:f3:f1:
                    2b:1b:60:34:d3:f7:3b:b9:1d:a7:ff:91:85:58:09:
                    16:92:23:2b:25:69:bd:e0:87:fe:f4:bc:b5:62:0e:
                    f3:a8:6d:cb:81:70:72:3b:f6:91:5e:a5:c6:2d:a6:
                    d3:ce:01:6e:14:c3:9a:5f:3e:9e:68:63:39:48:e9:
                    f7:0c:d9:e1:f0:b1:06:9a:3a:ed:16:f5:52:18:2f:
                    5f:b2:cd:5d:47:ce:5f:9a:6d:3b:1c:65:21:82:40:
                    dc:ca:0a:61:0b:32:18:a3:04:ad:81:c7:4b:d1:82:
                    52:a6:dd:6f:f5:9c:22:38:ef:4b:87:c6:30:ed:73:
                    de:b0:62:e0:d4:84:60:66:fc:71:c3:86:1f:45:44:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:C8:9C:97:AF:0C:30:A7:97:49:AB:F3:CA:DD:4B:33:B9:AB:01
            X509v3 Authority Key Identifier:
                keyid:98:DB:BF:F3:58:7F:01:19:F6:DC:1E:22:7D:D8:1E:CC:47:FD:1F:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/JBzInJevDDCnl0mr88rdSzO5qwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:09:7e:86:eb:61:be:f9:1f:ae:94:41:af:3b:dd:62:37:
         b2:63:64:7a:a5:4b:5a:fe:4c:01:07:49:bb:e1:c3:31:17:e8:
         41:5b:4b:50:15:8e:15:95:c0:66:60:7b:52:d8:f9:c2:f2:40:
         07:7f:d2:eb:a2:09:8b:fb:11:4b:b8:2d:ae:77:4a:a4:da:16:
         2e:94:9e:58:34:18:e8:8d:b4:37:75:f0:9c:c9:31:fd:34:f4:
         bb:96:2a:94:36:93:91:d0:b3:3b:23:88:e5:11:5e:0d:61:18:
         62:ee:93:8d:a5:2e:10:25:61:d0:b6:c6:7e:6f:71:4f:2e:67:
         e6:ab:8e:3c:ef:37:41:ae:9c:44:9a:59:27:26:7a:2f:63:46:
         c6:89:cf:d1:76:c0:4e:92:0e:45:bd:36:53:66:06:ca:60:1c:
         83:43:49:c9:c8:c7:fc:19:3b:5d:2f:73:62:8c:11:c6:0d:74:
         4b:69:ce:16:b6:0d:c8:04:de:3a:72:d1:7e:04:71:c2:a0:15:
         2b:30:fa:f1:48:0e:76:8d:d7:32:12:d5:c1:3f:99:d5:f5:1e:
         29:69:95:72:eb:52:84:a3:94:33:f6:ac:74:a6:0e:b6:7b:f3:
         9e:32:3d:e0:f5:4a:a6:62:94:38:80:ab:9c:58:e3:72:af:ed:
         51:4d:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:02 2025 by rpki-client