Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/482zG3pML1If08NWKqpglxvAyTw.roa
File:                     482zG3pML1If08NWKqpglxvAyTw.roa (raw, json)
Hash identifier:          eqwuz2cIVdq9lLUfmgikv8dJK2cEgQNtamHzh5NbZ40=
Subject key identifier:   E3:CD:B3:1B:7A:4C:2F:52:1F:D3:C3:56:2A:AA:60:97:1B:C0:C9:3C
Certificate issuer:       /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial:       16
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/482zG3pML1If08NWKqpglxvAyTw.roa
Signing time:             Fri 11 Jul 2025 01:53:18 +0000
ROA not before:           Fri 11 Jul 2025 01:53:18 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     63790
IP address blocks:        2407:a6c0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
        Validity
            Not Before: Jul 11 01:53:18 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E3CDB31B7A4C2F521FD3C3562AAA60971BC0C93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:61:69:ec:bf:a5:cf:40:53:61:14:f8:a3:
                    a3:24:90:26:65:f3:8a:00:88:a1:fb:28:ee:2d:d5:
                    cf:27:99:e2:9f:50:c8:62:9d:52:61:f9:a9:45:8c:
                    90:3c:1a:47:84:e5:e5:ba:e7:16:58:8d:27:ce:a8:
                    98:5d:75:3e:68:9a:b5:bc:62:a4:79:1a:78:46:d6:
                    93:51:38:f0:6a:f5:84:a7:14:9b:35:26:e7:1c:3d:
                    80:4f:69:49:4d:76:f4:88:d5:e9:89:ee:8e:0d:04:
                    be:12:79:48:3b:ce:47:97:ff:0c:d7:b8:d9:0e:ac:
                    24:5c:4f:dc:c2:86:d0:dc:93:87:6a:02:ec:2e:c7:
                    02:69:4e:77:7f:f7:29:73:9d:17:cd:8e:8e:d3:33:
                    20:e5:23:6c:dc:54:f2:17:36:e2:f8:6f:ab:18:a3:
                    86:b8:03:50:1f:98:cb:1a:7c:54:ae:78:6e:ca:2a:
                    ac:59:07:ed:2f:2f:69:36:28:d0:05:35:b8:5a:0c:
                    35:96:7e:2f:c5:46:d5:1e:2f:a8:d6:25:40:8d:83:
                    ab:41:95:15:cc:a8:1a:20:a8:5c:b2:b2:77:bb:82:
                    d6:be:a3:83:ff:ab:f7:e2:1e:64:39:a5:5f:6a:cb:
                    3c:ea:5e:18:68:8c:61:e0:de:2b:ad:9d:28:6e:97:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:B3:1B:7A:4C:2F:52:1F:D3:C3:56:2A:AA:60:97:1B:C0:C9:3C
            X509v3 Authority Key Identifier:
                keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/482zG3pML1If08NWKqpglxvAyTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:96:85:c4:f1:05:0b:97:4b:72:1c:b9:a5:1e:68:4c:13:
         cf:e3:25:5e:bc:d0:06:4c:74:89:da:f0:9d:a0:8b:d9:ca:19:
         7f:5d:90:93:80:fd:bf:dc:4b:d2:49:2a:e2:cc:3a:78:01:55:
         b4:e3:6f:9e:83:da:59:21:97:a9:ef:51:ce:ff:34:4c:22:66:
         02:01:c4:f8:f6:4e:82:49:d8:51:ae:41:16:80:62:34:db:7a:
         2e:63:1c:50:b9:3e:dc:7d:a6:1c:26:4a:7e:4d:d0:70:6f:8b:
         19:83:ec:40:61:c4:8b:1a:bd:ff:18:13:9b:8f:bd:38:1a:9c:
         7d:e3:ac:4a:73:f8:9a:60:80:c8:38:f7:ec:f9:0b:bb:ef:74:
         f7:23:79:31:dd:79:7a:46:58:db:bb:31:fd:4b:1d:b8:1a:08:
         24:49:f9:ff:13:9a:d2:78:6e:80:18:36:57:58:d2:48:3d:ff:
         fc:40:ff:ab:d6:52:3e:c3:80:23:b4:93:b3:5e:c4:0e:0b:fe:
         23:cc:ca:86:2c:e2:69:76:e7:e6:1f:25:17:6c:d8:54:41:ce:
         0f:2a:fb:fa:c7:a2:9b:15:c8:6e:52:f1:1a:d4:29:47:87:01:
         fc:6e:54:bc:71:97:2c:cf:7f:57:64:88:3b:73:29:b0:16:02:
         4d:14:47:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRkRB
QTc5MkE1RkUwMjEzQkM0QUM2NEVERjIxREYyRUFDNDBFQjBFMB4XDTI1MDcxMTAx
NTMxOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRTNDREIzMUI3QTRDMkY1
MjFGRDNDMzU2MkFBQTYwOTcxQkMwQzkzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANXdYWnsv6XPQFNhFPijoySQJmXzigCIofso7i3VzyeZ4p9QyGKd
UmH5qUWMkDwaR4Tl5brnFliNJ86omF11PmiatbxipHkaeEbWk1E48Gr1hKcUmzUm
5xw9gE9pSU129IjV6Ynujg0EvhJ5SDvOR5f/DNe42Q6sJFxP3MKG0NyTh2oC7C7H
AmlOd3/3KXOdF82OjtMzIOUjbNxU8hc24vhvqxijhrgDUB+Yyxp8VK54bsoqrFkH
7S8vaTYo0AU1uFoMNZZ+L8VG1R4vqNYlQI2Dq0GVFcyoGiCoXLKyd7uC1r6jg/+r
9+IeZDmlX2rLPOpeGGiMYeDeK62dKG6X5m8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTjzbMbekwvUh/Tw1YqqmCXG8DJPDAfBgNVHSMEGDAWgBQf2qeSpf4CE7xKxk7f
Id8urEDrDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODAvSDlxbmtxWC1BaE84U3NaTzN5SGZMcXhBNnc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSDlxbmtxWC1BaE84U3NaTzN5SGZM
cXhBNnc0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzgwLzQ4MnpHM3BNTDFJZjA4TldLcXBnbHh2QXlUdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQBaD5aFxPEFC5dLchy5pR5o
TBPP4yVevNAGTHSJ2vCdoIvZyhl/XZCTgP2/3EvSSSrizDp4AVW042+eg9pZIZep
71HO/zRMImYCAcT49k6CSdhRrkEWgGI023ouYxxQuT7cfaYcJkp+TdBwb4sZg+xA
YcSLGr3/GBObj704Gpx946xKc/iaYIDIOPfs+Qu773T3I3kx3Xl6RljbuzH9Sx24
GggkSfn/E5rSeG6AGDZXWNJIPf/8QP+r1lI+w4AjtJOzXsQOC/4jzMqGLOJpdufm
HyUXbNhUQc4PKvv6x6KbFchuUvEa1ClHhwH8blS8cZcsz39XZIg7cymwFgJNFEdg
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:42:43 2025 by rpki-client