Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/TI6eVAQGXR-qHjLdwNCHmHufOLY.roa
File:                     TI6eVAQGXR-qHjLdwNCHmHufOLY.roa (raw, json)
Hash identifier:          93/NI2vERIQ86cZB/yVV/s0ZICtIiOdav1aLOc3g0PQ=
Subject key identifier:   4C:8E:9E:54:04:06:5D:1F:AA:1E:32:DD:C0:D0:87:98:7B:9F:38:B6
Certificate issuer:       /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial:       17
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/TI6eVAQGXR-qHjLdwNCHmHufOLY.roa
Signing time:             Fri 11 Jul 2025 01:53:19 +0000
ROA not before:           Fri 11 Jul 2025 01:53:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     16509
IP address blocks:        2407:a6c0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 11:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
        Validity
            Not Before: Jul 11 01:53:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=4C8E9E5404065D1FAA1E32DDC0D087987B9F38B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:6b:f3:7b:13:3e:44:e6:bd:c6:a8:d1:56:
                    b9:66:74:5b:6d:f4:f4:8e:05:ad:4f:44:a8:ba:9e:
                    b5:a6:fa:78:85:ca:11:74:25:a5:f1:55:ce:a1:62:
                    91:ef:c0:e6:bd:00:94:74:26:b3:85:63:84:c9:cc:
                    7f:44:35:6f:1e:45:63:60:c5:ce:7e:05:86:29:d4:
                    6d:92:bd:de:39:40:ad:9f:2e:94:bb:e1:2d:5d:69:
                    58:1a:fd:44:01:a7:d8:40:77:c9:16:ce:26:29:38:
                    3f:bc:f3:76:b8:a6:02:7f:b3:91:34:a7:c2:21:e4:
                    2c:16:a7:e1:c2:ee:42:26:bb:a6:bd:bc:a6:8a:63:
                    40:e1:91:70:a5:1b:89:7e:a2:18:3d:5e:b4:ab:a1:
                    76:fc:81:2c:cb:1c:31:1d:5b:27:9d:c0:24:c8:5b:
                    31:b1:9f:a1:f8:21:ca:32:2d:98:2d:5c:65:3c:65:
                    8f:18:89:9d:36:92:98:b0:14:10:fc:51:85:7c:8e:
                    fa:b1:5d:1e:6e:f1:42:c9:8f:86:0a:5f:57:81:58:
                    db:b6:36:1d:78:4e:5b:73:7f:59:a8:e4:93:fa:2a:
                    6d:45:88:b7:a5:5a:0d:19:7d:1c:f1:b1:c0:95:9b:
                    77:66:f9:fb:8d:8b:de:fc:13:6b:2c:cb:17:fa:b7:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:9E:54:04:06:5D:1F:AA:1E:32:DD:C0:D0:87:98:7B:9F:38:B6
            X509v3 Authority Key Identifier:
                keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/TI6eVAQGXR-qHjLdwNCHmHufOLY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:27:0b:1e:f1:ba:77:be:b2:a2:44:e7:5c:e6:a0:19:46:35:
         27:75:19:fe:73:7e:51:ea:1f:de:5a:aa:de:eb:6d:54:2b:8e:
         bc:b3:22:8d:d4:63:a4:9a:12:a2:d9:e4:d9:f6:fe:b2:c0:c3:
         76:01:cb:97:14:b5:84:d0:8f:6a:ce:c8:ef:bb:4e:a3:c0:1b:
         50:d7:d4:c1:eb:7a:22:bc:d6:ef:a7:a6:af:f6:f4:07:25:c0:
         a4:9f:f1:fb:67:c5:ed:15:4b:e3:cf:d5:ff:86:01:ef:ac:a7:
         0b:1d:a9:5c:d3:60:a0:b6:cd:65:45:2b:56:b3:f7:04:b1:ca:
         c3:28:82:7c:4f:5c:5d:41:db:b3:e8:40:b2:b4:03:79:24:27:
         d5:4b:6c:f9:56:86:cb:fe:8b:ca:7b:4f:0b:2a:a9:47:13:61:
         6b:bd:cd:a1:ba:b9:c5:9b:0c:02:fa:3e:52:4b:b8:bb:e6:0a:
         8c:d4:b7:ac:57:b1:d1:9b:55:10:b6:aa:98:7d:65:a5:ba:93:
         3f:5d:5e:16:8e:6d:56:d6:a1:31:7e:03:01:c4:76:99:55:55:
         2e:ad:24:1b:aa:de:42:76:80:dc:f5:b3:88:54:1c:2b:62:b5:
         7e:80:87:fb:46:ba:67:de:6f:6d:ce:11:5f:c3:1c:73:50:82:
         c6:3d:65:97
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRkRB
QTc5MkE1RkUwMjEzQkM0QUM2NEVERjIxREYyRUFDNDBFQjBFMB4XDTI1MDcxMTAx
NTMxOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNEM4RTlFNTQwNDA2NUQx
RkFBMUUzMkREQzBEMDg3OTg3QjlGMzhCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFSa/N7Ez5E5r3GqNFWuWZ0W2309I4FrU9EqLqetab6eIXKEXQl
pfFVzqFike/A5r0AlHQms4VjhMnMf0Q1bx5FY2DFzn4FhinUbZK93jlArZ8ulLvh
LV1pWBr9RAGn2EB3yRbOJik4P7zzdrimAn+zkTSnwiHkLBan4cLuQia7pr28popj
QOGRcKUbiX6iGD1etKuhdvyBLMscMR1bJ53AJMhbMbGfofghyjItmC1cZTxljxiJ
nTaSmLAUEPxRhXyO+rFdHm7xQsmPhgpfV4FY27Y2HXhOW3N/Wajkk/oqbUWIt6Va
DRl9HPGxwJWbd2b5+42L3vwTayzLF/q3WckCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRMjp5UBAZdH6oeMt3A0IeYe584tjAfBgNVHSMEGDAWgBQf2qeSpf4CE7xKxk7f
Id8urEDrDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODAvSDlxbmtxWC1BaE84U3NaTzN5SGZMcXhBNnc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSDlxbmtxWC1BaE84U3NaTzN5SGZM
cXhBNnc0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzgwL1RJNmVWQVFHWFItcUhqTGR3TkNIbUh1Zk9MWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQDNJwse8bp3vrKiROdc5qAZ
RjUndRn+c35R6h/eWqre621UK468syKN1GOkmhKi2eTZ9v6ywMN2AcuXFLWE0I9q
zsjvu06jwBtQ19TB63oivNbvp6av9vQHJcCkn/H7Z8XtFUvjz9X/hgHvrKcLHalc
02Cgts1lRStWs/cEscrDKIJ8T1xdQduz6ECytAN5JCfVS2z5VobL/ovKe08LKqlH
E2Frvc2hurnFmwwC+j5SS7i75gqM1LesV7HRm1UQtqqYfWWlupM/XV4Wjm1W1qEx
fgMBxHaZVVUurSQbqt5CdoDc9bOIVBwrYrV+gIf7Rrpn3m9tzhFfwxxzUILGPWWX
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:27:23 2025 by rpki-client