Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
File:                     GXjzuv14HLHDR4ilrwX79eY3Rjo.roa (raw, json)
Hash identifier:          lP6AD3NtTBOV7FH6vQfcOKHXEuSPktONSHOVp/d8cYU=
Subject key identifier:   19:78:F3:BA:FD:78:1C:B1:C3:47:88:A5:AF:05:FB:F5:E6:37:46:3A
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       0B
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
Signing time:             Tue 15 Jul 2025 07:08:16 +0000
ROA not before:           Tue 15 Jul 2025 07:08:16 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     152858
IP address blocks:        2401:b720::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 11:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: Jul 15 07:08:16 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=1978F3BAFD781CB1C34788A5AF05FBF5E637463A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:15:8b:a7:4f:5b:e3:6d:e5:c7:62:5f:0a:
                    26:59:e0:c8:5b:80:aa:55:31:20:fb:f1:e3:7f:25:
                    8b:8b:7b:b9:59:78:d5:fb:80:22:d4:8c:6d:33:c8:
                    8c:c2:5c:55:50:08:00:14:1e:07:72:57:a9:31:8e:
                    7d:b1:bc:e0:ec:6d:94:02:9e:12:43:74:5a:9a:c1:
                    65:ec:6b:9c:51:cf:ad:39:7f:b8:63:46:50:eb:3c:
                    9b:8b:bb:df:37:1a:6d:86:99:1a:2d:b7:44:51:d9:
                    74:ab:2c:e5:84:40:fe:a2:a8:6f:9c:e6:77:68:2d:
                    ab:99:e8:8b:8f:a6:c4:da:4f:6e:48:78:d2:21:db:
                    dc:8c:b5:51:6f:9a:ce:33:5c:ec:04:1d:4e:d5:cd:
                    0a:90:c8:d1:50:cc:45:a9:89:0c:fb:11:b1:29:8f:
                    eb:98:66:f1:84:ab:36:e3:86:f7:f9:d8:d7:f8:b2:
                    89:31:cc:c3:47:3d:2c:01:4f:f9:13:e5:bc:3a:f5:
                    74:f4:96:33:e9:28:f2:6c:40:06:5c:33:80:14:dd:
                    39:04:63:4f:70:a8:6f:62:40:c2:6f:0c:3f:46:7c:
                    b5:36:fc:b7:02:91:d2:4a:c9:87:28:16:41:56:53:
                    37:48:fb:fa:42:95:d1:5d:ad:1d:6a:51:70:e6:41:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:F3:BA:FD:78:1C:B1:C3:47:88:A5:AF:05:FB:F5:E6:37:46:3A
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/GXjzuv14HLHDR4ilrwX79eY3Rjo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b720::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:47:b3:3a:07:1c:03:6a:b6:67:8e:8e:57:52:c1:84:68:
         23:16:8f:c0:51:69:43:d1:8a:d4:5d:5d:e0:37:8c:b5:d1:11:
         73:4c:f9:c2:cf:d4:94:a5:ef:11:ae:b5:a6:59:c5:09:76:ef:
         4a:cb:cf:af:06:93:51:5b:f7:dd:1b:eb:11:37:39:37:ce:a5:
         04:fe:83:6b:89:f0:5e:a8:ab:73:ee:83:c4:50:98:54:ed:6a:
         8b:72:01:02:6a:f2:47:48:bf:89:70:8b:bb:22:a4:f6:f7:45:
         53:2c:30:0c:db:21:cf:b7:38:40:45:df:20:db:ac:a2:47:31:
         7c:39:f4:5b:8d:5d:cd:a9:6a:a5:48:91:0c:76:a2:e4:e1:6a:
         51:2f:a6:d5:fd:50:e3:76:cd:c4:0f:30:23:2b:0f:7a:4d:9c:
         c6:a8:b9:b5:28:a2:b7:1e:f4:f3:3b:e5:cd:db:b6:5e:f3:5e:
         3b:b0:e5:0b:ed:f0:30:67:93:a1:c7:6f:32:e2:28:c1:e3:82:
         ce:eb:f3:e7:06:7b:ff:01:1f:19:a5:25:66:7e:df:a2:d7:98:
         a2:55:8d:80:b0:2b:41:b2:e1:7b:b5:a5:d9:c7:e9:1e:b2:84:
         08:fa:46:df:64:1e:5d:9b:15:04:0a:72:ce:90:f5:65:68:4c:
         da:41:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:28:27 2025 by rpki-client