Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
File:                     O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa (raw, json)
Hash identifier:          PxOykq77LscBiXeP6WviP2Jbm6+wKUhQkSqad1e7XSg=
Subject key identifier:   3B:8A:AA:D8:07:DE:F9:25:66:C5:5C:7F:76:43:9E:30:A3:B1:53:BA
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       5E
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
Signing time:             Fri 31 Jan 2025 01:30:48 +0000
ROA not before:           Fri 31 Jan 2025 01:30:48 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     0
IP address blocks:        2001:7fa:0:3::/64 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Jan 31 01:30:48 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3B8AAAD807DEF92566C55C7F76439E30A3B153BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:e7:cf:13:24:5d:8b:33:8e:b9:2c:89:3d:
                    5a:73:5b:15:95:cb:54:ab:3f:55:9b:67:70:02:b0:
                    b3:a7:ca:20:44:e6:72:70:74:c1:43:cd:a5:61:46:
                    56:63:fb:51:1c:74:c2:34:af:0e:01:6e:03:f5:35:
                    11:5e:48:63:70:f7:19:51:d6:ea:b9:86:54:b2:0b:
                    d7:e2:95:9f:56:73:0a:42:35:98:e3:b7:6e:d6:49:
                    15:22:d6:08:f6:74:c1:ec:92:2d:30:77:32:88:3e:
                    3e:03:32:ac:a7:56:03:05:99:b6:52:46:c4:26:68:
                    ef:00:1f:3b:5c:38:67:d8:6f:dc:61:18:0e:ba:b8:
                    4e:4f:94:3b:d3:f8:0f:bf:e9:37:63:c2:a4:51:0f:
                    5f:2d:60:c3:a2:d2:d3:12:c3:c4:1f:4d:cf:0c:a0:
                    c2:3f:d0:e0:06:2e:9d:f2:d7:87:0a:2c:04:83:e0:
                    29:02:fc:90:20:d5:dc:ff:62:9d:50:b0:df:20:85:
                    4a:d9:56:d0:e7:7c:bb:56:cf:1e:c6:8c:ef:f6:9b:
                    0d:84:1d:2e:d9:e9:ea:3d:5f:f3:3e:57:0f:f3:47:
                    d7:be:48:be:74:62:9c:ea:19:ba:12:80:7e:40:bd:
                    b0:3a:35:8e:37:a8:48:39:58:8d:4c:92:76:cc:12:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:AA:D8:07:DE:F9:25:66:C5:5C:7F:76:43:9E:30:A3:B1:53:BA
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:0:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         24:11:c1:ee:77:96:23:e1:3c:ad:6c:8a:74:8d:a2:dd:cb:36:
         f1:63:68:c3:5e:ca:39:09:93:b7:a9:08:c0:15:3b:be:d5:70:
         3e:68:64:a8:ae:c9:d6:65:ce:74:93:fa:e6:25:c9:53:b4:8c:
         81:67:c5:59:0e:94:70:b2:17:d6:9a:48:5c:e9:01:b7:0a:b4:
         a4:5a:ea:8e:88:3a:ac:63:5d:dc:9a:2d:d9:52:03:2f:c1:e5:
         e0:4d:e3:fb:4c:8f:2d:3a:18:d0:0c:4b:3c:2c:ce:70:ab:bb:
         e0:96:3b:2f:e6:01:44:2b:cc:f5:b0:81:fa:9a:6a:35:30:5a:
         84:89:eb:29:66:b5:1e:87:a9:59:7e:e9:a1:92:4d:ed:3e:ca:
         6c:52:5f:d0:92:9e:23:37:96:53:4f:64:90:7d:09:72:76:ed:
         db:b5:83:32:62:3e:c5:b4:5d:09:bc:e7:5d:90:c7:d5:0c:ae:
         20:44:80:99:0c:a8:ae:68:2c:7c:fd:06:f5:6e:18:80:69:38:
         80:c5:09:ec:02:5c:08:3e:98:59:4b:91:70:75:01:07:82:db:
         0e:14:14:0a:2c:72:6b:81:55:08:59:fb:be:1d:dc:8b:83:96:
         91:44:3f:64:b2:8f:18:70:af:82:08:bc:eb:72:39:74:d8:54:
         86:b2:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:26 2025 by rpki-client