Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
File:                     bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa (raw, json)
Hash identifier:          9jo+CMavXZQ8vFYsVVb/gzO8wkdpBeWgx8+p3P2Lxgc=
Subject key identifier:   6E:F9:3B:03:52:B1:E2:9A:92:48:7C:07:20:22:8E:BF:A4:15:06:BF
Certificate issuer:       /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial:       05
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
Signing time:             Fri 07 Mar 2025 01:05:43 +0000
ROA not before:           Fri 07 Mar 2025 01:05:43 +0000
ROA not after:            Tue 17 Feb 2026 15:19:37 +0000
asID:                     131971
IP address blocks:        2407:9900:4000::/34 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
        Validity
            Not Before: Mar  7 01:05:43 2025 GMT
            Not After : Feb 17 15:19:37 2026 GMT
        Subject: CN=6EF93B0352B1E29A92487C0720228EBFA41506BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:b0:43:a7:1e:25:10:f1:ea:7c:ce:1e:e2:
                    98:3f:ac:ee:d2:98:14:57:c2:86:a1:8e:c9:99:b8:
                    b6:bd:d4:b6:0f:4f:fd:06:42:da:cf:84:f0:e4:18:
                    23:ba:75:b4:b2:43:1f:c3:2e:7c:cb:eb:5e:b0:72:
                    60:fa:33:cb:2e:1f:5b:cf:d5:e8:12:55:40:b8:b9:
                    cf:db:b5:16:d5:dd:3e:2f:f5:37:3d:f0:b9:fd:de:
                    37:8d:57:e2:5b:9d:cb:2d:db:17:de:16:2a:ee:36:
                    39:4c:94:b2:85:d5:a8:12:7e:e0:e2:4a:a8:74:d5:
                    0e:73:1d:bd:e3:e1:ab:74:1c:16:72:39:f6:7e:0a:
                    39:bb:18:63:32:37:d2:70:d5:79:b7:a3:dd:bd:92:
                    b7:06:24:23:91:09:4e:31:26:2b:f8:75:ea:fe:7c:
                    54:ae:b7:1e:4c:2d:fd:01:b8:12:4f:e9:9b:34:79:
                    d0:fe:bb:8a:19:97:75:b4:64:b6:13:28:44:7b:83:
                    2a:8c:0b:48:04:a0:e5:12:d8:19:64:f9:ea:bb:10:
                    43:f2:4a:2c:b8:a4:de:6f:7c:43:5c:81:cf:99:7d:
                    1b:6c:3f:90:c3:5f:f3:14:13:23:7c:ea:e4:b3:d4:
                    66:61:83:44:4e:59:81:ca:98:d9:ec:40:a6:b6:01:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:3B:03:52:B1:E2:9A:92:48:7C:07:20:22:8E:BF:A4:15:06:BF
            X509v3 Authority Key Identifier:
                keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/bvk7A1Kx4pqSSHwHICKOv6QVBr8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9900:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:68:81:70:2f:ee:5a:4c:73:a5:54:4e:f7:f4:9f:72:10:c7:
         85:09:bb:bb:4a:02:f5:64:0f:dd:0d:5c:f6:b0:cf:ae:40:31:
         fc:63:ba:38:18:67:47:29:c1:21:8d:08:57:63:f6:4c:23:f9:
         fa:5d:72:2b:70:75:c4:37:3b:86:c6:34:41:67:10:e8:cf:bb:
         a4:fd:52:63:02:36:b0:53:db:32:bc:6c:70:da:30:9a:32:38:
         3c:4d:67:50:e2:41:55:4a:46:51:80:80:8d:3c:ff:20:b3:61:
         56:5d:ff:90:e2:e4:49:88:0f:9d:7b:f3:78:c5:65:12:4f:b4:
         b2:fd:5f:ed:09:95:6e:da:21:20:fa:09:39:ab:33:f4:1f:77:
         e7:e9:d5:5c:9e:6b:70:e3:e7:01:ba:8f:26:86:8a:8b:6f:06:
         12:5f:82:10:32:f5:42:4d:ae:26:90:c8:e8:d7:1c:61:a5:b0:
         60:0b:e2:80:7d:b1:00:88:ce:0b:59:38:aa:66:ec:b1:ce:fd:
         1c:c0:e0:5e:6e:0f:8f:80:8d:00:3c:0e:13:1d:68:6d:fc:86:
         99:7d:26:fd:43:b4:6c:cb:d5:26:b6:09:f6:af:8a:7b:53:18:
         98:28:ee:a9:ea:95:99:de:74:42:7b:4f:9f:27:28:d3:80:d2:
         fa:8a:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:34 2025 by rpki-client