Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30184/faypBtFiObr8TxnYlJrOsLjjkTA.roa
File:                     faypBtFiObr8TxnYlJrOsLjjkTA.roa (raw, json)
Hash identifier:          uQFrL7H3KcV+2YnhX9AwxLM5IvbyxKwO9S4cWf7Fobw=
Subject key identifier:   7D:AC:A9:06:D1:62:39:BA:FC:4F:19:D8:94:9A:CE:B0:B8:E3:91:30
Certificate issuer:       /CN=194A63548FDFDDC9179B865546C82FCF2C502CCA
Certificate serial:       12
Authority key identifier: 19:4A:63:54:8F:DF:DD:C9:17:9B:86:55:46:C8:2F:CF:2C:50:2C:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/faypBtFiObr8TxnYlJrOsLjjkTA.roa
Signing time:             Wed 02 Apr 2025 04:11:40 +0000
ROA not before:           Wed 02 Apr 2025 04:11:40 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     10002
IP address blocks:        2400:8300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194A63548FDFDDC9179B865546C82FCF2C502CCA
        Validity
            Not Before: Apr  2 04:11:40 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7DACA906D16239BAFC4F19D8949ACEB0B8E39130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:8f:a1:4f:13:9b:a7:30:12:f1:1d:aa:54:
                    5b:1c:88:4c:93:ee:40:9d:80:e8:74:07:f7:a9:68:
                    28:6c:1c:9f:9c:f2:0a:92:c0:2a:c1:cb:b6:59:00:
                    38:ea:d5:76:e2:2d:77:ed:b6:f6:4e:b5:b2:b8:b0:
                    9e:24:94:d0:ba:5e:92:e8:10:01:ec:8b:4a:74:ad:
                    f6:c7:28:da:26:58:0b:53:3d:a9:24:e2:ac:49:54:
                    4c:20:c1:c4:4d:89:04:18:31:50:e2:46:1c:8c:b7:
                    8e:5a:6f:f8:f4:16:8b:a8:f2:28:b0:45:0c:10:74:
                    c5:e1:3c:a7:1f:a1:75:ab:51:b9:0d:7c:70:5b:21:
                    cc:cf:9e:59:f7:d3:38:cb:71:98:3c:70:dd:f2:1a:
                    01:d6:fc:59:56:93:b8:41:8a:6b:82:b4:31:87:30:
                    81:93:a3:25:aa:9a:74:e1:3e:1d:ca:0d:89:f8:24:
                    51:87:27:51:a4:a3:bc:bd:cb:ea:54:98:41:42:4d:
                    75:45:c7:b1:50:f4:de:07:38:06:ac:d9:6e:5c:1a:
                    c0:25:8c:ad:89:68:c9:5d:18:8b:45:02:81:2b:75:
                    fc:a0:3b:76:54:97:cc:8a:9c:1c:65:c2:91:bc:bc:
                    b1:bd:ab:89:c9:15:97:53:d5:78:57:28:95:e2:0b:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:A9:06:D1:62:39:BA:FC:4F:19:D8:94:9A:CE:B0:B8:E3:91:30
            X509v3 Authority Key Identifier:
                keyid:19:4A:63:54:8F:DF:DD:C9:17:9B:86:55:46:C8:2F:CF:2C:50:2C:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/faypBtFiObr8TxnYlJrOsLjjkTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:6d:b5:d4:65:0a:d7:10:24:3c:08:7e:21:b7:a1:db:10:
         13:cb:bf:8e:f8:45:05:64:b3:9b:fc:74:1b:e6:66:0c:dd:85:
         12:b7:b9:e9:d1:e7:df:ff:c5:b2:68:2e:c9:c6:3b:14:c4:2e:
         ae:4a:b9:e9:82:1d:dd:ce:04:bb:17:8a:ab:88:19:a2:7f:3c:
         a0:f4:40:3e:e0:67:87:80:cb:a4:10:6e:c5:df:af:5b:16:87:
         bb:e1:0f:7f:b2:79:b0:6a:5a:eb:4a:c2:81:bd:fb:2e:c8:bf:
         c3:a6:36:e8:6e:48:e7:ff:bf:3f:3f:94:6b:4b:83:61:ea:4b:
         f0:d9:f6:8e:1b:b1:3e:5d:c6:97:aa:8d:72:59:f4:4d:7b:73:
         60:46:26:66:41:02:b0:04:59:a6:71:15:96:b3:3d:ec:5c:d8:
         43:2d:8f:82:dc:ed:43:e7:de:e6:34:c0:3d:f6:9d:4e:f2:88:
         55:cf:85:7c:a1:c7:39:86:3e:62:19:7c:52:f2:22:90:40:93:
         dc:0a:7e:22:56:a2:f7:48:9c:4f:91:1d:65:9d:2f:68:33:bc:
         02:ff:90:a4:a9:ad:9d:26:1e:38:f2:fa:e1:2b:33:47:57:5f:
         28:95:e5:88:91:2c:1a:9c:42:1d:19:43:d1:73:ef:8f:a8:4c:
         e8:3a:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:14 2025 by rpki-client