Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/9IQG6fLukjtKJBTBw1E8UwHb_SQ.roa
File:                     9IQG6fLukjtKJBTBw1E8UwHb_SQ.roa (raw, json)
Hash identifier:          iv9ktQwNdxgYwIpUv3ePhJ/1uM44PGdlxh3J/NEtG+o=
Subject key identifier:   F4:84:06:E9:F2:EE:92:3B:4A:24:14:C1:C3:51:3C:53:01:DB:FD:24
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       40
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/9IQG6fLukjtKJBTBw1E8UwHb_SQ.roa
Signing time:             Tue 01 Apr 2025 01:30:28 +0000
ROA not before:           Tue 01 Apr 2025 01:30:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F48406E9F2EE923B4A2414C1C3513C5301DBFD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:2d:c7:3a:50:10:ff:52:7a:60:7f:2f:f1:
                    58:de:a4:b2:7f:26:55:ce:0f:eb:7a:cc:1a:82:bf:
                    61:df:b0:50:22:71:30:62:eb:bf:dd:bc:9a:69:9a:
                    1d:99:04:44:f6:29:13:5d:c9:1b:97:9b:cd:cb:e9:
                    be:f7:0e:6e:7f:b6:75:56:89:f4:d9:ab:1d:42:e6:
                    bb:ed:98:10:e7:0a:53:f4:22:b7:1f:2c:56:79:d7:
                    fa:0c:3c:e6:2a:ac:5e:e5:36:50:23:48:ac:b5:73:
                    d9:75:30:86:7e:8d:86:45:59:b9:29:b4:5c:f9:c7:
                    a1:2f:b8:d1:bc:76:1c:f9:73:f6:11:02:1e:0f:8e:
                    c9:f7:79:13:27:a8:8f:61:42:7e:45:00:ea:d8:6e:
                    2a:95:dc:47:bc:1b:a6:d2:3d:84:0d:ef:04:07:a2:
                    67:69:8b:ad:9c:24:1d:fc:b4:29:27:7b:d3:b6:8e:
                    e7:f4:c1:ec:20:17:2d:e0:4b:64:cf:fa:81:d9:3b:
                    7a:d4:13:eb:7a:3a:43:21:ec:85:93:ad:2f:c4:24:
                    e6:12:b7:27:23:0f:e6:ed:0c:d6:5f:ed:bc:d4:72:
                    72:8c:d9:fb:a5:d9:43:42:9d:b3:2a:4e:4d:fc:1a:
                    69:e4:07:40:cd:fa:07:72:a7:4b:94:6e:11:48:a1:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:06:E9:F2:EE:92:3B:4A:24:14:C1:C3:51:3C:53:01:DB:FD:24
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/9IQG6fLukjtKJBTBw1E8UwHb_SQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:50:0e:b5:b8:17:da:65:9b:fb:03:27:64:9d:0e:92:3d:
         72:8a:3a:cf:66:08:3b:a2:7b:2c:64:17:1b:18:68:4d:45:2d:
         37:03:d0:37:67:bb:67:90:76:96:f6:b2:d0:00:cf:33:a5:8b:
         73:17:10:a1:42:fd:61:66:22:22:52:d3:24:a6:60:6a:47:1a:
         26:31:4f:98:71:58:b0:00:5c:bf:b0:c6:84:e3:6d:f0:d1:9e:
         fd:88:95:51:8d:f9:3d:77:fb:bc:47:98:5f:6b:59:a7:09:fc:
         23:c7:66:c1:3e:8b:6e:4a:9a:df:50:46:a7:da:a3:86:ce:64:
         57:19:5a:2a:5f:73:4f:be:94:27:bc:d6:26:cf:aa:51:b3:0d:
         cb:1e:c5:89:25:e4:eb:43:d2:34:ff:a0:56:96:d9:29:d9:04:
         e6:a3:bb:d4:d0:87:d9:60:0c:88:14:d8:e4:f8:5c:5f:29:88:
         f5:c4:50:d5:5d:0d:db:96:22:ea:88:70:b4:69:68:e8:45:fc:
         e5:e3:a7:e6:a2:71:d3:79:c0:9d:b7:b4:5e:5d:8e:03:92:65:
         62:05:00:9a:3b:3a:e9:ad:13:53:42:e3:1e:a1:d0:9d:fb:d0:
         00:f9:ea:6b:a7:a6:26:4b:45:2a:af:a3:b8:04:b1:9c:f6:b7:
         62:d3:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:07:58 2025 by rpki-client