Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/sJLQ6b42MYlpQQ0XgeWYNp2QcVY.roa
File:                     sJLQ6b42MYlpQQ0XgeWYNp2QcVY.roa (raw, json)
Hash identifier:          wLusf/ZXYD8Xn4rUVD5u0GCI9IdR8sI+lAX0CO4r5SI=
Subject key identifier:   B0:92:D0:E9:BE:36:31:89:69:41:0D:17:81:E5:98:36:9D:90:71:56
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       4A
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/sJLQ6b42MYlpQQ0XgeWYNp2QcVY.roa
Signing time:             Tue 01 Apr 2025 01:30:32 +0000
ROA not before:           Tue 01 Apr 2025 01:30:32 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:32 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B092D0E9BE36318969410D1781E598369D907156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:a9:c3:aa:d9:83:ca:f9:8b:d9:02:c3:64:
                    5a:a6:e6:db:ea:e1:88:86:ad:13:5a:e5:65:6f:34:
                    e3:e5:99:fc:c5:e9:0f:b1:90:be:24:3f:c2:5a:6d:
                    9e:14:75:b7:b6:95:58:b6:85:45:17:7b:b6:c7:93:
                    e3:2d:78:d6:f8:04:2a:28:60:c7:07:8e:21:c6:f4:
                    0c:df:35:1a:77:bf:54:c0:62:54:8a:fc:0c:40:38:
                    71:d3:a6:bf:8a:d3:d7:32:0c:15:50:f4:be:64:1a:
                    ac:41:ca:b9:40:9c:92:ae:c0:c3:1a:7a:de:bb:b6:
                    ae:84:1a:63:44:6f:8f:43:86:9e:78:f4:cb:e1:29:
                    1d:49:96:4b:fa:80:be:26:15:5e:77:4e:56:ca:4a:
                    f6:4b:b1:08:b8:7f:b9:f7:18:e0:bd:86:f2:42:43:
                    a9:c5:d4:e9:91:df:58:0a:fb:c0:a3:48:9b:07:fd:
                    8c:58:22:2d:f9:a8:e2:e7:52:ef:0f:5c:1b:b7:f7:
                    cf:e8:ad:a5:2c:30:75:c7:8e:07:aa:0c:13:11:4d:
                    2e:6d:54:eb:d8:60:de:aa:f0:0c:df:a8:b7:f9:2f:
                    cc:79:75:73:6f:e7:bc:bc:97:af:d6:dc:bc:04:35:
                    5e:41:cc:8e:51:b2:0d:a2:98:c2:7f:8b:76:1c:9c:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:92:D0:E9:BE:36:31:89:69:41:0D:17:81:E5:98:36:9D:90:71:56
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/sJLQ6b42MYlpQQ0XgeWYNp2QcVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:60:6f:63:54:20:a2:41:69:14:d4:da:dd:cb:7a:ba:68:ca:
         e0:dc:47:dc:21:bd:1c:33:c6:ff:8d:ba:7c:3f:9e:72:27:59:
         b8:17:53:da:60:81:e3:29:a4:c8:8c:bd:db:37:92:aa:10:02:
         57:94:35:72:0e:69:02:45:b7:27:31:bd:20:3c:ef:f4:8c:75:
         2f:a7:c3:45:3d:c4:18:f7:ed:36:bb:98:8e:54:5e:52:13:d5:
         87:9e:22:85:5b:84:9f:e6:00:cc:af:c6:4a:bc:22:4c:0b:6c:
         36:e6:50:3e:1d:4f:64:5c:72:6b:33:3c:98:c4:86:3d:1d:6f:
         8e:29:85:d2:87:aa:0a:77:84:7f:e4:17:e9:a5:a3:87:36:98:
         f3:35:3b:17:c7:e0:93:c5:7d:36:64:d8:c0:5c:d1:36:b7:10:
         b3:a1:9d:36:76:35:84:14:89:66:e3:34:17:2e:99:cf:41:3a:
         29:1e:10:ad:0a:d2:64:3e:5b:66:75:fa:a6:c0:20:79:dd:ed:
         69:5b:ba:26:0e:25:c6:dd:ec:1f:0c:ac:17:64:c4:d8:21:df:
         5c:81:3d:3d:ea:34:3f:f3:ab:e5:d7:f5:39:a9:8e:a2:31:a7:
         3a:c7:36:c7:fc:0e:82:eb:a0:04:9a:1a:14:92:96:e3:03:83:
         de:39:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:11:26 2025 by rpki-client