Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30319/LZD5iVqYXHiuJEjxAhybIxsMJdk.roa
File:                     LZD5iVqYXHiuJEjxAhybIxsMJdk.roa (raw, json)
Hash identifier:          xtYtcs/y3qtiVIxbpEJm++5uWG04MVp5iyrJparawiU=
Subject key identifier:   2D:90:F9:89:5A:98:5C:78:AE:24:48:F1:02:1C:9B:23:1B:0C:25:D9
Certificate issuer:       /CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
Certificate serial:       1D
Authority key identifier: AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/LZD5iVqYXHiuJEjxAhybIxsMJdk.roa
Signing time:             Sat 31 Aug 2024 01:31:19 +0000
ROA not before:           Sat 31 Aug 2024 01:31:19 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     131161
IP address blocks:        2400:53e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
        Validity
            Not Before: Aug 31 01:31:19 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2D90F9895A985C78AE2448F1021C9B231B0C25D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:65:6d:c5:b1:e1:b9:16:9a:38:0f:3c:d4:
                    54:a4:6a:52:36:37:5e:ce:bf:1c:2a:b7:d0:b9:f7:
                    fb:73:b5:4c:c2:46:59:41:f0:46:dd:b1:b1:ee:58:
                    4f:48:36:23:eb:bf:c5:cf:7c:e1:53:aa:57:23:1e:
                    18:9a:72:bd:0c:f0:cd:8e:74:2e:13:7c:b5:e3:8c:
                    cb:e1:3d:2b:23:0b:b2:01:74:57:65:ab:b4:93:72:
                    00:ae:8a:2d:78:11:4e:58:50:5d:bb:e9:ca:84:9a:
                    2f:bb:48:bc:33:20:80:83:aa:da:fa:cf:ca:29:e4:
                    32:6c:ff:f8:08:51:f5:77:23:0f:47:a7:0b:8f:30:
                    08:1d:a9:b3:90:ed:67:cb:2a:d4:14:c6:ab:4e:df:
                    61:e0:67:a0:69:c2:9b:42:08:7d:aa:6c:fc:4c:01:
                    7a:a7:8b:e2:8f:f3:cc:18:c8:77:c1:0c:85:42:a0:
                    2c:96:41:7a:af:6b:66:3a:78:6c:ae:b8:c8:a1:a3:
                    d8:9b:99:ed:63:86:3e:c3:b4:47:1d:43:13:5d:cb:
                    dc:05:31:3d:ae:9a:dc:19:f0:03:7d:d1:cf:2e:ac:
                    72:82:bd:23:a0:df:4c:8a:22:f3:e2:9b:c1:a4:71:
                    20:f5:d7:a2:07:d7:75:64:20:50:3b:55:28:6c:a8:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:F9:89:5A:98:5C:78:AE:24:48:F1:02:1C:9B:23:1B:0C:25:D9
            X509v3 Authority Key Identifier:
                keyid:AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/LZD5iVqYXHiuJEjxAhybIxsMJdk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:2a:82:80:d1:87:e6:00:af:a7:b0:92:f1:bb:55:f8:e8:3e:
         6f:a6:11:d2:31:58:62:96:8a:40:dc:66:6e:ea:f3:23:e1:ca:
         06:75:6b:31:2b:e1:86:92:92:3d:80:fc:bf:f2:13:67:5e:70:
         1a:0e:d7:31:d8:ac:eb:e9:db:ee:b3:91:8a:fd:69:33:7b:fe:
         4f:2b:be:03:3c:01:15:ea:ce:77:f9:30:d7:9f:12:62:45:a2:
         eb:1d:71:50:5c:3c:b7:14:1c:40:ac:fb:b3:bc:7f:05:20:db:
         5c:3d:2b:3f:c5:68:a9:60:f7:39:ae:91:99:78:e5:d6:81:3e:
         29:eb:83:b6:71:cd:28:0f:b8:d8:00:0a:11:af:79:06:e0:5a:
         cb:f6:f7:0f:88:5c:cf:32:8b:56:c0:05:96:a8:56:05:16:18:
         64:07:b6:74:16:2e:d8:1e:6a:d6:23:d7:ee:0d:df:db:90:0e:
         ae:db:de:34:85:6b:92:75:77:3e:c5:02:f0:82:48:97:84:97:
         79:7b:7f:56:f3:f0:c3:07:9e:57:34:cd:ce:13:09:34:d8:60:
         ad:9c:10:0b:dd:36:6a:2e:a6:0f:e3:3e:e4:56:c9:c1:7f:90:
         89:65:6e:33:9f:3e:bf:fa:4a:30:01:0f:d0:2f:8e:80:1b:fb:
         c4:2c:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:04 2025 by rpki-client