Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30388/PcBck07La5H4vEc7PM-UAn9Z62o.roa
File:                     PcBck07La5H4vEc7PM-UAn9Z62o.roa (raw, json)
Hash identifier:          Ja3a7PMQar5nbCWoG9QQvPHRij1FZ1kOJtxz4PUFPzw=
Subject key identifier:   3D:C0:5C:93:4E:CB:6B:91:F8:BC:47:3B:3C:CF:94:02:7F:59:EB:6A
Certificate issuer:       /CN=B1C69CABF1CF070DDA2800A4B119220E5A0E6809
Certificate serial:       02
Authority key identifier: B1:C6:9C:AB:F1:CF:07:0D:DA:28:00:A4:B1:19:22:0E:5A:0E:68:09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/scacq_HPBw3aKACksRkiDloOaAk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/PcBck07La5H4vEc7PM-UAn9Z62o.roa
Signing time:             Thu 06 Jun 2024 07:42:00 +0000
ROA not before:           Thu 06 Jun 2024 07:42:00 +0000
ROA not after:            Fri 06 Jun 2025 07:34:26 +0000
asID:                     59093
IP address blocks:        2407:eac0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/scacq_HPBw3aKACksRkiDloOaAk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/scacq_HPBw3aKACksRkiDloOaAk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/scacq_HPBw3aKACksRkiDloOaAk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C69CABF1CF070DDA2800A4B119220E5A0E6809
        Validity
            Not Before: Jun  6 07:42:00 2024 GMT
            Not After : Jun  6 07:34:26 2025 GMT
        Subject: CN=3DC05C934ECB6B91F8BC473B3CCF94027F59EB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:d8:b2:4b:a9:3a:77:49:21:f5:43:35:dd:
                    72:a0:cf:cd:a8:cb:b6:d3:b8:cd:e1:97:ac:5e:9f:
                    22:f6:8f:30:e0:1c:1f:db:72:2b:fd:50:f5:c2:2e:
                    52:77:06:4a:dd:9c:39:93:90:4a:56:a2:2c:a4:94:
                    48:d2:1b:2c:36:fc:39:1d:f4:54:0f:e7:4a:0f:6d:
                    43:bb:50:69:2f:01:12:58:a1:a9:8c:e2:15:19:41:
                    6e:70:21:ff:eb:35:aa:2d:3d:9b:a5:1a:02:03:36:
                    96:44:45:c2:ef:2f:d9:05:e1:8c:2c:ec:95:8c:a6:
                    22:09:9c:14:ea:31:31:6b:68:54:c4:58:e2:91:0e:
                    b5:1e:b6:bd:0d:04:d5:8c:b7:40:3b:9a:7d:d5:9a:
                    89:54:d0:69:83:d7:a9:59:f6:82:e0:28:33:7d:ae:
                    27:1d:d5:db:be:f5:90:e0:c8:2e:a7:71:cd:2d:a8:
                    d9:81:2d:d6:de:4a:4d:af:89:80:9a:5b:80:3a:6c:
                    d9:68:ee:77:5d:9c:b3:79:07:cf:66:e4:1f:bf:d4:
                    b4:37:49:72:58:53:63:b0:03:c6:b9:f1:fe:83:64:
                    2a:ed:14:42:0d:2d:7b:72:ba:85:63:51:b9:27:ff:
                    70:83:86:2c:0c:4f:cd:76:95:ac:de:1c:14:d4:01:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:5C:93:4E:CB:6B:91:F8:BC:47:3B:3C:CF:94:02:7F:59:EB:6A
            X509v3 Authority Key Identifier:
                keyid:B1:C6:9C:AB:F1:CF:07:0D:DA:28:00:A4:B1:19:22:0E:5A:0E:68:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/scacq_HPBw3aKACksRkiDloOaAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/scacq_HPBw3aKACksRkiDloOaAk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/PcBck07La5H4vEc7PM-UAn9Z62o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:eac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:83:d4:59:6b:90:67:ca:b6:15:f4:84:12:90:57:d3:44:e2:
         f6:b7:2f:81:6b:0e:56:83:2b:11:63:a4:0b:20:bb:54:43:3c:
         fa:29:b5:3d:83:5b:45:fe:0d:2f:a0:eb:02:8e:13:a1:37:89:
         a0:64:0b:de:86:c3:79:55:ee:30:cd:4e:a4:d8:1c:c6:10:89:
         13:79:3f:ea:40:9d:87:96:aa:5e:47:74:11:e9:7a:3b:f2:84:
         8d:b0:d3:e8:3a:6a:db:5d:45:5f:43:12:c0:c2:87:bc:da:64:
         77:43:2c:58:84:d3:79:4c:cb:98:66:42:76:46:94:bb:26:25:
         40:1d:e6:9c:ef:ce:60:17:1f:f3:6d:d1:7f:4e:c7:50:4c:00:
         95:2c:e8:9b:c9:d2:5d:9e:7a:e4:2e:94:b4:61:24:4e:85:24:
         28:62:96:c2:53:fa:78:3b:52:81:21:87:59:0d:31:a8:ac:14:
         cc:de:72:73:96:31:f0:97:71:e3:a3:8b:00:28:df:9a:35:13:
         06:ad:57:59:2a:77:23:69:5b:1c:d5:d1:53:84:2b:b1:9e:b6:
         b5:f9:38:1d:8b:00:7d:70:da:68:cd:0d:ad:78:1f:78:31:e9:
         f4:3f:c7:29:b3:02:1d:12:2a:65:51:e2:e6:45:a1:5d:1c:9a:
         5d:21:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:52 2025 by rpki-client