Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30414/TOT6gUowq5BjzTgEuYSjWQ7_DCg.roa
File:                     TOT6gUowq5BjzTgEuYSjWQ7_DCg.roa (raw, json)
Hash identifier:          /yy5jfOg6lpcnfgwdhBJccHGwptqA7eRn8AzonhlGKY=
Subject key identifier:   4C:E4:FA:81:4A:30:AB:90:63:CD:38:04:B9:84:A3:59:0E:FF:0C:28
Certificate issuer:       /CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
Certificate serial:       1E
Authority key identifier: F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/TOT6gUowq5BjzTgEuYSjWQ7_DCg.roa
Signing time:             Tue 31 Dec 2024 01:31:50 +0000
ROA not before:           Tue 31 Dec 2024 01:31:50 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     55376
IP address blocks:        2400:c8a0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
        Validity
            Not Before: Dec 31 01:31:50 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4CE4FA814A30AB9063CD3804B984A3590EFF0C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:7c:8f:9e:d9:3d:c9:0f:8b:7f:d0:e0:01:
                    c9:a5:d0:21:d4:91:b0:bd:ae:30:9b:f3:bc:21:2e:
                    2d:4d:c6:9c:9b:53:73:dc:3d:b2:57:b0:73:36:5e:
                    10:ec:f9:55:ae:aa:6e:82:d3:41:64:47:16:cf:70:
                    8d:bd:c6:30:bb:35:be:c0:eb:76:4a:bb:0b:0b:5c:
                    f7:9b:2d:fe:7d:4d:9b:23:00:01:55:e6:4c:94:5a:
                    b0:24:45:b7:09:93:34:2f:32:b4:ed:b6:5a:3b:a6:
                    e2:6d:a9:e0:58:af:b3:4d:ec:d0:cb:a9:57:54:b7:
                    c2:c2:82:6f:26:39:10:2d:68:2a:56:3b:4b:00:fb:
                    7a:ee:d1:f2:78:ad:2b:ad:c1:90:3c:86:73:1a:de:
                    2a:e1:92:37:ad:24:fc:50:24:6c:86:02:2f:55:f1:
                    77:fe:f3:f9:e2:c8:4f:37:4d:c3:a2:c6:28:5e:bf:
                    ea:f0:f4:8c:b5:9e:86:4f:b2:7c:f7:09:a2:5b:c1:
                    c3:5a:ea:ae:db:a1:d1:b2:2a:22:7a:78:70:44:34:
                    26:a1:dc:11:33:7f:7e:5a:37:06:a8:68:0b:1f:57:
                    36:1a:5d:2b:50:0d:22:58:d4:9a:25:95:c1:65:ea:
                    bd:1b:89:b7:cf:a2:cf:f2:b3:ea:28:2c:a5:46:0a:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:FA:81:4A:30:AB:90:63:CD:38:04:B9:84:A3:59:0E:FF:0C:28
            X509v3 Authority Key Identifier:
                keyid:F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/TOT6gUowq5BjzTgEuYSjWQ7_DCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:d1:0b:25:af:8f:be:aa:d5:06:4d:20:6c:9a:a2:65:b3:
         4e:b2:a2:94:dc:ae:be:70:ab:23:32:f5:42:1c:47:94:fb:ab:
         52:9b:01:5b:e6:dc:59:d0:1c:0e:11:08:84:c6:76:8a:8e:b6:
         00:fa:6b:49:5c:97:39:b9:e8:2a:ad:13:f7:33:d5:35:f6:ec:
         93:e8:0d:cc:cd:67:e3:f6:ba:d9:30:fb:ff:f8:e3:9d:07:73:
         23:d0:cb:1f:a0:9d:61:ad:c3:48:65:a3:d5:b2:8b:6e:43:c9:
         ee:d9:5c:53:c8:1f:b4:ec:5d:39:8d:f7:1e:83:b1:ee:4a:98:
         3f:d7:7b:53:f1:fb:90:ad:12:88:82:bb:65:f8:f3:46:40:d3:
         60:74:80:18:59:98:39:58:4c:60:0c:d0:ac:79:47:8e:0b:60:
         64:b0:82:9b:40:dd:25:89:ab:5d:ba:40:54:1e:13:f9:be:25:
         14:81:96:1b:64:d1:45:c6:05:c2:1c:1d:a4:bb:99:9e:09:9e:
         42:42:03:96:1a:36:1f:d0:e1:44:67:33:e2:cc:71:72:af:9a:
         a5:26:83:cf:d4:50:02:c0:1c:c6:bb:9a:eb:eb:66:50:bc:de:
         c1:0f:52:b9:e1:d8:46:ca:ec:dc:6b:41:b5:43:67:e5:d9:b0:
         99:d2:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:15:48 2025 by rpki-client