Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/-SPxMuez1cdq8ts8s197n8Ok_ik.roa
File:                     -SPxMuez1cdq8ts8s197n8Ok_ik.roa (raw, json)
Hash identifier:          YF1D2X1jumyNzbDCoOQf/GzbPPSQbAHbIPCKUyfR03o=
Subject key identifier:   F9:23:F1:32:E7:B3:D5:C7:6A:F2:DB:3C:B3:5F:7B:9F:C3:A4:FE:29
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       2A
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/-SPxMuez1cdq8ts8s197n8Ok_ik.roa
Signing time:             Sat 30 Nov 2024 01:32:28 +0000
ROA not before:           Sat 30 Nov 2024 01:32:28 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     150368
IP address blocks:        2401:d20:1010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Nov 30 01:32:28 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=F923F132E7B3D5C76AF2DB3CB35F7B9FC3A4FE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:1d:e2:74:99:eb:d1:a7:1c:da:bf:e1:01:
                    13:30:e3:7a:77:34:37:29:bb:b9:e5:f4:c5:7f:d9:
                    a0:c0:b7:a8:f8:ca:9b:26:c7:93:7f:0c:35:8f:cc:
                    dd:12:67:a8:da:95:04:bb:c3:4b:61:58:20:e3:1c:
                    84:11:66:68:be:14:06:48:b8:15:f9:02:27:10:85:
                    45:75:ed:c4:d6:67:7f:5e:2c:77:e7:7a:55:25:51:
                    2b:40:e5:cc:8a:99:83:2f:c7:42:fe:19:ca:92:dd:
                    20:8e:35:26:06:85:44:88:7e:84:3a:db:26:82:c9:
                    00:a8:c9:00:4a:fb:77:7f:01:01:4d:5d:70:6b:76:
                    90:29:3f:10:55:26:a8:8f:ce:80:2f:85:43:cb:bb:
                    c2:32:86:11:6e:22:e5:ee:56:b8:bf:6c:42:ca:43:
                    11:c2:07:4a:d3:0b:e0:8e:b9:40:f7:7c:95:63:1a:
                    10:b0:74:9a:dd:c1:d1:be:dc:70:4e:a8:10:e2:e4:
                    47:88:28:f5:52:90:6c:d2:0b:ee:1a:60:dd:b4:70:
                    66:12:89:8e:2c:a0:97:b2:84:69:0c:0d:7f:0b:a9:
                    6c:31:1c:f7:b5:64:4f:b8:9a:6b:c1:d1:df:e6:44:
                    6e:a3:1a:6b:dc:7b:3b:83:2a:ff:ef:b2:bf:03:d4:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:F1:32:E7:B3:D5:C7:6A:F2:DB:3C:B3:5F:7B:9F:C3:A4:FE:29
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/-SPxMuez1cdq8ts8s197n8Ok_ik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:b1:9f:65:9c:f2:3d:d5:64:46:e0:4e:c4:43:f5:5f:31:
         fa:9d:06:7a:08:d1:0d:33:c3:8c:17:8a:45:e4:7f:29:b3:77:
         bc:79:1e:37:01:3c:d4:ae:ef:d5:37:8f:1d:dd:f2:8e:c5:b9:
         50:0a:4b:4a:37:06:3e:28:85:78:fa:17:f5:a9:68:e2:fd:41:
         8d:4a:40:79:29:2e:6e:6d:cf:00:cb:21:ad:fa:d0:82:6b:a5:
         38:72:fe:d8:38:8c:8d:48:48:f0:55:ee:fd:57:dc:2e:9b:90:
         ca:62:51:95:f3:09:2c:57:a7:12:ae:d0:e7:5a:63:5f:3f:5d:
         92:98:6c:51:81:a3:f9:66:c0:32:5a:5f:51:e3:22:9e:ab:f1:
         89:98:0b:9c:83:c2:ad:f8:b1:55:b2:0f:57:69:0b:b8:3c:9e:
         e6:fd:98:77:4a:76:6a:f3:0b:48:fe:ad:73:e7:1d:12:0b:d2:
         56:ad:bf:af:be:4e:06:41:eb:1c:52:e4:53:49:63:84:0d:64:
         8a:70:38:b9:50:1a:36:c8:03:c0:01:65:4a:47:7c:1a:cf:b4:
         c1:52:e6:de:99:29:1f:05:77:ee:54:25:83:81:72:30:a5:72:
         20:80:55:6d:e7:42:af:ab:d5:5d:c1:c6:90:c2:29:d5:67:6e:
         e9:0c:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:09 2025 by rpki-client