Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/SNYNPROe8Lil4iMu5DbneUjvM4A.roa
File:                     SNYNPROe8Lil4iMu5DbneUjvM4A.roa (raw, json)
Hash identifier:          qrsZlbFlVKJ1PC+5a8lDkzk+qajBXRg0KJV7U54c++Q=
Subject key identifier:   48:D6:0D:3D:13:9E:F0:B8:A5:E2:23:2E:E4:36:E7:79:48:EF:33:80
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       30
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/SNYNPROe8Lil4iMu5DbneUjvM4A.roa
Signing time:             Sun 29 Dec 2024 09:50:09 +0000
ROA not before:           Sun 29 Dec 2024 09:50:09 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     31898
IP address blocks:        2401:d20:1a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Dec 29 09:50:09 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=48D60D3D139EF0B8A5E2232EE436E77948EF3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:ed:a3:50:69:b4:05:10:3b:ef:10:8b:bd:
                    94:44:ce:9e:29:5c:24:c4:b8:45:05:bd:70:cf:c6:
                    76:fa:71:e5:80:f8:5c:4a:8e:a8:87:2b:5d:62:10:
                    78:cc:d9:7c:31:95:75:65:40:62:7c:dd:60:91:44:
                    a4:c8:ec:9a:69:6f:2a:79:78:37:81:d5:a2:c4:4a:
                    67:fd:97:d3:0b:ee:3e:9c:be:fd:02:2e:1c:ee:81:
                    0e:58:e6:32:b9:3e:0a:3f:34:52:22:5c:f2:28:3b:
                    59:6e:99:be:fc:94:80:ca:3c:fc:10:f1:76:13:ab:
                    0b:22:fc:ad:3b:34:29:a2:bb:9f:6e:0b:6a:fe:e0:
                    4e:86:70:00:52:b9:96:3c:83:1b:27:1d:22:9e:b3:
                    71:7c:9c:76:33:83:25:2e:f0:32:9c:5a:93:15:40:
                    9a:7a:22:af:10:6e:84:5c:24:bd:34:b0:0e:dd:d1:
                    dc:22:17:05:a5:73:65:e5:15:c2:d4:b5:1e:79:a8:
                    43:5d:05:8f:68:03:62:be:27:05:98:e3:5a:4e:cd:
                    87:40:36:1a:ae:26:86:91:4e:8e:ca:14:d8:50:37:
                    00:c7:00:58:ad:22:32:cc:33:e6:17:01:2e:7d:54:
                    2d:b5:f4:fb:29:55:7d:60:17:3b:41:a2:64:d6:7c:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D6:0D:3D:13:9E:F0:B8:A5:E2:23:2E:E4:36:E7:79:48:EF:33:80
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/SNYNPROe8Lil4iMu5DbneUjvM4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:f1:eb:6c:41:8e:32:50:06:31:73:27:a2:a7:33:c8:94:
         63:bc:50:9e:72:06:4f:d1:0c:3e:b4:4c:e2:84:b3:2c:68:46:
         ad:a8:5c:7d:c8:bf:e0:cc:48:47:79:c4:8e:a1:b0:b4:65:3c:
         58:73:6b:35:52:d5:1d:71:21:2a:98:71:df:1c:ad:09:a4:06:
         13:ef:89:54:4c:eb:0e:d9:86:c0:14:4a:69:37:7c:9f:db:de:
         0d:8f:db:a4:1b:dd:7a:8e:4d:89:a4:eb:ff:cf:7b:d6:84:f4:
         d7:77:6f:73:91:91:a9:8b:2b:a6:c8:6c:15:ae:8f:39:af:8a:
         24:60:dc:96:e4:a9:bd:fb:01:b0:85:07:65:e4:7e:b2:1b:59:
         96:90:32:6c:22:b6:2e:c3:c7:97:7e:98:be:0e:6c:5f:fe:18:
         78:c1:8c:59:53:92:6c:6d:8a:c7:28:d0:36:36:2f:ba:cf:4f:
         68:9f:1d:81:6e:c2:ac:8a:0c:82:10:4e:cf:fc:1c:58:1e:33:
         d6:7a:d7:c9:5d:df:26:60:52:1f:a2:62:56:2a:b9:0e:ee:32:
         3a:0e:49:69:fd:e4:8a:42:34:4a:97:33:f5:6b:76:54:cb:c0:
         9b:0a:ad:57:90:bc:58:82:f3:c0:db:8b:42:9c:81:27:91:6c:
         fa:31:99:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:35 2025 by rpki-client