Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39054/vkSuDwkDBoA7QhMXMN4Km0Bb9hM.roa
File:                     vkSuDwkDBoA7QhMXMN4Km0Bb9hM.roa (raw, json)
Hash identifier:          jjjudYuW10M6jG3Bi5CpphP+M3Vw0QjYA8VDD7fDpNc=
Subject key identifier:   BE:44:AE:0F:09:03:06:80:3B:42:13:17:30:DE:0A:9B:40:5B:F6:13
Certificate issuer:       /CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Certificate serial:       46
Authority key identifier: 99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/vkSuDwkDBoA7QhMXMN4Km0Bb9hM.roa
Signing time:             Sat 01 Mar 2025 01:28:17 +0000
ROA not before:           Sat 01 Mar 2025 01:28:17 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18131
IP address blocks:        2001:df4:1f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
        Validity
            Not Before: Mar  1 01:28:17 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=BE44AE0F090306803B42131730DE0A9B405BF613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:c6:4b:10:6f:bc:7e:30:55:dc:61:6a:19:
                    b2:35:6b:48:b1:68:78:f1:98:52:ea:46:35:e5:88:
                    fc:2f:8b:51:d3:9c:3d:8e:d5:f1:58:45:37:2f:11:
                    f5:1f:af:ed:1b:08:00:1f:06:8e:5a:0e:19:39:2b:
                    f0:59:49:fc:bb:19:3c:b5:8b:a9:ef:66:15:bc:97:
                    7a:50:e6:55:ae:d4:50:47:a6:9d:9a:91:23:12:bc:
                    f9:53:16:45:a7:65:a6:4a:07:42:20:17:94:ac:62:
                    fe:f0:8a:fb:98:19:a2:b3:a7:a6:04:65:c6:c2:e6:
                    a1:93:ee:d9:94:78:4f:39:a7:d1:e7:49:a6:14:32:
                    14:f0:2f:6d:05:b0:07:bf:a2:84:7d:59:01:21:11:
                    17:ba:e1:7c:6c:72:6d:ed:a9:f2:ec:6e:06:c4:2f:
                    b2:94:8b:dd:3e:19:c5:7a:62:22:db:f5:8e:ae:3d:
                    14:83:f1:26:16:b9:23:99:2f:88:86:85:c0:ce:a1:
                    42:1f:7f:5e:5c:74:61:01:05:3c:52:45:bc:05:9c:
                    0e:79:a0:67:06:cd:c4:42:b0:46:b9:7c:5a:3d:71:
                    93:76:48:9c:bc:4c:80:21:ed:bf:e2:1e:fe:fb:04:
                    cf:3e:49:8d:cd:4a:85:2c:6b:f4:a4:14:4b:25:cd:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:44:AE:0F:09:03:06:80:3B:42:13:17:30:DE:0A:9B:40:5B:F6:13
            X509v3 Authority Key Identifier:
                keyid:99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/vkSuDwkDBoA7QhMXMN4Km0Bb9hM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:13:1c:5e:71:88:3a:18:58:d4:dd:92:01:be:75:d8:1d:ec:
         b3:e4:ae:2e:10:27:00:11:57:a6:9d:bf:76:3a:9b:ac:25:e5:
         c5:54:aa:9e:28:4c:3d:43:c9:73:1c:51:e1:46:f7:2d:66:61:
         b3:3f:22:96:bc:e0:49:3a:52:3d:46:df:c9:d6:75:b9:bd:3e:
         52:73:ef:1a:a7:15:98:17:b6:40:e6:06:0a:38:8d:51:ba:7b:
         00:07:e4:35:3b:d0:77:fe:a3:ca:f2:dd:6f:f9:45:df:23:30:
         cd:09:db:ea:93:4f:d2:ee:f2:1d:82:c5:b3:f2:65:77:43:14:
         fd:5e:3c:86:aa:bf:f9:e1:94:4e:f5:3b:c6:6f:e7:c2:41:f4:
         e5:97:0f:a9:ae:01:2f:18:9b:43:e0:fb:3e:fb:a8:bd:a3:21:
         f5:8a:94:3d:c4:ae:3a:7c:a5:db:51:6b:02:99:48:e6:0b:ba:
         d0:8e:c4:62:40:33:4e:dd:29:cd:ab:4c:94:f6:98:23:6e:db:
         5d:46:9f:08:3d:3c:26:f3:ad:13:7d:87:0b:57:27:eb:1e:53:
         3e:e6:3e:0a:19:70:12:84:ba:d5:f2:ae:39:20:d8:67:f8:99:
         97:f5:57:0c:41:3a:fe:22:6b:db:64:99:eb:ec:34:d0:23:36:
         1b:1e:25:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTc2
OTBBQ0Y3OURDNEY1ODFFQkU2RDM1MjJBMEY2MjUwQjUyMDQzMB4XDTI1MDMwMTAx
MjgxN1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQkU0NEFFMEYwOTAzMDY4
MDNCNDIxMzE3MzBERTBBOUI0MDVCRjYxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOktxksQb7x+MFXcYWoZsjVrSLFoePGYUupGNeWI/C+LUdOcPY7V
8VhFNy8R9R+v7RsIAB8GjloOGTkr8FlJ/LsZPLWLqe9mFbyXelDmVa7UUEemnZqR
IxK8+VMWRadlpkoHQiAXlKxi/vCK+5gZorOnpgRlxsLmoZPu2ZR4Tzmn0edJphQy
FPAvbQWwB7+ihH1ZASERF7rhfGxybe2p8uxuBsQvspSL3T4ZxXpiItv1jq49FIPx
Jha5I5kviIaFwM6hQh9/Xlx0YQEFPFJFvAWcDnmgZwbNxEKwRrl8Wj1xk3ZInLxM
gCHtv+Ie/vsEzz5Jjc1KhSxr9KQUSyXNiO8CAwEAAaOCAiswggInMB0GA1UdDgQW
BBS+RK4PCQMGgDtCExcw3gqbQFv2EzAfBgNVHSMEGDAWgBSZdpCs953E9YHr5tNS
Kg9iULUgQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNTQvbVhhUXJQZWR4UFdCNi1iVFVpb1BZbEMxSUVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbVhhUXJQZWR4UFdCNi1iVFVpb1BZ
bEMxSUVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzM5MDU0L3ZrU3VEd2tEQm9BN1FoTVhNTjRLbTBCYjloTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ30H4AwDQYJKoZIhvcNAQELBQADggEBAAATHF5xiDoYWNTdkgG+
ddgd7LPkri4QJwARV6adv3Y6m6wl5cVUqp4oTD1DyXMcUeFG9y1mYbM/Ipa84Ek6
Uj1G38nWdbm9PlJz7xqnFZgXtkDmBgo4jVG6ewAH5DU70Hf+o8ry3W/5Rd8jMM0J
2+qTT9Lu8h2CxbPyZXdDFP1ePIaqv/nhlE71O8Zv58JB9OWXD6muAS8Ym0Pg+z77
qL2jIfWKlD3Erjp8pdtRawKZSOYLutCOxGJAM07dKc2rTJT2mCNu211Gnwg9PCbz
rRN9hwtXJ+seUz7mPgoZcBKEutXyrjkg2Gf4mZf1VwxBOv4ia9tkmevsNNAjNhse
JWM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:05 2025 by rpki-client