Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xRsF8TDx4-WnwySXcbZc49cWczI.roa
File:                     xRsF8TDx4-WnwySXcbZc49cWczI.roa (raw, json)
Hash identifier:          eKrM0YyVqN5xxDS2Ka+QERuzGjteBwGpzpZH+yPephE=
Subject key identifier:   C5:1B:05:F1:30:F1:E3:E5:A7:C3:24:97:71:B6:5C:E3:D7:16:73:32
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       2D
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xRsF8TDx4-WnwySXcbZc49cWczI.roa
Signing time:             Fri 31 Jan 2025 01:29:06 +0000
ROA not before:           Fri 31 Jan 2025 01:29:06 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     146980
IP address blocks:        2001:df0:8bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Jan 31 01:29:06 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=C51B05F130F1E3E5A7C3249771B65CE3D7167332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:2f:ed:08:42:33:55:79:58:29:5d:aa:b8:
                    ec:7e:4a:17:04:ce:d1:32:67:7c:78:12:69:c4:dc:
                    d5:2d:57:42:f5:c2:b5:68:0d:74:4b:6b:f2:1f:97:
                    73:21:5b:29:33:35:d5:10:d5:33:35:f9:aa:f7:2c:
                    f8:a1:45:59:2f:cd:d4:ae:d9:a9:52:9c:63:8e:e7:
                    b9:c9:20:0f:07:c7:a9:ce:86:57:45:20:0a:d8:b5:
                    97:14:7d:2c:c5:56:11:de:b9:44:7a:77:56:e3:e2:
                    c3:06:93:b9:ee:dc:b0:18:18:9d:fc:59:8b:59:3b:
                    e8:d0:7e:0f:0e:24:80:a3:a7:a0:08:ad:2a:4e:4e:
                    4a:ff:df:94:07:97:51:6b:48:08:54:11:33:51:01:
                    9f:3e:6c:9c:45:08:10:ee:e8:78:9f:fb:f9:1f:0d:
                    8f:f5:9c:6f:9d:cb:a7:6f:cb:08:ae:68:06:ae:50:
                    3f:0d:dc:01:e9:f8:48:eb:b7:6e:e2:68:86:92:f5:
                    d1:6e:81:a7:ec:d8:77:86:88:73:b4:a8:b2:ab:bb:
                    b4:5a:8a:6b:02:88:24:98:8b:56:32:1a:b0:b1:1a:
                    b3:7d:b3:76:a5:e7:50:5e:4a:8d:74:83:38:5f:57:
                    2c:c4:18:0d:ae:d1:8a:6e:55:f1:f6:56:58:1c:62:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1B:05:F1:30:F1:E3:E5:A7:C3:24:97:71:B6:5C:E3:D7:16:73:32
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xRsF8TDx4-WnwySXcbZc49cWczI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:55:24:fc:38:c5:b6:c1:7a:89:8a:e7:b8:f2:15:04:9a:
         50:49:81:17:5b:e5:3b:39:ee:fd:30:56:e8:d7:1c:83:1c:14:
         df:1f:25:31:bd:33:e3:aa:a9:a1:96:67:7c:45:7d:bd:e9:e3:
         b4:35:47:1a:af:4d:ac:b8:eb:d8:81:9d:c5:49:69:cc:71:6a:
         53:09:0f:59:34:f7:64:55:d9:d0:b1:24:4f:93:21:ad:46:d1:
         c7:32:25:13:ff:80:96:eb:59:11:3a:8c:dd:cc:44:9a:62:bc:
         c4:82:bb:8f:b7:af:c1:d7:78:25:d2:fc:b9:0f:f2:18:10:b7:
         39:09:24:b2:f0:c7:79:ae:f3:17:fb:2f:d3:02:af:5d:60:99:
         95:a8:05:70:ad:02:b3:4a:60:3a:9a:6e:f0:bc:de:e7:e6:49:
         0f:e2:19:a3:cc:9d:5e:1f:43:0f:c4:25:81:e1:5f:ef:0f:dc:
         b9:28:9d:5a:b7:ba:35:ec:64:4a:23:d2:c1:8b:3b:2d:31:cf:
         87:fc:e3:ad:5b:59:69:17:03:e9:ff:37:be:a2:b2:3a:10:f4:
         d6:79:96:98:24:55:0c:1d:ea:5b:42:28:76:61:de:63:c8:b9:
         ce:08:12:39:6b:94:01:01:1a:5f:72:46:0b:85:09:40:61:ad:
         bc:7d:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:53 2025 by rpki-client