Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/6TjpPH0mjsx85XRkLxbgPKav7nU.roa
File:                     6TjpPH0mjsx85XRkLxbgPKav7nU.roa (raw, json)
Hash identifier:          8SManJWsl4BJ4v85mpdveP73JWatOLtWNYQoqzlaA+E=
Subject key identifier:   E9:38:E9:3C:7D:26:8E:CC:7C:E5:74:64:2F:16:E0:3C:A6:AF:EE:75
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       7C
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/6TjpPH0mjsx85XRkLxbgPKav7nU.roa
Signing time:             Fri 31 Jan 2025 01:32:00 +0000
ROA not before:           Fri 31 Jan 2025 01:32:00 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18260
IP address blocks:        119.30.12.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan 31 01:32:00 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=E938E93C7D268ECC7CE574642F16E03CA6AFEE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:67:08:56:80:17:5f:2d:1e:c6:1d:ec:71:
                    50:dc:99:e3:f6:78:36:08:fb:b3:e0:2c:a9:d7:b7:
                    dd:6e:2e:d2:ce:57:4a:6e:a7:0e:41:11:46:a2:6d:
                    32:18:2c:0e:d7:80:08:3b:b6:a8:fb:6c:a7:8a:ba:
                    5d:1d:6e:c8:b1:1d:bc:ac:2f:82:2c:16:d4:4a:b9:
                    ba:db:88:dd:f6:eb:fb:51:34:92:2f:c3:c3:dc:a0:
                    6c:9b:27:3a:f6:b8:c7:b8:fe:4c:ce:e0:76:43:9e:
                    d3:df:97:59:18:72:e7:92:04:96:bf:93:7c:3a:13:
                    75:6e:c3:5e:20:3a:3b:fc:41:94:31:9e:be:0e:ed:
                    a2:a4:fa:73:8a:83:2e:3d:12:42:a9:b1:31:64:f1:
                    03:e4:56:97:51:ca:b2:cd:94:cf:88:e0:5c:c4:77:
                    cb:2a:58:48:60:4a:3a:3d:70:81:34:b5:5d:7e:ff:
                    7f:33:c5:8f:63:8b:b4:1e:e8:1a:08:6e:06:09:a7:
                    74:3a:b2:6f:af:64:ac:35:e9:70:8d:17:19:61:a1:
                    d3:24:44:92:5e:bf:5a:63:d6:81:f6:51:32:db:cf:
                    1b:3d:7f:b7:b2:29:2b:cc:70:09:45:58:37:15:e6:
                    b5:79:a0:fd:7e:2e:bd:ca:54:3e:42:96:10:03:1c:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:E9:3C:7D:26:8E:CC:7C:E5:74:64:2F:16:E0:3C:A6:AF:EE:75
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/6TjpPH0mjsx85XRkLxbgPKav7nU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:85:81:75:49:07:45:3f:38:c6:56:45:ad:71:bc:ea:36:
         b7:4f:f6:76:3c:64:a5:30:59:de:49:00:68:11:be:45:c0:ff:
         16:1a:b1:15:a0:76:85:17:31:7f:65:a3:4e:52:93:8e:6f:8a:
         0f:fd:7b:31:83:b6:d2:fb:1f:8f:2c:5d:ac:f1:b6:a1:21:77:
         ef:2a:bc:d7:83:af:fe:f9:70:72:ec:b1:65:6a:5e:64:0f:55:
         4d:49:7d:05:01:83:c1:a0:f9:f6:78:ea:8d:b9:2e:90:00:46:
         f2:86:2a:d1:b7:50:58:ee:2f:44:42:db:08:80:ad:ff:3b:cc:
         9b:b5:22:f3:67:24:cc:92:67:a5:ad:07:87:91:99:3f:2b:ec:
         95:9d:5d:2c:a5:a3:26:e8:17:7c:c5:0d:7b:04:9e:fb:7e:3c:
         84:79:e6:aa:6b:65:0a:73:9f:56:8b:16:ae:41:79:1f:1e:ce:
         ea:4e:a9:0e:ca:af:c0:e8:39:ca:4a:76:1b:83:b0:8f:a0:8e:
         de:d8:bd:1c:f3:f4:02:fe:51:74:fa:06:34:aa:41:45:dd:44:
         a8:01:1e:dc:d7:9e:3c:0d:fd:48:cb:6c:a7:35:6c:03:a6:23:
         0b:a3:af:b9:96:9d:6d:a7:5e:f5:a1:70:0e:74:d1:ab:7d:c2:
         ec:4d:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:07 2025 by rpki-client