Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30152/_HIjihuwFQ4BYrhj1WQGsJLCGVU.roa
File:                     _HIjihuwFQ4BYrhj1WQGsJLCGVU.roa (raw, json)
Hash identifier:          gy1TD+m9jP9ndNhCbSoLCa1afr2C8DQOXoKNrElA1cQ=
Subject key identifier:   FC:72:23:8A:1B:B0:15:0E:01:62:B8:63:D5:64:06:B0:92:C2:19:55
Certificate issuer:       /CN=32A9405644783B786C8DDF2454BB5BDF511983B4
Certificate serial:       11
Authority key identifier: 32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/_HIjihuwFQ4BYrhj1WQGsJLCGVU.roa
Signing time:             Sat 17 Aug 2024 05:45:40 +0000
ROA not before:           Sat 17 Aug 2024 05:45:40 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18121
IP address blocks:        2404:a00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A9405644783B786C8DDF2454BB5BDF511983B4
        Validity
            Not Before: Aug 17 05:45:40 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FC72238A1BB0150E0162B863D56406B092C21955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:54:ad:2e:e1:8d:8a:94:52:8a:2b:f4:52:
                    b5:d1:8d:cc:c4:e0:a6:99:8e:11:e6:e3:d6:0f:bb:
                    d0:54:09:41:4f:db:04:1b:e9:0b:1d:62:15:6b:bd:
                    7e:4e:2f:fb:87:cf:19:97:70:4e:cf:b6:aa:ae:a9:
                    dd:e0:2b:a5:c8:5f:40:47:fc:fe:4b:24:6a:2a:a7:
                    c1:c8:e8:3a:56:70:4d:ba:8d:98:94:20:0d:93:6d:
                    34:cf:e3:b5:6c:3c:82:b3:df:f1:6c:b6:b2:1a:cb:
                    c9:c2:90:65:81:e5:a9:75:8e:0d:0e:b8:a2:c7:bd:
                    3b:dc:09:59:7d:75:27:df:d0:01:40:13:ad:5b:93:
                    42:d7:1e:fe:9d:6a:70:c8:0e:c1:29:98:c6:f3:ba:
                    e6:dc:bb:bf:54:eb:6c:35:b2:24:9c:45:f6:d8:bc:
                    5e:38:87:6e:66:12:20:45:77:ed:b1:63:88:46:cd:
                    9e:ea:2a:97:93:71:79:a2:5b:19:3a:0c:3c:35:a4:
                    6f:55:26:54:3b:f8:d5:a5:cc:53:7d:e6:d8:57:d6:
                    11:a2:5e:90:55:c6:5f:76:b9:4b:06:95:69:05:8e:
                    18:47:ab:50:8e:ce:02:cb:7a:88:83:28:2f:c9:37:
                    e7:c4:76:5b:a2:df:88:2d:6c:84:6e:e2:80:f6:53:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:23:8A:1B:B0:15:0E:01:62:B8:63:D5:64:06:B0:92:C2:19:55
            X509v3 Authority Key Identifier:
                keyid:32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/_HIjihuwFQ4BYrhj1WQGsJLCGVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:b5:a1:3c:e0:2e:b6:5e:7c:0e:95:93:0f:3f:55:d2:52:
         a3:de:12:e1:d6:1d:6e:4a:b9:58:4d:f6:17:7c:33:c2:ec:81:
         b6:f3:9b:c0:39:d7:b3:aa:8b:68:4e:ef:8d:5e:19:ec:64:4f:
         ad:f5:c9:1e:3c:9f:96:50:15:fc:a7:c1:75:e7:af:a5:9f:6d:
         35:0f:a8:db:4f:02:7f:1b:c8:49:12:d2:fc:a6:aa:ac:b4:1b:
         9f:51:12:af:e7:30:fc:42:09:2a:67:7b:ee:d0:2c:c6:3b:dc:
         06:c1:b3:8d:36:1c:b7:13:c1:a7:ab:a5:64:72:3b:ce:c5:2c:
         2c:b7:8e:9a:37:53:1b:3f:00:7b:29:6a:d2:a2:b6:d5:31:7c:
         dc:c5:23:42:52:f5:48:bf:c2:d1:ee:7f:25:19:9b:3a:a3:19:
         9a:3f:b5:e1:75:36:58:fb:3a:1f:d7:d5:15:ba:88:cd:f2:0e:
         5b:06:0f:0a:f7:87:9e:ec:98:a8:3b:b7:28:8b:cc:ef:c6:db:
         89:4c:e8:e0:7b:a2:8a:85:e1:2c:70:6d:cf:93:2c:82:5b:c0:
         fa:b1:17:de:df:3d:aa:7f:de:a2:66:be:1d:30:45:11:8d:df:
         4b:e8:19:28:fd:e6:fc:9b:77:60:2e:37:a3:0d:79:0d:6b:3b:
         b0:bc:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:11 2025 by rpki-client