Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/SVed5hzfvN3CVTc-9GaRFD6AKi0.roa
File:                     SVed5hzfvN3CVTc-9GaRFD6AKi0.roa (raw, json)
Hash identifier:          3wKq6m2FDDY3g6/LFD04FjvRRGOfou31JAN3/uNB/AI=
Subject key identifier:   49:57:9D:E6:1C:DF:BC:DD:C2:55:37:3E:F4:66:91:14:3E:80:2A:2D
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       05
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/SVed5hzfvN3CVTc-9GaRFD6AKi0.roa
Signing time:             Mon 23 Dec 2024 03:00:32 +0000
ROA not before:           Mon 23 Dec 2024 03:00:32 +0000
ROA not after:            Fri 19 Dec 2025 12:59:01 +0000
asID:                     14618
IP address blocks:        2404:7a00:f000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 04:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Dec 23 03:00:32 2024 GMT
            Not After : Dec 19 12:59:01 2025 GMT
        Subject: CN=49579DE61CDFBCDDC255373EF46691143E802A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:7f:c6:27:fc:79:72:c7:a9:51:c4:bc:af:
                    49:16:f5:9a:bc:01:ff:67:59:06:03:5f:76:aa:ac:
                    02:9f:ec:39:0f:59:f1:33:c1:6e:40:fc:c4:af:e8:
                    f8:99:d0:df:b5:15:2b:2c:00:9b:de:9b:75:3f:4c:
                    ba:8b:72:3e:c4:94:36:38:4c:9f:00:e9:b0:b3:c1:
                    8b:5b:2d:a4:8e:7a:f8:bf:cc:49:79:23:89:91:37:
                    86:5a:30:f4:c5:f9:55:7e:23:00:a2:90:ae:b0:d7:
                    98:1b:18:51:07:3b:22:0f:61:94:f4:07:93:d4:a4:
                    a6:cf:4c:bf:8a:95:92:2b:fd:7b:40:d3:03:99:b8:
                    2e:de:2b:ce:c2:52:2f:ac:98:ce:e3:52:5b:45:9d:
                    67:d9:ba:96:49:85:68:50:ea:df:0a:5c:ad:1c:1c:
                    9a:98:50:9b:c6:3b:8e:2b:77:5a:c7:b7:0f:f9:1e:
                    77:a1:44:4d:e9:83:e5:e7:d4:67:9a:73:a3:2c:53:
                    0f:61:6a:69:8d:ca:89:61:ad:fc:44:ff:4a:e1:ca:
                    9a:a1:61:56:c2:7a:e3:db:2a:ef:12:2e:ed:bd:d6:
                    aa:65:43:ab:1c:67:4e:ff:03:b7:02:cb:1f:32:65:
                    da:06:97:40:71:8c:41:d4:43:38:21:4b:c4:d4:2c:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:9D:E6:1C:DF:BC:DD:C2:55:37:3E:F4:66:91:14:3E:80:2A:2D
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/SVed5hzfvN3CVTc-9GaRFD6AKi0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         df:87:21:64:1e:5c:52:a8:8e:03:16:82:2f:ef:9f:c0:7e:4a:
         25:ff:d1:b0:64:6e:dc:d4:7e:a8:e1:cd:da:79:00:46:c0:71:
         82:03:e7:67:02:b3:20:43:2c:bc:9f:e5:bd:d5:98:57:71:60:
         b2:8c:61:ec:b6:07:f2:13:14:2b:44:d9:20:43:c3:9a:66:47:
         67:f7:fd:2b:4e:8b:be:86:d0:af:a4:5e:09:80:6d:bf:cc:2e:
         75:f7:71:0a:04:f3:1d:0f:74:cd:f0:73:03:2e:32:30:85:b5:
         d9:e8:31:8c:4b:ec:50:0f:a8:25:75:c4:e3:fc:80:ca:13:6b:
         d8:db:46:0a:4d:a9:ee:49:27:b1:36:2c:8a:4c:54:4a:4a:c1:
         1f:28:a9:90:6f:e7:97:a1:93:01:f6:4d:01:3e:5b:bd:c9:14:
         e1:b2:de:07:f0:f5:87:ff:09:cc:05:db:b8:0c:d4:6a:51:2e:
         9f:a3:68:43:f6:2d:6a:f1:9c:e9:7e:c1:e0:1a:10:0d:03:13:
         d2:5f:d5:e6:f1:8d:e0:97:c3:03:d6:b3:ea:bb:c7:34:f4:b0:
         db:c8:53:c8:f0:90:cc:63:60:4e:9b:98:6c:07:b5:bc:18:6d:
         96:e9:ef:69:e3:a6:93:72:93:8c:d5:07:35:8e:ef:63:07:69:
         17:48:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:46 2025 by rpki-client