Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/eRTWQkQY_f_MTebxeXS6l2a-Hm4.roa
File:                     eRTWQkQY_f_MTebxeXS6l2a-Hm4.roa (raw, json)
Hash identifier:          R77EyI5OYvDl7EpIS0K9QpSqt0EfBYSd4OBkpT7whR4=
Subject key identifier:   79:14:D6:42:44:18:FD:FF:CC:4D:E6:F1:79:74:BA:97:66:BE:1E:6E
Certificate issuer:       /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial:       4B
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/eRTWQkQY_f_MTebxeXS6l2a-Hm4.roa
Signing time:             Fri 31 Jan 2025 01:32:09 +0000
ROA not before:           Fri 31 Jan 2025 01:32:09 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        2401:2500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
        Validity
            Not Before: Jan 31 01:32:09 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=7914D6424418FDFFCC4DE6F17974BA9766BE1E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:12:5d:e7:d3:7f:cc:96:d8:32:ae:d5:61:
                    d9:d0:f5:0b:36:4f:e7:e9:e8:23:42:7c:3c:93:dd:
                    5e:fc:4a:ca:7e:47:6c:c7:4e:d7:31:e2:e6:94:d4:
                    03:ad:3b:c4:f4:cc:0d:27:70:2e:c1:1d:39:9c:0e:
                    ef:26:22:41:7d:68:c0:f5:03:f5:36:4d:f0:8f:f8:
                    fd:30:42:37:ba:27:9d:9e:ae:1b:d1:b8:4e:0f:3d:
                    cc:97:8f:be:a9:0e:cb:d9:85:99:3c:31:fd:17:68:
                    3a:92:f9:cb:8f:bf:fb:ef:06:68:1d:f2:a4:c6:25:
                    54:9f:d6:09:d2:f5:46:af:80:af:02:bf:1f:3a:8e:
                    56:f4:40:46:40:bb:b1:96:3f:5b:27:db:44:6c:68:
                    db:0e:a1:ab:34:f4:57:74:60:da:39:a7:ba:29:ea:
                    0f:52:ee:22:78:e5:46:f2:a8:e6:80:fc:3d:a5:99:
                    ef:1b:f0:2f:6d:e4:22:38:69:90:12:e1:72:15:b6:
                    b8:09:67:50:f7:0f:ab:85:79:43:6b:c1:cb:cf:d0:
                    2f:61:73:e9:df:a1:85:17:29:21:b1:80:87:e0:a1:
                    6f:df:ef:4e:b8:a9:47:98:0b:4c:8d:4f:8f:33:4e:
                    db:99:bb:04:41:77:bc:a6:eb:c7:d4:6c:9e:17:66:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:D6:42:44:18:FD:FF:CC:4D:E6:F1:79:74:BA:97:66:BE:1E:6E
            X509v3 Authority Key Identifier:
                keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/eRTWQkQY_f_MTebxeXS6l2a-Hm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:75:38:a6:ad:fd:4c:a8:9e:19:91:6c:bb:a7:35:8f:d9:
         e0:a9:c9:fb:9c:16:f4:79:67:1d:3d:c0:26:62:30:61:c3:98:
         bb:3e:8f:b0:e7:05:e9:b6:9f:ec:93:ec:e9:ff:88:ab:b4:ac:
         f4:81:c1:0d:2d:46:00:3b:97:58:d7:3b:10:4c:75:87:69:a8:
         51:b3:d6:48:a2:03:7d:3d:a2:e1:b0:23:8a:85:10:55:b2:7e:
         28:01:9a:36:f2:35:85:96:c8:77:1b:8a:59:3a:ba:af:2b:fc:
         f9:b9:fe:62:ef:df:f9:95:69:b8:89:d5:b0:08:78:4c:1b:c3:
         96:4c:3d:06:c6:67:a5:69:90:88:1f:bb:95:cc:9a:b8:fb:94:
         25:f1:9a:3f:02:77:c6:d3:0a:d1:35:12:ee:76:c3:64:b4:c8:
         cd:57:d7:65:59:d1:53:4d:b1:3b:ba:0c:d6:a4:6e:ed:1f:61:
         9b:1e:fc:8e:ec:98:8a:eb:cb:36:bb:40:61:46:ff:61:3f:0e:
         48:fa:1b:09:40:66:8b:ac:60:98:ab:32:dc:2b:38:a6:48:ff:
         1d:b7:26:e1:05:f6:8a:7c:bf:ba:08:fb:9e:f9:58:77:06:02:
         d5:2f:d1:29:41:93:8a:6b:ef:10:9d:87:db:24:c4:3b:ea:7e:
         b8:f6:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:39 2025 by rpki-client