Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30320/MmlojjZyljHT4cX93H1khDMy_LQ.roa
File:                     MmlojjZyljHT4cX93H1khDMy_LQ.roa (raw, json)
Hash identifier:          ZQYaVWnLMCMeio31Ztz/tbiW6s9OkBON+nduNPnGl+I=
Subject key identifier:   32:69:68:8E:36:72:96:31:D3:E1:C5:FD:DC:7D:64:84:33:32:FC:B4
Certificate issuer:       /CN=041B660708C68D9770418A81721FF0771F0A4A19
Certificate serial:       2F
Authority key identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/MmlojjZyljHT4cX93H1khDMy_LQ.roa
Signing time:             Fri 31 Jan 2025 01:28:50 +0000
ROA not before:           Fri 31 Jan 2025 01:28:50 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     131929
IP address blocks:        2402:73c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B660708C68D9770418A81721FF0771F0A4A19
        Validity
            Not Before: Jan 31 01:28:50 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3269688E36729631D3E1C5FDDC7D64843332FCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:20:54:4c:0a:94:60:04:19:04:1f:df:9e:
                    df:b3:10:a0:f0:36:8f:69:a8:84:4a:e2:59:78:59:
                    de:3c:77:b5:3d:bd:2d:06:53:90:cf:ce:f1:8d:0e:
                    a1:c6:a4:29:87:19:e7:87:08:39:9f:17:09:76:70:
                    4e:af:af:99:f3:11:b4:e9:bc:07:68:f3:e6:9e:c8:
                    f8:c2:12:f2:f6:98:39:f0:a4:e7:9f:cb:2f:13:f9:
                    6d:2c:50:82:59:b5:2e:63:29:e5:25:2d:c1:cd:5f:
                    e1:22:cb:3e:93:8d:0f:43:bc:40:c5:ac:e4:a6:f1:
                    5e:58:5c:75:ca:1c:bd:4e:27:6d:9f:3f:d7:8d:85:
                    a6:d5:f0:67:93:df:ec:24:f3:56:c6:3d:dd:b0:f8:
                    5c:d3:6e:96:5e:4d:17:79:47:92:bd:49:0d:8b:89:
                    0d:df:8f:6d:a0:c8:89:4d:4e:7a:6e:2e:2a:80:17:
                    40:f7:eb:0d:e7:9b:1d:92:e4:1c:27:11:0a:0f:ca:
                    84:92:e2:60:e3:97:54:0d:ff:02:cb:23:05:a6:13:
                    74:52:de:ac:74:59:79:73:7b:48:fe:95:4f:51:63:
                    5b:ec:77:ac:b1:3d:fb:86:53:39:57:6b:a2:5a:74:
                    3c:69:e7:ef:d1:32:42:46:68:63:93:03:6a:ba:87:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:68:8E:36:72:96:31:D3:E1:C5:FD:DC:7D:64:84:33:32:FC:B4
            X509v3 Authority Key Identifier:
                keyid:04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/MmlojjZyljHT4cX93H1khDMy_LQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:73c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:e8:00:7e:0d:25:ac:fa:2f:b7:74:82:bb:93:3a:f6:52:
         5f:f4:0e:94:ce:95:2c:dd:6b:28:f6:13:a3:95:55:aa:54:34:
         c5:d1:d9:6e:33:ce:c8:20:6f:ea:0f:85:dc:0a:b8:8e:36:ae:
         08:f6:3d:b4:55:22:36:c0:3e:c3:b4:93:b8:dd:1f:c3:d3:cc:
         b8:6f:af:35:1d:fc:0c:c5:20:1b:c4:e7:00:00:d0:93:88:61:
         97:8e:1f:7e:cc:d1:08:97:a4:59:83:61:d2:7d:1a:c2:7e:eb:
         3d:64:ff:5c:d9:fb:60:fe:ba:77:d9:10:dd:44:ef:53:db:6a:
         72:b1:c5:15:10:2e:6b:a4:e5:00:02:7c:4c:dd:0c:76:c7:86:
         48:60:f1:81:33:db:3a:00:6a:a8:7c:b6:66:e8:9d:b3:12:e4:
         7e:5e:e2:87:5c:72:93:ef:d4:00:4e:74:9b:d6:43:e1:a5:e3:
         e6:aa:e1:19:ea:60:2f:cc:87:a5:e8:62:23:61:74:44:40:88:
         21:58:2a:c3:5f:45:b8:68:d1:c5:83:f9:17:3f:02:73:00:e6:
         74:76:1e:e2:9c:41:26:52:b8:19:8b:18:99:bb:38:c0:32:6a:
         6c:51:0c:0e:8c:db:a9:ba:8d:52:ca:be:fc:6f:d4:ef:30:16:
         c3:87:90:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDFC
NjYwNzA4QzY4RDk3NzA0MThBODE3MjFGRjA3NzFGMEE0QTE5MB4XDTI1MDEzMTAx
Mjg1MFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMzI2OTY4OEUzNjcyOTYz
MUQzRTFDNUZEREM3RDY0ODQzMzMyRkNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJpIFRMCpRgBBkEH9+e37MQoPA2j2mohEriWXhZ3jx3tT29LQZT
kM/O8Y0OocakKYcZ54cIOZ8XCXZwTq+vmfMRtOm8B2jz5p7I+MIS8vaYOfCk55/L
LxP5bSxQglm1LmMp5SUtwc1f4SLLPpOND0O8QMWs5KbxXlhcdcocvU4nbZ8/142F
ptXwZ5Pf7CTzVsY93bD4XNNull5NF3lHkr1JDYuJDd+PbaDIiU1Oem4uKoAXQPfr
DeebHZLkHCcRCg/KhJLiYOOXVA3/AssjBaYTdFLerHRZeXN7SP6VT1FjW+x3rLE9
+4ZTOVdrolp0PGnn79EyQkZoY5MDarqHShMCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQyaWiONnKWMdPhxf3cfWSEMzL8tDAfBgNVHSMEGDAWgBQEG2YHCMaNl3BBioFy
H/B3HwpKGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMjAvQkJ0bUJ3akdqWmR3UVlxQmNoX3dkeDhLU2hrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQkJ0bUJ3akdqWmR3UVlxQmNoX3dk
eDhLU2hrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzIwL01tbG9qalp5bGpIVDRjWDkzSDFraERNeV9MUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAnPAMA0GCSqGSIb3DQEBCwUAA4IBAQAtYOgAfg0lrPovt3SCu5M6
9lJf9A6UzpUs3Wso9hOjlVWqVDTF0dluM87IIG/qD4XcCriONq4I9j20VSI2wD7D
tJO43R/D08y4b681HfwMxSAbxOcAANCTiGGXjh9+zNEIl6RZg2HSfRrCfus9ZP9c
2ftg/rp32RDdRO9T22pyscUVEC5rpOUAAnxM3Qx2x4ZIYPGBM9s6AGqofLZm6J2z
EuR+XuKHXHKT79QATnSb1kPhpePmquEZ6mAvzIel6GIjYXREQIghWCrDX0W4aNHF
g/kXPwJzAOZ0dh7inEEmUrgZixiZuzjAMmpsUQwOjNupuo1Syr78b9TvMBbDh5Av
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:22 2025 by rpki-client