Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30357/xcQyrVPB6-lahD-_LJzMdoVCGrE.roa
File:                     xcQyrVPB6-lahD-_LJzMdoVCGrE.roa (raw, json)
Hash identifier:          cgcD+9J1BFgCmPLnYL8yrit/RXyn+H7Oq7Cq7kxM8Ek=
Subject key identifier:   C5:C4:32:AD:53:C1:EB:E9:5A:84:3F:BF:2C:9C:CC:76:85:42:1A:B1
Certificate issuer:       /CN=A147363993399A2355D9A8BC90FB61382A2E8C38
Certificate serial:       2C
Authority key identifier: A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/xcQyrVPB6-lahD-_LJzMdoVCGrE.roa
Signing time:             Thu 01 May 2025 01:33:41 +0000
ROA not before:           Thu 01 May 2025 01:33:41 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     23816
IP address blocks:        2404:a600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A147363993399A2355D9A8BC90FB61382A2E8C38
        Validity
            Not Before: May  1 01:33:41 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C5C432AD53C1EBE95A843FBF2C9CCC7685421AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:1e:5c:58:8a:f8:19:7a:69:0b:5f:d9:45:
                    ac:fb:6f:ca:42:19:4f:d9:68:3e:5b:09:d2:3b:0b:
                    96:82:e2:31:43:22:03:9c:e3:a6:0e:ca:38:3e:b6:
                    12:19:bf:4d:26:12:a8:fd:ef:cd:aa:71:93:f4:12:
                    11:28:e3:b2:72:cb:28:00:7e:db:49:c1:8f:42:26:
                    3f:1d:55:db:75:61:ae:8d:96:b5:57:05:48:76:ec:
                    13:12:03:b3:3c:d0:0b:d9:54:5d:f8:cd:e8:14:72:
                    60:d5:ec:ba:4b:af:d8:31:24:bd:97:ff:e4:27:fe:
                    e6:58:19:32:90:6d:39:d5:d7:fb:c5:e3:e8:ca:25:
                    53:10:9a:0c:47:5d:3d:bb:2a:72:5a:7b:0b:38:c0:
                    f7:c7:a9:25:ec:5f:25:a2:1c:82:94:36:5d:77:b8:
                    7b:a7:ec:06:01:2a:09:8a:01:98:cb:f3:06:36:4a:
                    ba:f2:41:2f:10:5d:94:18:5e:9e:15:aa:72:24:1e:
                    68:0c:ca:3d:d7:8c:a0:b8:20:19:fe:dc:fc:f3:61:
                    df:61:d6:99:a9:48:b9:2a:34:46:42:70:41:50:c0:
                    ea:13:12:31:f4:c6:78:3a:f3:12:51:6b:de:a3:25:
                    7a:95:c6:61:5d:c3:50:f9:57:32:83:04:1d:3b:2a:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C4:32:AD:53:C1:EB:E9:5A:84:3F:BF:2C:9C:CC:76:85:42:1A:B1
            X509v3 Authority Key Identifier:
                keyid:A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/xcQyrVPB6-lahD-_LJzMdoVCGrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:84:33:8f:97:1b:56:e7:5b:10:eb:9a:4c:52:7b:eb:7c:
         ca:57:d7:ee:4d:bd:35:8a:2f:f3:bb:56:27:a1:ef:ab:61:a9:
         09:54:d2:5e:6f:12:be:2b:51:39:f7:1b:30:6d:83:5a:fd:0e:
         bc:54:92:82:09:4c:e1:64:86:6d:0c:0c:c0:3c:2c:e2:b9:e9:
         f4:f7:26:8c:26:81:54:42:05:1e:52:99:9a:66:92:b7:ce:2d:
         48:4e:ec:01:e9:db:fd:f5:7c:f6:87:57:a6:6d:c7:82:c1:cc:
         4d:78:45:65:68:d0:d8:72:b1:95:09:13:8f:4d:4c:8a:90:97:
         e4:da:8f:f9:46:66:54:7f:60:1e:ae:f4:cf:73:4f:9c:10:b8:
         79:8b:72:86:51:7c:2c:ca:68:19:33:ac:a9:98:d4:42:4d:8a:
         50:29:2f:94:e6:cd:76:4d:88:9b:2c:2c:6e:0d:ce:93:31:2c:
         85:1c:eb:b4:7b:24:79:d1:cb:eb:d6:07:8e:f9:91:7b:bf:51:
         a5:4c:46:47:b8:bd:1a:ab:6d:fd:29:08:01:b4:37:2f:7c:ad:
         37:ff:fa:43:1f:db:a8:b3:c8:96:db:b8:5a:46:29:16:b4:c1:
         6e:69:83:bd:0c:cb:17:ef:f0:38:36:f1:30:87:b3:67:f8:ab:
         ad:e1:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:23 2025 by rpki-client