Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30413/jC54TXU3frHySrnxKhfX56pazJQ.roa
File:                     jC54TXU3frHySrnxKhfX56pazJQ.roa (raw, json)
Hash identifier:          xr63wsQJsRXNQzbi2uxHP+FJzQIRAfNLR7lr9DWRYVs=
Subject key identifier:   8C:2E:78:4D:75:37:7E:B1:F2:4A:B9:F1:2A:17:D7:E7:AA:5A:CC:94
Certificate issuer:       /CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3
Certificate serial:       1C
Authority key identifier: 6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/jC54TXU3frHySrnxKhfX56pazJQ.roa
Signing time:             Thu 31 Oct 2024 01:31:28 +0000
ROA not before:           Thu 31 Oct 2024 01:31:28 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     63797
IP address blocks:        2400:c7e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3
        Validity
            Not Before: Oct 31 01:31:28 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=8C2E784D75377EB1F24AB9F12A17D7E7AA5ACC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:1b:09:e5:9b:66:63:6d:75:b8:07:c5:b4:
                    31:db:c0:e6:15:a3:d4:a6:f0:f1:bf:af:97:3a:92:
                    0c:2b:06:f6:ae:26:85:5c:05:06:17:27:e0:e2:a1:
                    8e:ab:23:da:aa:f7:b1:a2:99:60:e5:91:3d:77:b0:
                    3e:34:33:39:3c:65:69:d8:ca:55:a3:5d:8f:4b:31:
                    7b:64:b1:f7:77:14:92:fa:cc:ae:a0:6b:8f:20:08:
                    cb:8c:97:32:1f:44:6c:f9:38:fa:cc:31:dd:e0:41:
                    15:72:92:5e:45:1d:e4:73:fb:79:8e:37:a5:1f:e6:
                    87:89:c6:69:41:06:d2:7d:2c:9e:8e:04:c4:19:66:
                    c1:77:00:9b:d4:51:d3:9f:b0:cf:d2:72:51:cf:03:
                    d1:f1:d4:89:7e:6d:71:4b:85:3e:cf:8f:05:75:d1:
                    5f:c5:d7:17:a8:4f:c8:23:bd:10:2d:bd:f9:fa:7f:
                    6d:7d:a6:c2:c6:b1:6f:d2:c0:5d:d2:51:dd:a8:a2:
                    db:1a:35:89:b9:3f:97:66:31:fc:8b:5a:00:5e:81:
                    77:bd:81:29:e2:95:81:3f:f9:23:3c:8d:e1:c4:73:
                    65:fb:28:99:21:cc:d1:22:03:fe:72:84:cc:23:fb:
                    0d:a9:c3:1a:9c:1c:0b:e1:c7:5c:0f:2a:db:26:2f:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:78:4D:75:37:7E:B1:F2:4A:B9:F1:2A:17:D7:E7:AA:5A:CC:94
            X509v3 Authority Key Identifier:
                keyid:6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/jC54TXU3frHySrnxKhfX56pazJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:be:64:03:10:25:b2:42:c0:5c:5a:78:47:cf:41:49:f0:df:
         f2:32:dd:84:0d:3f:72:41:4e:9c:17:d1:4b:00:9b:d1:9b:25:
         0c:7d:bd:01:2a:2e:8f:d2:13:6b:1f:f8:95:d4:24:5c:ad:e9:
         28:bd:51:8c:10:51:42:9e:b8:79:02:43:9a:44:0d:9c:3d:fd:
         77:3d:b6:93:20:47:4f:fc:f1:fc:7a:d6:b7:20:f0:8a:c2:94:
         04:e9:89:ae:8c:f0:54:d9:2b:a6:02:0d:e9:d2:8b:85:c9:b3:
         f2:05:f9:3e:cb:64:d5:d2:bb:7c:d1:bb:0d:b6:7a:e5:d3:ef:
         8d:c4:60:c8:24:51:51:86:d9:1d:b5:25:fc:fe:8e:82:8a:5b:
         70:f5:1a:66:29:25:38:d0:cc:90:1c:5b:bf:5b:55:71:e8:f6:
         be:a6:fb:2b:05:07:2d:da:ec:6c:97:17:b0:c7:93:82:5b:65:
         4e:e2:60:e0:2c:a7:24:6d:5c:6e:cf:da:d7:90:91:e6:28:db:
         e1:a8:e3:40:59:bb:c6:b7:4e:56:ac:4e:65:46:b3:92:10:d9:
         df:16:d3:d0:89:2c:43:e0:5c:2d:72:b7:1a:d9:fe:b4:bc:e6:
         d1:bd:2d:d3:81:1d:1f:fa:9c:2f:41:8c:86:37:bb:00:68:b5:
         70:e8:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:24 2025 by rpki-client