Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39054/6BrBxlfWEpCqVs5n8M87AzFPcAE.roa
File:                     6BrBxlfWEpCqVs5n8M87AzFPcAE.roa (raw, json)
Hash identifier:          /1mbiJ6rQRKsAlAURoX2LfMhKKJgGeqjAVQnfVlZbfE=
Subject key identifier:   E8:1A:C1:C6:57:D6:12:90:AA:56:CE:67:F0:CF:3B:03:31:4F:70:01
Certificate issuer:       /CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Certificate serial:       36
Authority key identifier: 99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/6BrBxlfWEpCqVs5n8M87AzFPcAE.roa
Signing time:             Sun 31 Mar 2024 01:30:13 +0000
ROA not before:           Sun 31 Mar 2024 01:30:13 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18131
IP address blocks:        2001:df4:1f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
        Validity
            Not Before: Mar 31 01:30:13 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E81AC1C657D61290AA56CE67F0CF3B03314F7001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:c7:67:f6:2b:61:8b:c6:9d:bb:44:39:6e:
                    a5:48:87:21:d1:7c:90:d9:49:b2:ae:87:e7:8f:b9:
                    7b:b0:dd:2b:0c:56:d0:36:72:af:a5:de:53:5a:2a:
                    eb:8a:9e:ed:9e:dc:23:86:31:c2:85:7b:e1:9c:3e:
                    02:6a:b9:de:4f:85:1a:24:de:35:8f:b7:ef:a4:9f:
                    2a:7e:5d:6a:44:36:86:7b:cc:c3:61:d1:07:8f:85:
                    e6:3d:2b:9e:bb:f2:ef:0e:9a:6e:c2:ec:33:08:cd:
                    52:fc:26:8e:d0:da:9f:df:06:9b:57:d6:e9:d8:db:
                    0d:c5:08:1c:4e:48:75:80:f8:6e:d2:42:36:4d:e0:
                    d5:82:2f:49:26:1c:23:6d:67:a8:e2:40:6b:a4:9f:
                    6a:b2:6e:4d:d9:6e:d2:10:b4:9f:64:d5:ef:a9:79:
                    6b:ed:a1:f2:16:4e:37:fb:f8:6e:f5:30:a4:1d:a9:
                    0f:57:ba:5c:ad:15:54:76:23:53:c2:e9:2a:32:29:
                    c0:c2:9a:bc:75:21:fd:94:82:6e:b8:d8:cb:f6:74:
                    73:c5:78:c8:55:7c:64:7f:43:0b:77:7e:36:c6:51:
                    47:d8:49:72:92:17:63:17:e2:41:72:61:ef:0b:46:
                    4c:f3:7c:a0:e9:52:23:49:fd:03:35:2e:86:7c:fa:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:C1:C6:57:D6:12:90:AA:56:CE:67:F0:CF:3B:03:31:4F:70:01
            X509v3 Authority Key Identifier:
                keyid:99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/6BrBxlfWEpCqVs5n8M87AzFPcAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:80:f6:46:fa:b9:84:91:d0:41:98:23:53:5b:0d:cb:d9:d0:
         7c:a1:d7:db:a4:54:df:8e:25:ab:5b:aa:92:35:2e:29:e4:7a:
         c0:fd:3b:50:56:61:68:77:b4:37:68:4d:7a:b2:e4:01:d4:7e:
         cb:a4:5e:5e:bd:8e:51:13:47:76:23:6f:b2:5e:8b:2f:17:c4:
         a1:3c:20:05:44:00:cc:a3:a2:2d:07:c5:f9:da:49:a8:cd:d0:
         61:94:86:63:92:e8:2b:24:24:8f:61:94:b1:4f:7c:be:9a:77:
         75:a9:32:6c:57:73:73:20:e5:35:9e:f5:88:95:8d:3c:8a:9c:
         53:f0:a0:ca:98:c9:66:af:42:f0:fa:57:da:a7:a3:b4:cb:6e:
         24:44:18:48:f6:78:64:ea:1d:d0:34:5c:82:e8:67:b2:43:bf:
         78:3c:d6:78:e2:92:a8:1b:23:bc:3d:d6:f3:b5:3c:28:81:f3:
         85:f9:2b:94:b4:a8:da:34:bd:d9:ea:63:9c:93:bb:05:9c:a2:
         0e:b8:8e:a5:a8:2a:76:cd:ab:14:a0:96:70:39:a5:3e:f5:25:
         ab:58:7f:99:1c:9f:11:f2:bc:18:92:e6:1a:2c:6b:02:3d:18:
         1c:d4:f2:8d:39:24:83:4b:1f:fc:30:de:03:5f:76:7a:f9:f2:
         75:ab:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:45 2025 by rpki-client