Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/Vth5HiEat1CZNJNh9_gx5QwFql0.roa
File:                     Vth5HiEat1CZNJNh9_gx5QwFql0.roa (raw, json)
Hash identifier:          2hwjVqmPQ05iUf4HcHCcAyynpZXgnAH+iuD2EkpyeKY=
Subject key identifier:   56:D8:79:1E:21:1A:B7:50:99:34:93:61:F7:F8:31:E5:0C:05:AA:5D
Certificate issuer:       /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial:       02
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/Vth5HiEat1CZNJNh9_gx5QwFql0.roa
Signing time:             Tue 22 Apr 2025 01:37:59 +0000
ROA not before:           Tue 22 Apr 2025 01:37:59 +0000
ROA not after:            Wed 22 Apr 2026 01:29:23 +0000
asID:                     18070
IP address blocks:        2400:e000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
        Validity
            Not Before: Apr 22 01:37:59 2025 GMT
            Not After : Apr 22 01:29:23 2026 GMT
        Subject: CN=56D8791E211AB75099349361F7F831E50C05AA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:88:40:dc:55:e8:02:89:75:cb:1d:fd:22:
                    8a:af:ed:1a:97:8e:38:a1:79:4c:a5:8e:17:ac:94:
                    f1:54:38:14:3d:b3:78:be:e7:86:79:d7:43:8a:b2:
                    2f:e0:b7:4a:28:44:cc:3f:15:50:b2:0a:4f:0f:0d:
                    10:60:6f:e1:60:95:ef:45:17:38:ed:25:f6:6f:24:
                    e3:d7:69:ef:20:2d:58:20:1f:3a:4f:ea:0e:e1:2a:
                    63:21:24:6a:d6:ee:c6:05:31:df:be:3e:dd:29:6f:
                    df:e4:9f:4d:91:5a:92:61:5f:f5:98:23:8b:34:00:
                    f7:98:1e:0c:57:76:4e:c1:5f:59:2b:ca:a9:36:96:
                    5f:51:5c:48:9b:94:f9:bd:dd:68:2e:9d:b6:c3:25:
                    b0:fa:10:e9:a0:26:7d:48:77:a2:98:e9:dd:89:2b:
                    02:1b:f5:46:e3:e3:06:3d:c1:89:70:cd:c9:59:ed:
                    5e:c8:50:84:26:c4:f7:09:51:31:60:35:62:18:ab:
                    d0:f6:74:ae:d4:78:79:7b:10:14:fc:14:de:06:5a:
                    87:a9:bb:18:ea:37:de:16:6b:ee:58:46:1d:e5:f8:
                    b0:09:fc:3b:da:03:b5:2d:af:79:df:17:a0:9b:9b:
                    6c:fa:eb:4b:20:c4:25:c3:5b:50:59:35:be:1c:5a:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:79:1E:21:1A:B7:50:99:34:93:61:F7:F8:31:E5:0C:05:AA:5D
            X509v3 Authority Key Identifier:
                keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/Vth5HiEat1CZNJNh9_gx5QwFql0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e000::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:68:7f:a6:43:42:79:a4:6d:50:78:7c:4a:59:18:dc:09:48:
         f3:32:e9:a3:fe:e3:1d:26:1c:a4:b5:47:3e:82:9a:9e:54:32:
         55:40:d7:03:7c:0d:dc:e8:c5:2b:8c:fa:db:9e:3d:7e:5d:af:
         bc:39:d1:86:c0:5a:ff:6d:32:3b:86:89:90:77:69:61:85:b8:
         47:8d:fb:cd:78:3d:b7:12:46:d3:64:e4:5e:05:0a:3f:0a:88:
         f4:62:12:db:4d:56:28:93:a4:43:2a:dd:70:82:4f:30:48:3c:
         10:39:65:d0:bb:13:46:2a:18:44:55:2d:18:49:6a:8a:fa:52:
         d3:ed:f8:5b:87:90:10:5a:ca:68:33:64:e3:95:47:71:75:c3:
         4d:4f:8c:3e:2c:1e:e1:6a:e6:c7:fa:99:37:bd:80:b6:a8:66:
         4c:86:b2:a5:28:4d:27:07:35:d7:68:30:b7:c4:22:09:9a:12:
         35:22:9f:07:23:b1:f9:1d:80:bd:d2:d3:ce:1a:80:a2:58:78:
         3c:e9:bd:6e:a9:ff:80:99:14:1a:d8:2b:2b:5d:1b:48:3c:fc:
         a1:45:f2:6a:c6:5f:87:2b:a6:d1:79:f3:02:cd:70:8d:5c:68:
         51:11:50:0f:23:20:3c:25:77:c1:7a:b1:ae:4f:0b:68:e6:b2:
         98:8e:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:55 2025 by rpki-client