Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
File:                     jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa (raw, json)
Hash identifier:          Ayeq7pm0DhPrDChyc57XtijhExMMpul71yfcyFlBFd8=
Subject key identifier:   8E:06:15:95:46:FE:69:82:78:A5:7C:2A:DA:85:BC:B8:0F:6B:7E:60
Certificate issuer:       /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial:       03
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
Signing time:             Tue 22 Apr 2025 01:42:03 +0000
ROA not before:           Tue 22 Apr 2025 01:42:03 +0000
ROA not after:            Wed 22 Apr 2026 01:29:23 +0000
asID:                     55895
IP address blocks:        2400:e000:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
        Validity
            Not Before: Apr 22 01:42:03 2025 GMT
            Not After : Apr 22 01:29:23 2026 GMT
        Subject: CN=8E06159546FE698278A57C2ADA85BCB80F6B7E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9a:d1:c0:55:a8:a1:10:9c:8c:ba:a2:a4:19:
                    4f:f3:12:e1:8b:01:40:60:e6:5e:8d:ae:84:20:fb:
                    1b:7b:f2:f8:45:95:04:47:87:dc:0c:7f:9c:16:45:
                    8e:39:bd:88:56:30:f0:ae:62:88:39:50:59:39:c0:
                    2e:00:14:c1:44:b6:31:1d:5d:a8:0f:0c:33:a7:59:
                    a7:21:43:24:76:cb:f1:f3:78:b1:ed:1f:a0:3d:34:
                    bf:10:cf:49:10:51:56:c0:fb:b6:e1:07:98:58:a3:
                    99:54:a0:69:82:bc:66:37:02:26:36:3e:ec:b7:9f:
                    ab:3f:bc:38:76:74:a6:b1:00:2e:fd:0e:2e:02:43:
                    8b:1d:f9:40:4c:b4:b6:c6:cb:7b:38:80:3c:e7:af:
                    2e:45:06:a9:73:bb:d9:24:a4:f9:61:d5:50:ec:88:
                    75:99:67:cf:eb:a7:2a:f0:89:e4:da:2c:f1:f5:3b:
                    33:28:25:4d:b3:26:66:0a:55:cf:0e:b3:97:6d:7e:
                    bd:3a:f3:1b:3d:cf:25:19:a7:89:ac:32:70:4c:22:
                    4d:1b:09:c6:78:8d:2f:f8:8b:10:22:b6:16:3f:d9:
                    04:11:50:d0:07:43:9f:b2:f0:b7:56:9d:b0:cb:51:
                    9b:21:44:ae:36:58:6e:38:48:c0:07:c4:68:8a:d1:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:15:95:46:FE:69:82:78:A5:7C:2A:DA:85:BC:B8:0F:6B:7E:60
            X509v3 Authority Key Identifier:
                keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e000:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:37:f7:35:d9:7c:b4:3c:4b:29:d3:77:a5:e4:e1:63:26:
         31:22:ab:4a:cb:c7:5a:49:9d:48:41:fc:09:75:a4:95:79:0d:
         7f:6d:b3:f8:cb:86:cf:e4:3f:e9:27:df:1a:12:c6:c2:b8:86:
         a8:93:a6:2b:ff:7d:1d:3e:f3:d4:f3:79:86:e0:99:e3:bd:92:
         be:9e:89:53:1f:7a:90:60:c6:06:a2:85:95:06:ca:32:62:ae:
         68:c9:45:07:7f:38:81:16:48:12:c0:f6:4c:77:da:2d:79:2f:
         83:75:69:39:0c:b5:ef:cf:d4:b5:dd:54:83:5b:62:b3:4b:0a:
         74:33:84:a6:2d:9c:a7:09:6d:71:87:9a:de:0c:69:ca:23:f5:
         f2:75:5c:f1:35:ae:c9:9e:bc:34:93:6d:45:20:d6:ed:d5:9f:
         7e:f4:82:6d:c2:9f:1c:38:98:bc:27:ac:71:ea:9c:ca:49:0d:
         f1:f5:96:c1:50:50:ea:15:a2:8c:d0:b3:c7:56:93:00:ab:49:
         7a:5f:88:45:92:be:eb:0d:29:db:d7:24:38:91:c1:c5:6c:a5:
         1e:7e:9f:e0:74:0c:3a:47:c4:07:43:f3:d9:3f:06:cf:6b:99:
         c3:60:e6:84:24:09:41:51:6a:f0:32:ba:de:c5:8e:76:ef:82:
         5d:de:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:27 2025 by rpki-client