Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BuGJKuFZqt8l9yp8zc989EvxdNE.roa
File:                     BuGJKuFZqt8l9yp8zc989EvxdNE.roa (raw, json)
Hash identifier:          XeLpXvlzpcVfoziNTGVv681OnCHhzAo4AlstJ8sE5rI=
Subject key identifier:   06:E1:89:2A:E1:59:AA:DF:25:F7:2A:7C:CD:CF:7C:F4:4B:F1:74:D1
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       3F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BuGJKuFZqt8l9yp8zc989EvxdNE.roa
Signing time:             Tue 01 Apr 2025 01:30:28 +0000
ROA not before:           Tue 01 Apr 2025 01:30:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=06E1892AE159AADF25F72A7CCDCF7CF44BF174D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:71:57:03:3c:7a:6e:f7:b0:d1:34:65:a6:
                    71:f4:b8:b1:02:ac:7d:fc:74:8d:35:1f:80:60:fc:
                    e2:1c:a5:93:40:53:63:11:87:3f:3b:77:06:3a:82:
                    47:d3:6e:1b:ea:0a:6e:19:71:41:e1:46:2a:e9:04:
                    43:a3:b4:11:a2:33:28:92:71:76:62:26:95:39:9e:
                    ca:5c:07:ba:25:eb:b7:cb:90:24:32:17:7a:af:91:
                    d5:ce:53:da:4d:d9:60:c2:43:1f:6c:87:3a:76:ec:
                    af:32:60:e9:9d:fb:f3:d4:b1:e9:dc:4b:e6:90:7a:
                    09:38:3b:18:b7:d7:8c:8b:dc:2e:c0:64:a3:6c:d3:
                    14:db:fd:75:0e:a4:d6:9c:61:92:2f:ee:a5:4d:63:
                    52:92:93:4f:18:0b:c5:56:a5:eb:4b:65:2a:f1:d7:
                    61:8e:31:d4:be:8e:e7:97:a6:aa:48:7f:41:17:65:
                    7f:43:ee:1d:11:4c:4a:19:1e:62:17:7f:a6:44:94:
                    a8:ca:fb:45:06:4c:cb:12:e5:e7:1c:bc:dd:3a:de:
                    d0:9c:45:7b:6d:96:63:8a:53:26:c7:06:77:53:ab:
                    5f:b6:f2:77:71:78:3d:30:d8:58:bd:08:98:54:fd:
                    48:68:24:3a:ae:aa:6c:fb:dd:e8:fa:23:cc:72:93:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:89:2A:E1:59:AA:DF:25:F7:2A:7C:CD:CF:7C:F4:4B:F1:74:D1
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BuGJKuFZqt8l9yp8zc989EvxdNE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:9f:de:0b:27:9f:15:9e:df:20:5e:4f:be:87:95:a4:9a:
         45:c3:f9:24:dc:a8:1c:d9:0b:b1:f5:80:78:c0:5e:56:6e:35:
         cc:4f:ab:3c:ac:54:5e:f3:c5:36:48:f6:4d:dd:d5:ff:16:be:
         f7:59:37:ab:4e:6b:a5:9d:52:b0:6d:3b:e0:c3:6c:94:d5:da:
         e4:c4:fe:04:f9:81:b0:c2:7a:44:c0:cd:d7:ca:28:91:26:61:
         8e:76:14:f5:9c:4f:41:55:8a:c4:2e:d1:64:fb:89:3e:93:3d:
         a2:bc:48:1d:46:8b:0d:ff:53:ed:30:60:7f:a6:40:cf:13:e8:
         25:36:f1:6a:2e:c1:29:5d:0b:08:6f:2f:7a:45:85:67:d9:65:
         89:3b:1f:6f:f1:a1:c1:e2:4b:35:d2:3d:8b:16:c0:02:af:35:
         36:5d:59:58:97:81:98:ec:87:6b:3c:02:0c:3e:35:6e:00:e6:
         8c:c3:1e:e5:03:e0:98:60:0a:61:bf:f4:b5:a1:a2:20:91:e5:
         cf:bc:d4:1d:73:df:73:3e:cb:ae:25:45:1c:24:07:b9:da:aa:
         b3:bb:d2:90:b8:d0:5e:00:3f:25:e3:f3:d5:16:7a:e0:c7:7e:
         a9:1f:a1:6c:9e:9f:2b:9d:a9:26:7a:66:d1:c6:73:a0:a4:6b:
         5e:5e:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:19 2025 by rpki-client