Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/gDLCYmGxkA6_Gr1ELpia-akoXCw.roa
File:                     gDLCYmGxkA6_Gr1ELpia-akoXCw.roa (raw, json)
Hash identifier:          J15fVX61vREYvGeVNqiyMmjzrdgB15kWqKcfoNGYnt8=
Subject key identifier:   80:32:C2:62:61:B1:90:0E:BF:1A:BD:44:2E:98:9A:F9:A9:28:5C:2C
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       49
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/gDLCYmGxkA6_Gr1ELpia-akoXCw.roa
Signing time:             Tue 01 Apr 2025 01:30:32 +0000
ROA not before:           Tue 01 Apr 2025 01:30:32 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:32 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8032C26261B1900EBF1ABD442E989AF9A9285C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:16:a9:88:65:6f:be:ce:46:7f:03:b0:2c:
                    e9:12:00:3e:44:53:44:71:9a:52:6f:48:3a:f9:c2:
                    bc:76:72:88:f4:db:44:f3:a9:44:58:08:ba:aa:f2:
                    1b:b9:d7:b0:cb:09:49:68:16:72:46:a7:e5:e5:9a:
                    4a:3a:ad:b2:7d:96:0b:e6:fd:28:c5:a6:f2:67:10:
                    c6:85:2a:08:8d:ce:4e:d6:2b:9b:3c:cd:4b:24:d9:
                    87:bf:61:6c:cc:56:ec:81:3f:09:da:ce:be:78:0a:
                    3d:1b:b0:21:44:e5:e0:69:fd:45:bf:10:2a:97:3e:
                    f4:e2:88:ab:3c:56:8f:dc:1d:41:c1:84:dd:0c:36:
                    4f:53:c0:cb:3e:3d:0e:85:ec:e9:00:f5:c9:e8:12:
                    e3:d8:3a:50:b3:1e:68:2a:74:cb:e5:17:a5:ac:ca:
                    4c:da:51:c8:75:6e:ca:02:b4:b9:26:f5:a0:34:3f:
                    41:92:70:54:94:18:70:22:5e:01:f8:d0:06:bf:e7:
                    02:b1:33:53:3f:9b:48:cc:0b:22:1d:02:d1:ed:3f:
                    79:fa:b7:38:07:6e:86:25:67:8f:31:7a:a2:6c:87:
                    64:62:1e:0f:63:de:18:77:47:30:70:7f:08:a6:8d:
                    fa:dd:33:2c:11:73:97:e5:00:57:73:6a:8d:22:e9:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:32:C2:62:61:B1:90:0E:BF:1A:BD:44:2E:98:9A:F9:A9:28:5C:2C
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/gDLCYmGxkA6_Gr1ELpia-akoXCw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:42:26:e1:48:67:07:19:a2:c3:8e:e7:03:f8:85:92:cb:
         2b:5c:4e:ad:a2:c7:8f:61:c7:c6:7f:52:bf:35:87:6f:af:47:
         dd:d8:cf:b6:00:16:db:d0:e8:ac:e4:0e:46:fb:ec:80:63:18:
         da:03:92:56:ba:9a:f1:0d:79:09:61:85:95:3a:d9:80:2a:9e:
         69:29:e6:26:b4:2b:61:19:16:27:09:d6:66:f4:81:46:b8:f6:
         1c:17:28:5b:0e:b6:a5:0b:71:7c:81:3e:0f:45:69:5d:1a:c6:
         26:48:df:16:99:ac:a9:67:12:95:2a:a4:3c:f4:d7:ba:84:2c:
         01:c9:7c:0d:07:a2:4c:72:63:96:80:3a:53:e1:b9:bf:a1:a2:
         5d:f7:0a:4f:de:c9:64:90:34:5d:b3:10:a4:bc:a9:79:eb:31:
         ab:ec:0a:e9:ef:6b:f5:a5:95:bb:d5:30:4b:35:c4:44:0e:8e:
         b3:ff:07:79:6c:1a:32:76:be:ed:08:b6:ac:5a:35:23:c7:56:
         99:42:9b:5a:77:e3:b7:96:7f:2a:ef:f0:91:bf:cc:7a:0f:ff:
         68:76:ba:ca:1c:a3:f7:12:4d:7f:65:29:fc:53:96:bf:da:e7:
         e7:a1:e5:2e:b7:a6:3e:79:36:16:06:7a:c0:c9:9f:cd:f4:61:
         9f:b4:99:58
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI1MDQwMTAx
MzAzMloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoODAzMkMyNjI2MUIxOTAw
RUJGMUFCRDQ0MkU5ODlBRjlBOTI4NUMyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALaLFqmIZW++zkZ/A7As6RIAPkRTRHGaUm9IOvnCvHZyiPTbRPOp
RFgIuqryG7nXsMsJSWgWckan5eWaSjqtsn2WC+b9KMWm8mcQxoUqCI3OTtYrmzzN
SyTZh79hbMxW7IE/CdrOvngKPRuwIUTl4Gn9Rb8QKpc+9OKIqzxWj9wdQcGE3Qw2
T1PAyz49DoXs6QD1yegS49g6ULMeaCp0y+UXpazKTNpRyHVuygK0uSb1oDQ/QZJw
VJQYcCJeAfjQBr/nArEzUz+bSMwLIh0C0e0/efq3OAduhiVnjzF6omyHZGIeD2Pe
GHdHMHB/CKaN+t0zLBFzl+UAV3NqjSLpjWMCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSAMsJiYbGQDr8avUQumJr5qShcLDAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L2dETENZbUd4a0E2X0dyMUVMcGlhLWFrb1hDdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7AsDANBgkqhkiG9w0BAQsFAAOCAQEAbfRCJuFIZwcZosOO5wP4
hZLLK1xOraLHj2HHxn9SvzWHb69H3djPtgAW29DorOQORvvsgGMY2gOSVrqa8Q15
CWGFlTrZgCqeaSnmJrQrYRkWJwnWZvSBRrj2HBcoWw62pQtxfIE+D0VpXRrGJkjf
FpmsqWcSlSqkPPTXuoQsAcl8DQeiTHJjloA6U+G5v6GiXfcKT97JZJA0XbMQpLyp
eesxq+wK6e9r9aWVu9UwSzXERA6Os/8HeWwaMna+7Qi2rFo1I8dWmUKbWnfjt5Z/
Ku/wkb/Meg//aHa6yhyj9xJNf2Up/FOWv9rn56HlLremPnk2FgZ6wMmfzfRhn7SZ
WA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:09 2025 by rpki-client