Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/jsDVDJkrbaKi-Ca_FEUc5tzfYHk.roa
File:                     jsDVDJkrbaKi-Ca_FEUc5tzfYHk.roa (raw, json)
Hash identifier:          nTp0pBMa9NGn00gVmfcey5giAQO7jtbp6Bhvrfe3vxU=
Subject key identifier:   8E:C0:D5:0C:99:2B:6D:A2:A2:F8:26:BF:14:45:1C:E6:DC:DF:60:79
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       48
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/jsDVDJkrbaKi-Ca_FEUc5tzfYHk.roa
Signing time:             Tue 01 Apr 2025 01:30:31 +0000
ROA not before:           Tue 01 Apr 2025 01:30:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8EC0D50C992B6DA2A2F826BF14451CE6DCDF6079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:fb:19:00:d5:aa:8d:a2:81:98:69:39:9e:
                    1b:c9:7d:4a:20:90:f4:0f:83:66:0c:45:dc:bb:90:
                    be:88:a5:f8:2d:fb:e1:7c:82:63:95:b7:ee:cc:48:
                    b9:3c:3e:b6:70:f2:72:be:63:19:41:12:28:a8:a5:
                    7b:6b:ee:f7:8a:91:ef:d5:86:0e:19:3e:70:5f:d4:
                    96:85:c4:c0:b4:54:ef:8b:29:cf:5c:b0:c0:10:ce:
                    9c:31:02:9f:59:6d:f1:78:8a:e4:1e:7a:49:57:12:
                    37:a5:c3:06:9b:17:25:b8:0c:28:9f:6e:c5:f9:e6:
                    82:3d:2b:31:fa:6e:d0:f6:db:db:30:e6:26:e6:87:
                    37:2b:84:fd:2e:35:1d:a0:25:c4:f6:50:8e:97:29:
                    88:32:f0:09:03:7f:ed:89:89:d1:87:e5:12:72:a0:
                    ee:53:8c:14:a5:9c:60:44:d7:a1:d2:82:8a:c0:d4:
                    46:d8:bf:6f:8d:f2:20:d0:53:07:94:53:1c:10:a0:
                    a1:4d:49:4c:41:15:f7:7e:51:a2:92:cb:8a:0b:8c:
                    88:a7:fa:03:12:6a:e1:b0:bf:9f:0f:b5:fd:a2:87:
                    7f:61:c8:db:d6:8f:d7:b8:b5:e2:25:75:ae:2c:af:
                    c3:18:2c:5f:62:4f:98:b0:d1:4d:37:48:7c:b6:14:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C0:D5:0C:99:2B:6D:A2:A2:F8:26:BF:14:45:1C:E6:DC:DF:60:79
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/jsDVDJkrbaKi-Ca_FEUc5tzfYHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:38:a2:5a:3d:69:c9:d7:f9:2e:78:25:3e:e0:c6:b0:fc:99:
         97:f0:2b:fc:d9:fe:f1:48:83:a6:38:3f:ca:c0:ad:7d:15:b5:
         31:24:d1:45:31:64:1c:09:85:e4:2e:f8:8d:e9:13:10:f9:fb:
         58:3b:62:58:e9:33:70:82:a7:68:32:a8:a5:bb:c6:9e:97:2e:
         82:68:5d:a4:8d:a3:db:6f:5c:54:d0:6b:87:01:17:31:8f:04:
         e2:9e:64:fb:4a:c8:d7:c9:9f:2c:23:50:50:ae:bf:e6:04:e3:
         d1:d0:6f:04:6c:df:22:72:7f:60:2f:1d:7a:69:54:8c:80:d0:
         65:34:44:4b:e8:d7:b9:e0:60:c6:b7:58:1a:a7:64:52:b1:0f:
         c0:01:55:9d:c2:3c:60:18:67:eb:f8:d9:5a:6d:e3:42:ba:d7:
         5e:88:20:fc:45:ff:75:8e:fb:07:d8:f7:bf:b1:4e:c1:a1:59:
         55:43:41:69:c1:1e:31:10:8b:94:a7:68:4f:11:57:a6:73:49:
         ff:b8:dc:4d:83:85:c6:6a:98:d9:85:6c:68:2b:d8:ee:af:fc:
         94:58:ef:57:28:96:d3:44:c2:e1:3f:b7:34:26:53:dd:13:b2:
         c1:df:61:f0:e8:f2:15:db:1d:62:d2:28:80:af:5e:c7:e9:3f:
         36:8a:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:33:40 2025 by rpki-client