Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30424/oeYjw4wFBFMZG-6toMsp6KYMigo.roa
File:                     oeYjw4wFBFMZG-6toMsp6KYMigo.roa (raw, json)
Hash identifier:          meg3zvL9Xn2e9CN7D+N9QIgDzCjJkUUIHUBppmA0eKw=
Subject key identifier:   A1:E6:23:C3:8C:05:04:53:19:1B:EE:AD:A0:CB:29:E8:A6:0C:8A:0A
Certificate issuer:       /CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
Certificate serial:       02
Authority key identifier: 45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/oeYjw4wFBFMZG-6toMsp6KYMigo.roa
Signing time:             Mon 31 Mar 2025 05:30:27 +0000
ROA not before:           Mon 31 Mar 2025 05:30:27 +0000
ROA not after:            Tue 31 Mar 2026 05:22:11 +0000
asID:                     63805
IP address blocks:        2401:1b20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
        Validity
            Not Before: Mar 31 05:30:27 2025 GMT
            Not After : Mar 31 05:22:11 2026 GMT
        Subject: CN=A1E623C38C050453191BEEADA0CB29E8A60C8A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:45:2e:7e:93:c0:99:aa:d5:bd:e1:74:75:
                    4c:c6:26:d9:78:70:96:5b:77:8a:ed:9b:fe:ca:ad:
                    4f:6d:93:a0:c2:8f:95:39:da:c8:0c:1e:27:06:42:
                    12:5c:9a:40:40:b4:f4:c9:75:ce:17:63:b6:c3:d4:
                    b2:2a:81:3d:ae:93:68:42:03:a2:08:e0:d9:39:1e:
                    39:2e:16:ff:88:97:76:7a:3f:6c:06:b6:bc:e3:13:
                    66:2a:08:a1:5f:ad:37:ca:29:a8:08:b4:7b:94:f9:
                    f0:16:18:6c:41:d1:e5:0c:71:20:68:d8:a2:fb:06:
                    db:4d:14:91:77:62:19:ad:a0:1d:91:57:ec:65:9e:
                    10:05:b3:15:6c:8c:b6:90:83:6c:ed:a0:b7:6f:36:
                    7a:c6:6b:96:89:ed:f0:c0:8c:5c:b7:6a:0d:96:6f:
                    9b:ed:83:07:86:72:c7:0b:dd:74:ca:d3:33:70:6f:
                    d3:e4:43:b9:d1:85:dd:c0:c4:0c:0d:64:d6:9a:4d:
                    f8:63:61:1f:f1:32:62:a0:dc:26:3b:71:2d:05:cf:
                    0b:0c:b1:a5:83:0d:47:54:8d:63:e9:2b:96:cd:ca:
                    fe:99:7a:28:dc:a6:26:36:46:c9:06:e4:5c:71:6b:
                    6c:df:36:70:f9:30:70:23:ae:e9:82:0a:c8:52:4a:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:23:C3:8C:05:04:53:19:1B:EE:AD:A0:CB:29:E8:A6:0C:8A:0A
            X509v3 Authority Key Identifier:
                keyid:45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/oeYjw4wFBFMZG-6toMsp6KYMigo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:81:4a:dd:71:00:5f:73:4e:8c:92:b1:6f:14:a1:a0:8c:7a:
         7d:43:ca:b9:7c:ff:c3:34:64:0a:4e:f1:d9:51:0b:93:83:af:
         24:e0:35:28:17:7f:d9:29:0b:87:4e:b7:25:e0:b1:5d:53:4c:
         5f:9e:ef:a9:1c:06:ab:1a:73:c4:2f:d9:80:b3:c5:ad:45:0a:
         50:4a:6e:0f:10:ff:49:df:36:e9:4f:e6:77:77:0b:b6:67:1a:
         25:b9:9a:eb:e9:d3:76:1c:6e:34:5c:e5:5b:5b:19:0c:a7:46:
         f6:7e:9e:97:ae:c0:27:ef:64:a3:51:a3:5a:0c:f4:89:f9:31:
         59:e1:41:32:a3:59:db:5f:17:6d:58:a4:ee:65:d3:f0:8b:5a:
         b8:2c:83:e6:ea:16:53:02:cb:dd:60:33:cb:a7:74:13:10:74:
         c6:f2:c3:c5:71:df:10:b9:33:af:55:45:30:7a:9f:5e:7d:84:
         52:f1:4f:a0:cc:91:a0:e9:a7:a9:a1:e4:d6:c4:3b:55:4b:eb:
         0d:99:23:63:b4:60:5b:8d:85:2f:75:51:02:9c:b7:82:8c:46:
         66:82:5a:63:d9:c7:df:15:dd:f9:84:fa:96:8b:38:99:84:7e:
         6c:7d:7e:78:c7:d7:98:a4:e7:38:3d:bb:34:61:8c:9e:da:32:
         9a:67:bf:a8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NTJD
OTBCOEVCNkFBODE0MkFEQzgwMzhFRTY2QjI3MTYzOEQxMDU5MB4XDTI1MDMzMTA1
MzAyN1oXDTI2MDMzMTA1MjIxMVowMzExMC8GA1UEAxMoQTFFNjIzQzM4QzA1MDQ1
MzE5MUJFRUFEQTBDQjI5RThBNjBDOEEwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMboRS5+k8CZqtW94XR1TMYm2Xhwllt3iu2b/sqtT22ToMKPlTna
yAweJwZCElyaQEC09Ml1zhdjtsPUsiqBPa6TaEIDogjg2TkeOS4W/4iXdno/bAa2
vOMTZioIoV+tN8opqAi0e5T58BYYbEHR5QxxIGjYovsG200UkXdiGa2gHZFX7GWe
EAWzFWyMtpCDbO2gt282esZrlont8MCMXLdqDZZvm+2DB4ZyxwvddMrTM3Bv0+RD
udGF3cDEDA1k1ppN+GNhH/EyYqDcJjtxLQXPCwyxpYMNR1SNY+krls3K/pl6KNym
JjZGyQbkXHFrbN82cPkwcCOu6YIKyFJKVzECAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSh5iPDjAUEUxkb7q2gyynopgyKCjAfBgNVHSMEGDAWgBRFLJC462qoFCrcgDju
ZrJxY40QWTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjQvUlN5UXVPdHFxQlFxM0lBNDdtYXljV09ORUZrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUlN5UXVPdHFxQlFxM0lBNDdtYXlj
V09ORUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDI0L29lWWp3NHdGQkZNWkctNnRvTXNwNktZTWlnby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkARsgMA0GCSqGSIb3DQEBCwUAA4IBAQBjgUrdcQBfc06MkrFvFKGg
jHp9Q8q5fP/DNGQKTvHZUQuTg68k4DUoF3/ZKQuHTrcl4LFdU0xfnu+pHAarGnPE
L9mAs8WtRQpQSm4PEP9J3zbpT+Z3dwu2ZxoluZrr6dN2HG40XOVbWxkMp0b2fp6X
rsAn72SjUaNaDPSJ+TFZ4UEyo1nbXxdtWKTuZdPwi1q4LIPm6hZTAsvdYDPLp3QT
EHTG8sPFcd8QuTOvVUUwep9efYRS8U+gzJGg6aepoeTWxDtVS+sNmSNjtGBbjYUv
dVECnLeCjEZmglpj2cffFd35hPqWiziZhH5sfX54x9eYpOc4Pbs0YYye2jKaZ7+o
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:55:27 2025 by rpki-client