Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/KGmkRw2gPe2ZHKeLLN10RVc38K8.roa
File:                     KGmkRw2gPe2ZHKeLLN10RVc38K8.roa (raw, json)
Hash identifier:          GnUuNposuWLtb+NpwR30k/ZnXRDm+IYMP4ieAp6Etz4=
Subject key identifier:   28:69:A4:47:0D:A0:3D:ED:99:1C:A7:8B:2C:DD:74:45:57:37:F0:AF
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       58
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/KGmkRw2gPe2ZHKeLLN10RVc38K8.roa
Signing time:             Thu 01 May 2025 01:32:23 +0000
ROA not before:           Thu 01 May 2025 01:32:23 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        2001:380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: May  1 01:32:23 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2869A4470DA03DED991CA78B2CDD74455737F0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:d6:44:80:44:74:25:df:e7:7e:bf:2d:51:
                    5a:81:dc:5d:af:cf:61:b2:5e:41:b2:27:9f:a3:a7:
                    95:3c:e4:5b:5b:49:d8:41:cc:0b:ce:b5:d1:c7:2b:
                    97:d1:2a:7a:a5:6b:d9:3f:a6:d8:b4:39:95:77:91:
                    c6:f3:2e:ba:f4:c1:b1:02:f2:9d:67:2e:73:9e:73:
                    d7:32:8c:32:ad:95:dc:4c:6a:a8:3a:5f:12:d0:4e:
                    09:c2:6d:e7:89:51:10:f9:c7:1a:42:43:86:fa:de:
                    24:39:cb:d5:f0:49:f3:ad:ba:df:b0:9d:b4:89:3a:
                    2b:a4:e6:59:9e:7e:4d:05:f2:dc:9e:f3:68:7f:fd:
                    a4:0c:7c:21:02:58:f8:93:36:2c:d9:69:e0:e0:ef:
                    6c:e9:fb:5a:76:4b:12:a4:40:53:91:e3:4b:af:dc:
                    f8:13:56:f2:5e:b3:11:91:c9:71:1b:49:ce:33:97:
                    25:71:a3:f5:05:3d:d8:40:ff:9b:c1:4f:fd:86:88:
                    06:a6:02:7e:e4:1f:67:1a:50:e3:5d:59:fe:00:e6:
                    97:37:2c:6b:ad:d3:e6:8f:77:ac:9b:c4:29:ca:9e:
                    3b:ca:40:c5:a1:ad:59:2d:ee:b8:42:61:0c:23:aa:
                    c3:8b:94:6f:1e:e6:99:23:9e:bd:cb:84:c4:67:78:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:A4:47:0D:A0:3D:ED:99:1C:A7:8B:2C:DD:74:45:57:37:F0:AF
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/KGmkRw2gPe2ZHKeLLN10RVc38K8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:f9:79:b9:5e:62:36:c2:eb:c6:52:be:80:a1:c9:50:c7:
         0e:9f:c7:00:8a:32:4a:a6:64:ea:c2:d2:52:30:cf:55:b3:3f:
         3b:82:cc:33:85:3b:14:9c:ed:60:fa:b9:e0:e9:d4:da:f5:17:
         11:f6:9b:b1:c1:01:b3:aa:8c:6e:e6:b2:cb:e4:c9:46:be:00:
         b7:67:f0:0a:47:4a:a8:a1:9f:71:74:13:a4:8a:a9:8f:b2:b6:
         26:ce:cb:41:28:59:ce:fc:d1:67:9c:67:01:1a:5e:b7:bb:e6:
         e7:79:48:1d:c4:1a:9e:b1:20:ba:dc:56:f1:9f:f8:de:23:1c:
         fc:a1:07:ce:17:cc:10:fb:00:5d:0a:33:47:20:27:fc:30:19:
         c9:b0:f1:1d:65:fb:a9:68:fb:d8:5d:d1:66:c8:00:a7:6a:8d:
         7f:9a:9f:e0:5d:60:6c:2f:f7:c3:94:e7:87:12:8e:89:4e:5f:
         83:3c:f9:46:0e:c3:87:9d:4e:78:54:f9:1c:c8:82:dc:5e:1b:
         23:a5:92:ac:3c:0a:0d:2d:bd:8c:a8:c2:ea:79:5a:9e:73:bc:
         66:ee:93:a6:80:d8:a3:00:7d:6c:cd:c3:0e:9e:0a:27:c1:60:
         a9:ff:9a:31:9f:45:0d:4c:16:eb:a1:2a:2f:dd:21:8f:66:68:
         e4:27:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:08:12 2025 by rpki-client