Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
File:                     sDRrIailKsw2x5Hx5AueVoZY_fE.roa (raw, json)
Hash identifier:          hqrO0n8R9IV/tS+ncadzJAX3DIcMk7HZrRtkhKOAAh0=
Subject key identifier:   B0:34:6B:21:A8:A5:2A:CC:36:C7:91:F1:E4:0B:9E:56:86:58:FD:F1
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       1B
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
Signing time:             Thu 01 May 2025 01:30:13 +0000
ROA not before:           Thu 01 May 2025 01:30:13 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9354
IP address blocks:        2405:7000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: May  1 01:30:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B0346B21A8A52ACC36C791F1E40B9E568658FDF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:4a:f2:aa:e4:06:58:19:c9:7d:11:64:7e:
                    15:6b:a5:83:2e:8b:d0:8d:b8:64:33:ce:4e:9f:17:
                    cd:f0:25:a8:da:2a:04:48:f9:24:d0:84:56:e9:0a:
                    29:13:7b:7f:17:c2:08:73:71:7b:1e:08:8b:33:db:
                    01:9a:7c:13:31:64:a9:05:85:6a:5d:72:2c:ab:e4:
                    b1:4b:14:da:ef:83:15:d7:dd:6d:79:92:15:23:2c:
                    fc:03:ee:3f:3e:60:11:2f:21:b5:e5:62:7f:fc:68:
                    f3:fb:35:c9:70:78:03:a3:bc:d2:aa:eb:d1:63:51:
                    cd:f8:35:17:4e:fc:32:69:09:f7:ed:05:80:26:53:
                    fe:f3:b2:a6:ac:16:d4:71:6b:93:16:78:f8:70:a7:
                    9b:cd:89:41:89:dd:b6:e6:a1:bd:33:37:90:e6:df:
                    35:08:8c:4d:24:00:61:ec:de:3a:a9:6f:43:9e:be:
                    a2:46:91:3e:f9:68:e1:4f:ba:db:b0:d6:60:ef:65:
                    e8:47:e5:c4:bf:63:30:a6:3c:c5:8c:38:73:06:6e:
                    6a:0c:39:3f:1b:6f:c9:dc:fe:e5:2a:47:12:c9:a8:
                    88:58:c3:5d:f2:63:be:cd:2b:57:7c:ce:a3:ad:ed:
                    15:b3:81:1e:9b:bf:cb:40:51:74:98:7d:22:a9:23:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:6B:21:A8:A5:2A:CC:36:C7:91:F1:E4:0B:9E:56:86:58:FD:F1
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/sDRrIailKsw2x5Hx5AueVoZY_fE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:24:41:bc:49:3b:01:ae:7e:a1:b0:c4:e4:40:82:1b:5e:dc:
         8b:80:e8:9c:e6:d5:d0:0f:07:33:57:aa:0b:93:56:91:8e:69:
         db:94:47:fa:4f:29:33:9a:6a:c8:33:ea:51:ed:24:65:08:6a:
         be:ea:8e:51:13:9a:79:20:db:f3:d4:4d:98:c1:f5:fc:7a:11:
         27:95:4c:b1:20:d3:55:ce:8a:a3:8a:f8:2b:57:1c:48:ba:cd:
         60:20:e1:12:3f:3e:8e:dc:15:60:2b:0c:ca:6b:5b:23:d4:e2:
         8d:b4:ef:ac:9d:ce:1d:45:76:6f:a9:18:f3:7c:4b:f3:cf:8a:
         b3:3b:1d:e5:c7:01:0d:f9:33:ae:87:d0:72:70:c4:95:5b:1e:
         e1:6f:86:95:9b:11:90:f0:a1:b9:a2:65:46:df:c1:b8:32:23:
         d0:9e:b8:d4:84:05:40:7a:c0:86:aa:36:61:9e:cf:75:9c:04:
         55:af:db:d6:81:e0:0b:69:76:f8:42:77:42:40:8b:01:55:85:
         be:39:3b:6e:55:58:ad:e5:6a:fa:31:ac:44:8e:66:03:5c:33:
         7b:e8:0e:81:75:44:b7:2f:f4:06:91:87:3d:4e:25:b6:14:c6:
         68:0b:3f:0a:86:0a:5f:98:4a:64:92:e1:11:4d:e2:d6:25:17:
         75:34:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:53:31 2025 by rpki-client