Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/HiRp0fcAK-unFQ0_sGDXbe_cSEo.roa
File:                     HiRp0fcAK-unFQ0_sGDXbe_cSEo.roa (raw, json)
Hash identifier:          wWqudppxsWTZ9VaGmj6Vteo4Ic4m7lQGfHKor1W3J1E=
Subject key identifier:   1E:24:69:D1:F7:00:2B:EB:A7:15:0D:3F:B0:60:D7:6D:EF:DC:48:4A
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       26
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/HiRp0fcAK-unFQ0_sGDXbe_cSEo.roa
Signing time:             Thu 01 May 2025 01:34:07 +0000
ROA not before:           Thu 01 May 2025 01:34:07 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     0
IP address blocks:        2403:c780:7200::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: May  1 01:34:07 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1E2469D1F7002BEBA7150D3FB060D76DEFDC484A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:fd:5d:53:c8:63:50:71:69:b4:fa:1a:47:
                    7e:a9:2e:22:84:8e:02:f2:34:4c:84:f6:ae:f2:67:
                    46:7e:2a:b8:ee:49:63:b0:15:09:25:1d:a1:6f:87:
                    67:3f:d3:23:d7:97:06:d2:c6:a3:61:1b:81:a9:f3:
                    1f:ba:9f:65:12:90:b1:96:9b:96:4f:c9:08:09:6a:
                    98:68:86:f5:e6:02:4c:ec:36:93:91:c8:40:c8:a8:
                    91:08:e7:2c:ad:31:a4:cb:e2:ed:6e:1f:8a:4d:ed:
                    8d:46:3b:3b:dd:98:dd:a4:1d:14:b4:d1:26:ec:af:
                    0c:b1:cc:0a:39:30:26:7b:e7:89:0c:b9:61:04:81:
                    86:7b:dc:3a:81:31:e9:7e:78:a4:44:80:a5:e7:fa:
                    55:61:a6:05:51:fe:c0:a0:82:b6:45:04:1f:1d:89:
                    94:07:eb:71:4b:3d:1b:83:4c:b3:2e:3a:a1:8d:c6:
                    ab:6f:38:a8:64:93:18:bb:c4:6d:87:33:b6:fd:fe:
                    de:8c:ae:94:35:28:65:b2:f1:bc:62:ca:d6:d5:a3:
                    ea:d3:71:11:99:c5:49:e3:dd:c8:eb:fa:c9:1f:77:
                    c7:5c:79:f9:31:9d:13:ca:41:08:b1:db:d1:f2:3a:
                    c8:4c:03:cc:f7:50:26:43:ad:97:4d:13:5f:b6:d4:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:69:D1:F7:00:2B:EB:A7:15:0D:3F:B0:60:D7:6D:EF:DC:48:4A
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/HiRp0fcAK-unFQ0_sGDXbe_cSEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:20:6f:5d:ee:50:c9:31:5b:e8:11:83:fb:55:7c:45:c8:6e:
         8a:81:e2:5b:e8:bb:44:ce:a6:ff:0c:11:0e:71:e3:81:18:dc:
         dc:72:14:f2:70:de:3d:14:97:48:a5:f4:98:82:0d:1a:32:2a:
         cd:c9:e4:fc:63:0d:7c:82:7c:35:f1:a7:c5:02:93:9c:f1:3c:
         64:ec:31:33:18:95:fb:36:c5:d7:42:17:90:ae:e7:58:47:f0:
         71:d0:c7:0b:80:a2:4e:61:aa:8e:55:44:7a:ee:82:97:ee:b2:
         fd:01:dc:a9:5e:4f:c6:b4:b3:06:dc:39:d3:be:65:9a:9b:c5:
         70:82:5d:c6:dd:5a:12:05:38:77:ff:02:ad:f3:48:94:ff:03:
         0e:29:31:65:08:a3:db:77:4a:75:ef:d1:9d:40:9e:fd:2a:85:
         d2:31:be:d3:b3:94:ba:54:84:b1:9f:0f:f8:6c:54:93:5d:af:
         70:75:97:bb:8e:ad:15:eb:f0:85:f7:a1:08:8b:fc:f0:21:33:
         b3:24:c9:ff:ef:1a:d0:d5:c4:3a:be:1a:b3:97:0d:54:f1:e9:
         70:11:1f:9d:16:a1:05:d8:45:68:e0:b7:39:9d:f3:70:6d:d6:
         8e:1a:41:5f:b5:a1:5e:ee:99:ef:a5:fc:c4:ab:eb:22:b9:8b:
         b6:72:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:12 2025 by rpki-client