Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/cuotneoxUXRGBKAQ0t11w0f2qdU.roa
File:                     cuotneoxUXRGBKAQ0t11w0f2qdU.roa (raw, json)
Hash identifier:          cEHhmr0DpNiEKsI0NkBHYXg6ZQRHcyXT+LbL4II7U+M=
Subject key identifier:   72:EA:2D:9D:EA:31:51:74:46:04:A0:10:D2:DD:75:C3:47:F6:A9:D5
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       17
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/cuotneoxUXRGBKAQ0t11w0f2qdU.roa
Signing time:             Sun 11 May 2025 16:56:00 +0000
ROA not before:           Sun 11 May 2025 16:56:00 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     55911
IP address blocks:        2401:98a0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: May 11 16:56:00 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=72EA2D9DEA3151744604A010D2DD75C347F6A9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:b8:0e:8f:9a:eb:c9:2f:2f:48:e5:91:53:
                    21:d3:43:3c:56:b3:56:84:71:fa:b9:68:16:97:53:
                    b5:70:d1:38:fb:5a:33:84:4b:a3:cc:bd:77:4c:d6:
                    97:f4:36:32:44:28:e3:25:f8:1e:07:56:27:97:6c:
                    0c:52:d5:93:f4:e9:69:fa:f6:fe:49:e4:65:dc:22:
                    9e:a6:fc:95:f2:f4:e9:10:b2:89:ff:ff:65:a5:44:
                    46:b6:d5:26:ac:87:b3:23:09:56:a6:37:6e:39:01:
                    55:00:61:57:0c:90:4d:1e:92:14:16:50:7e:c9:1c:
                    1a:19:ef:dd:9a:65:56:cf:39:3b:3b:d9:a3:d9:09:
                    d3:60:fd:a0:71:85:f0:81:cf:e1:b7:19:5c:e8:3b:
                    81:71:c2:80:7a:a6:da:a4:81:33:a7:00:17:f7:d7:
                    0d:6d:36:44:b1:c5:b6:8c:7d:6f:a5:ad:c5:84:9f:
                    f6:66:94:5b:4f:23:03:91:4a:b4:1f:db:ad:6c:e3:
                    77:74:29:08:68:00:f3:86:60:91:96:c0:9d:5d:df:
                    6e:9b:fe:8b:f4:80:e4:ec:b2:5c:32:09:5e:e8:7f:
                    cd:f8:73:fe:9c:1f:58:83:e2:4e:77:da:23:3f:a9:
                    14:77:8e:9f:8c:53:ec:23:cb:bc:f8:6e:7b:1f:3a:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EA:2D:9D:EA:31:51:74:46:04:A0:10:D2:DD:75:C3:47:F6:A9:D5
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/cuotneoxUXRGBKAQ0t11w0f2qdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:79:53:54:af:1e:d3:6b:b0:87:65:48:73:98:06:2a:64:fc:
         98:f8:45:41:8c:1c:43:9f:a7:2e:b9:44:16:76:39:33:79:f2:
         13:97:58:c3:01:b9:03:af:5a:d7:6a:7e:bf:22:91:31:0c:b3:
         7d:4f:5a:4a:94:b7:52:e5:b5:5b:b5:72:6e:2e:08:d8:49:98:
         31:ef:d3:56:e4:39:d7:da:7b:b1:51:c8:cb:6e:43:b2:c8:90:
         1a:97:77:2a:ad:59:3f:48:d5:9e:e8:c7:4f:37:a0:36:9d:10:
         de:c1:5a:6c:8a:f8:d4:c0:5f:5a:a7:9b:3a:b4:4d:42:67:b6:
         82:00:d6:91:29:3c:b1:e2:35:d1:bb:7b:0a:61:38:68:c7:e8:
         31:38:5a:bd:ec:d0:b8:84:78:96:14:ef:19:0e:7d:48:d1:3f:
         21:b9:13:f2:be:6e:e6:f9:40:14:06:70:cf:a0:81:ad:b7:01:
         ad:29:b9:68:c3:37:b4:e0:4e:88:67:5e:58:ad:7c:5c:0e:62:
         b3:e0:34:5b:88:bc:76:4d:e0:9d:07:c4:36:28:a0:47:84:0d:
         b0:e3:5a:62:85:3b:0b:c9:3f:6c:1c:e2:3a:91:c7:1d:c0:a0:
         d9:12:54:e3:8e:4f:d9:b2:5a:53:fd:40:c2:34:09:bd:e2:ef:
         b4:6c:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:46:26 2025 by rpki-client