Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/r5clQqMEacU7K47N945Vv4a5PAU.roa
File:                     r5clQqMEacU7K47N945Vv4a5PAU.roa (raw, json)
Hash identifier:          qdDNp33wzczUPPIvwIs+CbQoT8Z66+2U9nFHLaZ6zCE=
Subject key identifier:   AF:97:25:42:A3:04:69:C5:3B:2B:8E:CD:F7:8E:55:BF:86:B9:3C:05
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       43
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/r5clQqMEacU7K47N945Vv4a5PAU.roa
Signing time:             Tue 01 Apr 2025 01:30:29 +0000
ROA not before:           Tue 01 Apr 2025 01:30:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        2401:7ec0:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr  1 01:30:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=AF972542A30469C53B2B8ECDF78E55BF86B93C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:63:63:ca:30:e8:26:e6:e3:6e:a9:ce:64:
                    9e:93:f6:5e:5e:60:85:c8:76:7f:87:d6:77:61:9e:
                    a3:b5:8b:6f:9c:f4:42:40:4b:fd:6b:ee:96:c2:04:
                    b7:9b:a2:48:1b:c8:2c:aa:df:0a:a1:4c:a0:94:49:
                    2d:16:25:12:14:16:c3:32:27:d0:f5:24:24:7b:9b:
                    f5:b2:c4:9b:ed:0c:76:5b:4b:76:7c:6f:ea:fb:67:
                    f4:8b:0c:43:5f:57:c0:bd:9c:21:15:c4:dd:8a:70:
                    a4:08:ba:08:9c:64:5c:c3:16:3a:83:4a:e5:82:4f:
                    d3:56:d6:cd:54:5f:f5:88:df:df:bc:a6:14:15:94:
                    7e:8c:ac:55:1f:e3:0a:0d:29:b0:60:30:67:87:c9:
                    f6:77:6c:db:dd:41:09:32:f0:ef:00:5b:c1:17:bc:
                    48:75:61:7a:07:01:53:d7:54:87:46:b0:67:6c:8e:
                    ed:f8:ee:f8:cf:12:fb:e7:aa:25:b6:3a:e5:b8:d3:
                    8e:60:b1:20:5a:92:82:98:20:93:55:57:c9:12:3b:
                    ec:e8:16:57:4d:30:ba:e9:01:e2:a0:e0:d0:82:44:
                    87:c0:63:69:b7:26:b6:b3:8b:c4:d6:fe:de:de:96:
                    98:7c:50:f1:e2:f7:8d:3b:ec:02:bd:15:07:12:1c:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:97:25:42:A3:04:69:C5:3B:2B:8E:CD:F7:8E:55:BF:86:B9:3C:05
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/r5clQqMEacU7K47N945Vv4a5PAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:e7:95:5f:64:1e:21:d1:a8:dd:03:8a:b0:74:97:b6:82:
         f2:dd:9e:a7:da:41:91:6d:14:cf:0f:6e:76:5b:a9:56:cd:12:
         c9:8d:d6:10:b4:dc:9b:c3:97:54:50:c8:19:db:e4:d4:08:78:
         62:2d:1c:ec:ab:ee:e5:f2:96:a3:70:e8:24:d6:52:be:61:50:
         06:2e:2a:05:ef:d6:f0:62:71:23:0d:4f:78:21:51:66:cb:b2:
         fe:f0:ef:82:b5:b0:ca:38:29:b2:0e:5e:1b:8e:d7:e4:d6:df:
         22:30:d8:2a:9d:c3:ca:e1:e3:b5:2a:2a:ae:c5:5d:a4:56:bd:
         4a:ae:ea:1e:4e:6d:93:1f:4f:b4:c6:52:ef:3d:fc:0a:12:75:
         29:53:81:56:ff:50:d5:f9:95:7a:41:a2:fe:3f:9d:fd:7d:0a:
         44:ee:87:9f:d9:c8:8b:5e:30:04:73:61:8d:c8:61:14:a6:43:
         48:f5:9a:7e:63:06:32:e1:a1:02:45:28:41:da:d8:73:24:72:
         2e:17:16:9f:c8:ea:e0:da:f2:69:21:e9:05:01:6d:4e:76:ae:
         96:f8:99:d0:f6:3f:56:66:c8:6e:13:b4:73:57:ae:3e:6b:76:
         ed:5a:d3:0c:ef:00:ea:3e:ff:44:51:c7:0d:69:c3:f9:a2:ef:
         a3:b9:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:32 2025 by rpki-client on console.sobornost.net