Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30324/k7zvAgYyxzSzweHfLUBaaHh75tc.roa
File:                     k7zvAgYyxzSzweHfLUBaaHh75tc.roa (raw, json)
Hash identifier:          pNiWY4Oj1L4y2Qygkxfw39K/gMDiBgbaGivHq8d6FyU=
Subject key identifier:   93:BC:EF:02:06:32:C7:34:B3:C1:E1:DF:2D:40:5A:68:78:7B:E6:D7
Certificate issuer:       /CN=89607E4572757201856BE37C98FF5336D5F45F23
Certificate serial:       13
Authority key identifier: 89:60:7E:45:72:75:72:01:85:6B:E3:7C:98:FF:53:36:D5:F4:5F:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30324/k7zvAgYyxzSzweHfLUBaaHh75tc.roa
Signing time:             Thu 24 Apr 2025 07:02:47 +0000
ROA not before:           Thu 24 Apr 2025 07:02:47 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     24279
IP address blocks:        2403:1240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30324/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30324/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89607E4572757201856BE37C98FF5336D5F45F23
        Validity
            Not Before: Apr 24 07:02:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=93BCEF020632C734B3C1E1DF2D405A68787BE6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:a0:bc:d5:7a:d1:f7:57:73:c2:3f:26:ce:
                    9d:ec:28:5f:ba:3d:46:f9:39:00:a2:f8:a7:5f:b4:
                    4d:28:32:2e:7c:f6:c4:41:70:90:bc:7e:31:20:ff:
                    4f:dd:8e:68:7b:ca:e6:8c:a7:b1:08:46:70:69:12:
                    e1:af:4a:66:b4:47:95:a4:77:d7:f0:dc:bf:a4:10:
                    e2:61:63:42:31:c4:f5:f1:f3:4d:5b:cc:8c:6b:dd:
                    de:c8:7c:8e:e2:4f:c1:43:d3:9a:ef:e2:2d:92:c6:
                    5d:34:59:60:6f:c8:27:76:67:bd:b0:ce:d6:43:5e:
                    7a:e7:c7:c5:f8:c8:c6:a8:49:ec:30:a3:63:f2:51:
                    11:b6:1c:36:86:19:41:56:5f:c4:c5:57:a5:e4:18:
                    61:a9:ca:b0:1c:10:bf:10:10:ab:b4:25:59:32:b6:
                    dd:af:9a:e9:fc:15:2b:bb:c6:01:00:7e:a8:c6:6f:
                    9b:61:1f:26:89:54:d4:ce:b0:5a:c9:b6:aa:9b:41:
                    9a:e1:c3:c2:73:aa:d8:1f:8d:6d:06:bc:94:19:ba:
                    9c:18:18:17:1b:43:0c:72:55:2d:dc:25:5e:b5:ed:
                    7a:8c:c3:f7:95:88:c1:20:33:fb:2a:8d:c5:f9:dd:
                    02:0d:e3:68:a6:1f:ea:99:8d:23:e5:ba:13:29:92:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:EF:02:06:32:C7:34:B3:C1:E1:DF:2D:40:5A:68:78:7B:E6:D7
            X509v3 Authority Key Identifier:
                keyid:89:60:7E:45:72:75:72:01:85:6B:E3:7C:98:FF:53:36:D5:F4:5F:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30324/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iWB-RXJ1cgGFa-N8mP9TNtX0XyM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30324/k7zvAgYyxzSzweHfLUBaaHh75tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1240::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:bb:04:62:63:51:4b:3a:d1:ff:99:89:6f:06:7c:d8:68:
         e0:2d:7d:e3:d7:2e:d4:84:e7:01:de:ba:f0:0d:e7:8d:6d:be:
         57:8b:c6:79:52:e1:f3:74:69:11:15:cc:c3:00:e2:97:dd:6b:
         a3:bf:3f:4b:f1:d1:f3:4a:e7:cf:58:f1:61:45:13:73:41:cc:
         8d:0d:f0:7d:7a:45:60:ee:46:d4:e0:67:b4:dd:a6:9f:71:3d:
         57:8f:d8:6f:0b:12:03:10:57:71:f6:20:1c:29:e2:01:92:a7:
         26:28:29:7b:12:bc:02:9f:c9:81:64:b5:33:6d:72:3b:27:52:
         9c:11:4b:bb:70:74:45:30:59:6c:09:27:17:91:47:43:7a:c3:
         7b:12:ab:a6:de:1d:cc:45:99:28:17:ea:b6:c5:2d:ac:b2:15:
         7e:f8:55:6c:36:60:ff:c8:bf:06:a5:41:01:1f:79:38:91:75:
         ef:58:58:14:e5:78:3b:86:d0:b5:60:d0:fa:44:38:ef:61:1a:
         6c:df:d6:34:3a:6c:88:ad:be:b3:d2:91:38:36:fc:b8:8a:17:
         36:d5:6b:98:e2:1f:91:2e:37:a9:68:db:31:3a:6b:79:3d:29:
         a6:02:3b:ff:d7:c9:8c:a0:9c:0a:6d:d1:b2:eb:c4:7b:10:ab:
         9b:5f:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:33 2025 by rpki-client on console.sobornost.net