Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/00BzPxz2JcpMoYUdvau8Fux3KmU.roa
File:                     00BzPxz2JcpMoYUdvau8Fux3KmU.roa (raw, json)
Hash identifier:          olJy3C2qFy1U0kEUcoQnqcVruRNNUKm2IqowLQcZJHY=
Subject key identifier:   D3:40:73:3F:1C:F6:25:CA:4C:A1:85:1D:BD:AB:BC:16:EC:77:2A:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/00BzPxz2JcpMoYUdvau8Fux3KmU.roa
Signing time:             Tue 01 Apr 2025 01:28:56 +0000
ROA not before:           Tue 01 Apr 2025 01:28:56 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:8600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:56 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D340733F1CF625CA4CA1851DBDABBC16EC772A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:bc:ec:f4:d8:28:8d:8f:16:81:d4:2f:44:
                    29:1c:51:42:3a:bb:1a:8b:94:d1:e9:ab:46:70:b6:
                    63:68:af:0a:96:2b:24:45:f5:6f:d5:95:9a:3f:c6:
                    c6:aa:d6:58:12:44:58:a1:6f:62:98:4e:4a:23:16:
                    9b:a3:7b:72:d5:54:b1:b1:c4:71:6f:8a:95:74:7a:
                    fe:17:49:3c:2b:40:62:f9:88:c7:c0:81:39:b0:bc:
                    fd:ae:a7:35:04:62:92:f1:f5:42:f4:0f:43:b1:85:
                    5a:67:87:1b:ca:20:fe:f9:30:09:69:9c:a7:4b:16:
                    91:c5:29:62:9d:69:1d:30:07:a8:42:37:5e:ba:3e:
                    dd:db:af:cb:37:61:9f:b0:9c:d1:53:13:86:0e:a4:
                    80:83:95:82:48:1f:5d:ed:d1:4d:23:50:f9:90:e3:
                    8c:92:fa:54:e3:74:1f:b2:8f:a8:81:cd:98:2e:4c:
                    3e:24:88:31:9c:66:32:95:a4:e9:40:32:4d:96:e3:
                    85:ba:cd:43:77:1f:84:df:92:83:49:13:cd:64:f4:
                    c7:b6:f3:62:6d:36:6e:f1:74:70:47:f2:d8:4a:5c:
                    b1:78:fe:69:09:7c:2d:c2:f3:ab:c5:65:8e:06:79:
                    86:ed:d4:de:8d:53:b5:bc:94:4a:d0:e9:92:b5:65:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:73:3F:1C:F6:25:CA:4C:A1:85:1D:BD:AB:BC:16:EC:77:2A:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/00BzPxz2JcpMoYUdvau8Fux3KmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:46:8b:ef:e1:34:54:c6:91:60:bf:21:79:97:57:cb:7b:84:
         dd:da:b7:46:9a:34:90:bf:4e:48:d2:e9:62:34:d6:ee:83:7d:
         25:ef:5a:a9:55:9f:12:38:d0:f5:22:0b:0e:23:61:cc:34:7b:
         c1:3c:a5:c2:67:b5:5b:84:6f:a2:cb:34:18:cc:37:c9:7e:00:
         13:cc:45:e7:26:e1:c7:2e:dc:59:68:a4:26:e1:ec:68:4d:8a:
         09:f3:81:71:03:e9:b6:1a:91:18:90:65:3f:c8:8e:59:c6:b7:
         ff:cf:09:e1:9d:d7:e2:c4:36:5e:a9:d4:3c:32:0e:43:f2:e7:
         1c:60:e3:bf:f0:95:02:fb:50:b7:85:be:86:8e:0d:ca:d6:03:
         90:83:4a:f1:17:7a:29:56:40:f1:2a:0f:d6:18:bc:f6:3f:53:
         92:3b:ce:5d:35:80:16:1c:d9:08:61:42:40:56:24:58:86:fe:
         a3:66:0a:3b:b3:b2:99:4b:ef:a0:93:47:1a:a5:14:3a:5d:a2:
         36:7b:ad:b4:b2:41:d4:d1:59:13:23:94:cf:6c:71:6d:fe:97:
         27:d5:6a:f2:f2:c5:91:cc:a9:fe:0e:80:96:e9:e3:21:6f:5c:
         93:d7:81:af:0d:d1:76:1d:93:d9:78:55:36:d4:39:1d:51:7e:
         dc:cf:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:24 2025 by rpki-client on console.sobornost.net