Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/02vayft4zOQ0rzhWp-vA-tyJVD8.roa
File:                     02vayft4zOQ0rzhWp-vA-tyJVD8.roa (raw, json)
Hash identifier:          QJW5KP/IF1eU8/L3yDfH7dVyz8ZQZ3lrCZHm1HwMZ6g=
Subject key identifier:   D3:6B:DA:C9:FB:78:CC:E4:34:AF:38:56:A7:EB:C0:FA:DC:89:54:3F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0485
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/02vayft4zOQ0rzhWp-vA-tyJVD8.roa
Signing time:             Tue 01 Apr 2025 01:45:38 +0000
ROA not before:           Tue 01 Apr 2025 01:45:38 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:8d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:38 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D36BDAC9FB78CCE434AF3856A7EBC0FADC89543F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:5b:a6:bb:7d:c0:64:ae:b6:73:58:7a:c7:
                    48:92:c2:b9:0b:11:67:c6:1a:9a:64:ac:49:f6:71:
                    f3:ea:78:7f:27:f7:09:7b:be:e7:80:9d:75:fb:27:
                    26:f8:fa:ac:d5:53:e6:81:43:5a:47:a8:60:61:98:
                    e0:6c:f3:24:0b:a8:d7:b7:44:14:c3:84:61:ee:eb:
                    61:f5:df:55:a7:a7:bd:8c:3f:30:81:a4:29:3d:89:
                    59:74:bc:ea:d1:0e:52:de:bb:b2:91:dd:7a:c2:d6:
                    9e:2d:ce:1e:64:b4:3d:c3:8f:dc:70:62:0d:54:39:
                    55:cd:ac:d4:a4:70:76:82:5c:b3:9b:86:65:f6:9c:
                    09:80:a6:17:fb:52:77:8b:7d:a4:c9:28:2b:9f:c2:
                    56:cd:e4:30:3b:05:c3:59:55:79:e5:b1:d4:08:0b:
                    29:19:b8:0b:e8:d0:eb:b1:a7:94:ac:3e:63:f0:22:
                    72:08:b8:28:5a:58:ba:ee:09:38:ab:dd:38:eb:ab:
                    45:1a:21:b1:d9:b9:1f:ae:f5:8c:9d:5e:c9:7c:b4:
                    bf:8e:36:40:a2:a1:da:07:90:06:84:88:36:58:b1:
                    15:9b:d6:19:20:fa:a7:49:1b:66:c0:43:45:b0:a2:
                    98:d9:d0:2b:7b:63:da:4b:e4:2c:20:d1:c4:47:34:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6B:DA:C9:FB:78:CC:E4:34:AF:38:56:A7:EB:C0:FA:DC:89:54:3F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/02vayft4zOQ0rzhWp-vA-tyJVD8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:e9:ce:dc:10:c4:4b:f7:2f:2b:81:0c:55:1b:b5:42:9d:
         96:ed:7f:38:f5:37:18:ec:46:13:b1:11:50:b7:1a:1f:82:0d:
         5e:33:c4:5a:f0:b7:14:53:92:7b:a0:db:70:f6:de:78:26:ef:
         06:9d:0c:5c:99:85:df:d6:04:68:d9:0f:43:b8:95:4f:9d:a1:
         24:68:2e:c8:3f:ef:dd:b9:af:f7:d6:1b:ba:cc:59:bf:ae:5c:
         d4:11:28:12:f3:a5:7c:27:0d:f6:1d:f2:07:0e:6a:d2:3f:32:
         55:05:76:e2:e2:43:a2:71:13:82:63:04:18:7b:31:c1:6b:2b:
         ef:75:8f:c9:e2:7a:26:3b:31:c7:a3:a7:d0:c5:75:8e:ea:0b:
         b8:fe:ae:82:8c:cb:a3:54:4d:fa:30:10:0a:79:e9:d4:ab:72:
         26:c4:ce:20:5b:fe:69:43:1d:e1:04:60:8d:63:ae:f5:d1:9c:
         fe:da:29:b3:d4:3a:eb:53:1e:e4:11:5e:78:c0:2f:ba:46:8a:
         9f:42:2d:5e:26:75:bd:2a:6a:65:9b:7b:f3:f5:39:e7:cc:ed:
         6d:44:40:df:17:ef:16:52:03:68:ff:29:1e:b7:4b:c3:be:2e:
         8c:a9:03:a5:ab:c1:46:0e:b2:0a:d1:1b:d9:5e:96:ed:fe:f1:
         0b:d1:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:24 2025 by rpki-client on console.sobornost.net