Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
File:                     2SbOEigCPAPgd6w-C5Nj_4JACas.roa (raw, json)
Hash identifier:          EAtB9Uwr7xpFP4r2nio2dU2blhqLUq2nj91GkvdUUrE=
Subject key identifier:   D9:26:CE:12:28:02:3C:03:E0:77:AC:3E:0B:93:63:FF:82:40:09:AB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
Signing time:             Tue 01 Apr 2025 01:55:48 +0000
ROA not before:           Tue 01 Apr 2025 01:55:48 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:7f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:55:48 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D926CE1228023C03E077AC3E0B9363FF824009AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:ba:5f:07:2f:d8:8b:0a:24:c6:fc:5f:4c:
                    80:d0:f8:18:ff:7a:56:57:be:8d:bf:7b:a1:0e:e2:
                    4c:31:cf:5c:18:d2:a5:42:bb:37:dc:a9:f2:59:92:
                    b2:2e:11:a1:63:c9:4b:58:1a:b8:23:e0:d4:cc:93:
                    b8:0e:c0:34:43:eb:61:c0:2d:82:97:5d:6e:b0:ab:
                    d0:77:06:64:a5:81:15:e9:b6:3c:35:a1:3d:da:9c:
                    85:88:38:67:dc:8c:e1:9d:c1:7a:c0:34:4c:62:d1:
                    42:2f:fe:16:a2:39:80:57:88:39:93:a8:6d:10:f8:
                    55:53:76:58:e2:52:f2:4c:f4:be:2a:34:54:b7:36:
                    be:d7:36:58:c3:96:13:fa:c0:38:6b:ca:c7:45:43:
                    35:ad:ac:b5:c5:e0:9e:2a:ee:dc:68:71:6b:3b:8d:
                    8e:af:d3:b5:4e:27:92:46:14:02:e5:da:c0:24:c4:
                    18:bb:47:8c:cc:e8:76:17:f1:3e:6d:12:76:b9:1b:
                    88:18:65:3b:5a:58:a3:14:09:74:bd:96:e6:3a:73:
                    92:82:11:30:77:9c:61:eb:2f:e8:7b:6f:e5:ac:06:
                    78:fb:31:ee:75:ca:ed:f2:fd:21:8c:e9:9c:41:03:
                    f0:c6:ad:3f:c4:a1:40:51:9d:65:60:2d:16:2e:90:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:CE:12:28:02:3C:03:E0:77:AC:3E:0B:93:63:FF:82:40:09:AB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2SbOEigCPAPgd6w-C5Nj_4JACas.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:99:38:42:a9:2b:b8:7b:1a:5e:12:5b:86:8b:1a:51:c0:10:
         e9:c4:c3:8f:ca:b2:a4:ce:ed:86:a0:e3:d6:85:70:b1:78:e9:
         20:1d:52:ae:99:fe:88:c3:a8:60:9d:d8:2f:ca:24:d9:3b:7a:
         83:51:0e:5e:5d:0f:bb:ec:97:0c:f6:78:c6:72:61:15:8f:59:
         a0:6c:69:e3:28:7f:d6:e7:cf:ab:d9:e2:b6:42:d9:25:0a:99:
         18:c7:4b:bf:e2:60:63:43:d4:fd:e1:07:19:60:19:64:2f:58:
         89:c6:95:ef:c3:0a:57:94:0d:bf:e4:32:74:29:4f:d8:b4:50:
         ca:c2:ac:de:a0:24:a8:82:6e:ff:01:5a:e6:9f:f6:e2:3d:ec:
         cf:5f:bb:4d:6a:f4:3f:ab:79:52:ea:46:3b:c1:1a:e6:14:18:
         ca:60:20:41:55:b4:a5:a9:b6:2f:91:56:1e:06:d1:31:67:48:
         f9:ce:8c:17:f0:c9:24:49:cb:d6:80:e4:8b:c4:d5:87:cf:c4:
         54:94:10:33:64:cc:12:6f:99:ad:41:4c:fa:f1:9b:98:f1:d3:
         e3:b6:aa:2a:fc:3b:78:bf:c7:26:74:03:70:b5:20:a3:e4:dc:
         35:d2:74:2f:81:a7:1a:e0:88:55:85:04:7c:c8:88:60:10:90:
         67:30:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:24 2025 by rpki-client on console.sobornost.net