Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3IJlK3PLk4kNbpkJ2JWGQN-s3d8.roa
File:                     3IJlK3PLk4kNbpkJ2JWGQN-s3d8.roa (raw, json)
Hash identifier:          kgTfUb9io2gU3KMapQXDHeYmRLI+8PGLMcr6cTTaqlQ=
Subject key identifier:   DC:82:65:2B:73:CB:93:89:0D:6E:99:09:D8:95:86:40:DF:AC:DD:DF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04D7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3IJlK3PLk4kNbpkJ2JWGQN-s3d8.roa
Signing time:             Tue 01 Apr 2025 01:53:03 +0000
ROA not before:           Tue 01 Apr 2025 01:53:03 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:53:03 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=DC82652B73CB93890D6E9909D8958640DFACDDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:f0:45:1e:89:86:65:ee:e7:6d:01:f7:35:
                    69:cf:50:8d:15:fb:74:39:1e:20:e4:fd:ff:88:37:
                    5f:f9:f6:19:55:db:79:d1:a8:b3:e6:7f:81:23:6d:
                    87:56:46:bc:2e:a0:0c:83:26:e9:8d:e9:f0:30:14:
                    23:e5:a4:b7:2f:fc:44:82:99:ca:5f:6a:3b:f8:c5:
                    0f:43:a8:e3:70:57:65:0f:96:d4:ce:fd:83:6d:72:
                    29:31:ec:2f:04:a0:1c:ff:6e:c9:43:91:b4:21:1f:
                    f8:6a:57:5e:58:8f:bf:6e:6d:07:9b:a4:36:70:60:
                    ea:a4:bc:9d:f9:19:4d:7b:6e:72:0d:59:a1:ea:ba:
                    a2:4b:91:89:eb:49:39:d0:c4:42:7e:4a:50:1e:28:
                    c2:ef:9a:06:7e:1c:d4:d9:d4:4f:8c:7d:5d:e1:19:
                    e9:23:3f:64:c3:7a:81:4a:e1:03:46:b4:e0:11:9b:
                    6e:15:5e:ba:1f:e8:c6:75:9d:07:52:01:45:2c:6c:
                    92:8c:2b:61:69:f8:03:07:cc:8d:89:b7:f3:c4:bd:
                    99:d9:2d:1e:61:4d:c9:f5:9f:a7:b3:70:f6:4b:90:
                    3e:1a:0b:8c:9c:4c:76:94:39:3e:a9:2d:d1:65:4d:
                    1f:e0:f4:e3:56:72:04:33:b9:2a:10:40:1e:f9:08:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:65:2B:73:CB:93:89:0D:6E:99:09:D8:95:86:40:DF:AC:DD:DF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3IJlK3PLk4kNbpkJ2JWGQN-s3d8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:e6:68:2d:bb:ff:b1:3e:85:92:4e:32:ed:01:bc:aa:91:
         7c:65:02:55:4f:04:a8:5a:69:a3:07:9c:c9:87:5f:a0:9f:fa:
         d5:f0:a7:6f:8f:45:b2:1e:70:50:80:c9:39:9f:be:43:8a:70:
         b2:dc:4d:5f:d8:65:87:9e:c0:ed:92:05:35:dd:ad:54:a7:9c:
         39:60:41:1d:d8:13:7b:4f:21:73:79:48:54:46:d0:a7:a1:bc:
         9d:48:e1:ce:62:37:dc:a4:9e:32:85:f9:38:22:04:fc:a2:03:
         8a:7f:4e:52:9c:ae:92:d3:bc:07:32:2b:28:18:39:19:67:a2:
         19:f2:e9:ff:2d:6e:b9:7e:9e:03:bd:9e:41:cb:e5:a5:31:74:
         69:c8:50:e6:f1:a9:5a:fb:98:7b:34:ad:33:3d:8c:48:03:c3:
         18:b9:fd:0e:c2:6a:12:5b:8d:fe:2d:f7:c9:96:7e:a5:17:db:
         99:96:fe:86:83:3a:c1:00:9f:c6:37:b0:41:89:07:bd:d3:f6:
         87:be:32:77:b6:12:17:f1:dd:2d:c8:12:e8:82:60:39:a8:f5:
         00:d9:96:cd:ba:d0:a3:b4:b8:6a:17:2d:ed:d9:ee:da:d9:bb:
         f1:e9:b7:7e:3b:5a:db:43:f0:a8:2e:9d:56:d7:65:0c:93:87:
         da:4b:e2:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTUzMDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDODI2NTJCNzNDQjkz
ODkwRDZFOTkwOUQ4OTU4NjQwREZBQ0REREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+J/BFHomGZe7nbQH3NWnPUI0V+3Q5HiDk/f+IN1/59hlV23nR
qLPmf4EjbYdWRrwuoAyDJumN6fAwFCPlpLcv/ESCmcpfajv4xQ9DqONwV2UPltTO
/YNtcikx7C8EoBz/bslDkbQhH/hqV15Yj79ubQebpDZwYOqkvJ35GU17bnINWaHq
uqJLkYnrSTnQxEJ+SlAeKMLvmgZ+HNTZ1E+MfV3hGekjP2TDeoFK4QNGtOARm24V
Xrof6MZ1nQdSAUUsbJKMK2Fp+AMHzI2Jt/PEvZnZLR5hTcn1n6ezcPZLkD4aC4yc
THaUOT6pLdFlTR/g9ONWcgQzuSoQQB75CIChAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU3IJlK3PLk4kNbpkJ2JWGQN+s3d8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zSUpsSzNQTGs0a05icGtKMkpXR1FOLXMzZDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaw8wDQYJKoZIhvcNAQELBQADggEBAJt+5mgtu/+xPoWSTjLt
AbyqkXxlAlVPBKhaaaMHnMmHX6Cf+tXwp2+PRbIecFCAyTmfvkOKcLLcTV/YZYee
wO2SBTXdrVSnnDlgQR3YE3tPIXN5SFRG0KehvJ1I4c5iN9yknjKF+TgiBPyiA4p/
TlKcrpLTvAcyKygYORlnohny6f8tbrl+ngO9nkHL5aUxdGnIUObxqVr7mHs0rTM9
jEgDwxi5/Q7CahJbjf4t98mWfqUX25mW/oaDOsEAn8Y3sEGJB73T9oe+Mne2Ehfx
3S3IEuiCYDmo9QDZls260KO0uGoXLe3Z7trZu/Hpt347WttD8KgunVbXZQyTh9pL
4qo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:24 2025 by rpki-client on console.sobornost.net