Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6CFbpiVDulzIsGmTahsmsUCVd4w.roa
File:                     6CFbpiVDulzIsGmTahsmsUCVd4w.roa (raw, json)
Hash identifier:          x/JEGGbi79QKFOpqITIfrt0ZIluskdWlffTY/a2FaNU=
Subject key identifier:   E8:21:5B:A6:25:43:BA:5C:C8:B0:69:93:6A:1B:26:B1:40:95:77:8C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0481
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6CFbpiVDulzIsGmTahsmsUCVd4w.roa
Signing time:             Tue 01 Apr 2025 01:45:36 +0000
ROA not before:           Tue 01 Apr 2025 01:45:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:be00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E8215BA62543BA5CC8B069936A1B26B14095778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:f5:65:b5:29:2c:70:32:c5:70:5b:fe:b9:
                    81:8c:24:ce:5b:5d:fc:64:4a:b3:1b:aa:bf:2b:a9:
                    61:d2:9a:c3:f1:3b:94:a3:ae:04:c7:32:d1:2b:09:
                    eb:0d:07:0f:4d:3f:c9:75:6a:57:96:69:1b:75:cd:
                    51:46:82:aa:a2:f2:bf:bf:6a:ac:f9:21:e9:8f:9d:
                    68:40:e5:f1:9e:6c:90:d8:e9:22:7f:a9:b3:4a:cc:
                    c4:33:5e:1e:42:53:60:09:a3:88:de:ab:23:92:1f:
                    5b:7a:27:55:48:71:3a:73:4d:62:ad:86:c9:be:03:
                    2e:c1:44:ee:3e:c3:86:d4:2f:98:16:38:7a:64:5e:
                    d1:c1:72:b2:86:44:4d:c8:88:aa:27:00:55:9a:36:
                    89:22:54:37:d2:5b:ff:15:82:af:b6:7f:ed:6d:55:
                    5f:99:14:25:db:46:6f:84:5e:93:4f:be:70:9f:e2:
                    91:ba:f6:d1:d4:a2:30:a4:89:ac:0a:cb:f9:e4:12:
                    be:fc:12:29:59:9d:62:12:9c:74:d1:6f:32:d8:7a:
                    0d:ec:5a:db:bd:e0:d7:cb:42:36:b2:49:04:7a:ad:
                    1b:f9:74:13:14:ef:1d:8a:a7:4a:48:ae:8e:c1:8f:
                    02:47:8a:b8:1e:4a:e9:5e:0d:8a:f9:71:75:eb:d8:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:5B:A6:25:43:BA:5C:C8:B0:69:93:6A:1B:26:B1:40:95:77:8C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6CFbpiVDulzIsGmTahsmsUCVd4w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:d1:fd:f6:91:87:ed:e7:e0:08:6d:3d:fc:ec:e0:17:e6:
         6b:08:e4:93:fb:29:b9:71:31:33:20:52:da:03:29:2d:a7:94:
         1a:af:7a:ba:c9:c3:47:df:e6:73:41:16:9e:e2:3a:60:cf:7d:
         ad:ce:cf:ee:03:51:ab:ca:56:97:1f:f9:fa:3a:88:24:7e:97:
         f9:73:03:2b:bd:fe:de:99:52:d1:a7:36:03:42:b2:8f:64:27:
         6c:d2:77:8f:a3:f0:1e:65:f9:01:bd:55:4f:76:13:7c:24:30:
         1e:28:6f:40:db:43:63:42:56:2f:90:47:f6:77:c8:7f:12:b2:
         9f:39:c5:ff:1d:e9:ee:f9:f0:68:f8:10:21:97:35:61:d8:07:
         11:30:b9:37:0d:7c:cb:0e:b8:ae:4b:4c:ad:9d:2a:ee:87:2e:
         9a:46:00:ff:41:f2:83:b2:1f:b7:52:24:cc:27:d1:e1:a0:6f:
         38:d2:b4:f5:12:6a:6b:0a:07:93:e2:71:e6:13:41:96:63:9c:
         ee:29:fd:43:ef:b5:47:04:c6:db:7e:b2:e1:85:07:10:c8:ef:
         10:4b:82:84:f3:58:39:8d:cc:fb:74:ad:a1:96:82:60:8f:b2:
         dc:c0:64:64:1b:84:fa:8b:7c:40:97:47:ea:31:18:0b:bc:68:
         f1:60:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:24 2025 by rpki-client on console.sobornost.net