Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DtPsOw17BtoadtgdbfoVm2pImbk.roa
File:                     DtPsOw17BtoadtgdbfoVm2pImbk.roa (raw, json)
Hash identifier:          +dDNkB+Wb86Zrcf8ZpC/gb+iRJigypVJA+S7ZJhOlgs=
Subject key identifier:   0E:D3:EC:3B:0D:7B:06:DA:1A:76:D8:1D:6D:FA:15:9B:6A:48:99:B9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03E3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DtPsOw17BtoadtgdbfoVm2pImbk.roa
Signing time:             Tue 01 Apr 2025 01:28:59 +0000
ROA not before:           Tue 01 Apr 2025 01:28:59 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:eb00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=0ED3EC3B0D7B06DA1A76D81D6DFA159B6A4899B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:86:9d:92:3e:53:ca:40:28:c7:f0:98:39:
                    ce:69:fb:31:ab:bd:55:9e:7c:ab:75:68:60:90:ae:
                    ba:57:65:30:f1:8f:43:d1:08:b0:74:42:eb:6a:cb:
                    64:79:bc:33:57:e2:b5:e8:21:74:c8:ac:4d:b5:5d:
                    16:01:ba:ad:69:e2:a7:8c:26:c4:eb:ec:83:3e:8c:
                    94:d0:65:c2:d6:8f:57:e9:e8:6f:a0:2d:e1:52:a6:
                    fe:ce:6f:b2:f0:07:ed:6e:cb:41:8b:62:02:e3:39:
                    ec:25:a0:a6:ee:a0:a7:e1:35:e4:b7:6b:93:09:09:
                    3b:72:43:9a:32:c4:cc:87:b4:e0:2a:d3:35:04:fe:
                    d3:c4:26:28:07:14:56:3f:cc:90:2b:eb:e7:73:ff:
                    5a:55:ff:43:23:09:bc:4b:b7:12:33:be:f4:9f:a7:
                    9f:ec:89:29:9d:65:4b:6e:39:96:4e:36:8c:60:e6:
                    81:9a:f4:0d:6c:5c:bf:05:e9:55:66:a9:2c:49:a1:
                    71:0a:3d:3b:9e:a2:e1:15:5d:cf:29:79:76:0a:7b:
                    4b:cb:17:38:e6:2e:34:e4:ba:ac:79:2e:c5:da:5d:
                    45:0c:1e:9a:86:00:2b:d6:fe:8b:24:f3:1f:1b:f5:
                    3e:db:99:02:e3:b5:4b:51:d0:58:ea:aa:80:62:90:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:EC:3B:0D:7B:06:DA:1A:76:D8:1D:6D:FA:15:9B:6A:48:99:B9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DtPsOw17BtoadtgdbfoVm2pImbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:45:ca:77:67:4d:f8:e2:4c:3c:30:d0:13:d0:a5:ec:2f:ff:
         87:0f:37:5f:30:24:1b:03:5d:62:86:75:d8:00:0c:44:db:fc:
         e6:46:66:ea:b5:9f:b8:53:b2:4c:24:4d:7c:48:2b:40:d7:f2:
         ec:06:2d:a0:83:95:41:c1:89:53:48:8c:20:75:c3:64:d1:a5:
         4a:e8:a0:2d:f2:78:ff:54:47:96:f8:9b:5f:38:b6:f2:01:c8:
         e4:4d:92:07:ca:c0:bc:d8:bb:9a:f3:60:2e:3a:66:f9:03:eb:
         ed:d0:64:40:b6:f4:de:99:0a:2f:de:35:3f:7e:e7:05:f5:ee:
         b4:f7:94:d9:2a:cb:e2:7a:1a:43:af:33:0c:ad:b9:f8:52:e7:
         ab:aa:3f:71:4a:b9:88:da:67:71:22:20:54:b7:f6:92:26:a5:
         e4:ab:d7:a5:2b:04:cf:66:83:15:d6:ea:f7:fa:a2:99:81:70:
         0d:50:96:f9:a4:d0:94:3f:c5:17:58:49:13:73:1e:83:ce:f5:
         75:bd:db:11:db:d5:45:b6:40:6f:af:ca:fb:8b:1c:75:ec:bf:
         b7:98:cb:d9:68:76:d2:0c:1e:08:c5:af:a5:bb:03:72:6d:fa:
         33:44:b7:82:06:3f:43:01:03:d4:6b:57:a5:9a:b6:9c:df:09:
         65:c9:3b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net