Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EDAFyqkR3ib7mVdesK7NsfUn1Lw.roa
File:                     EDAFyqkR3ib7mVdesK7NsfUn1Lw.roa (raw, json)
Hash identifier:          ANi1y2U0ezV0EInt+58sFqsQloWgVlfbCvWNjgSilyg=
Subject key identifier:   10:30:05:CA:A9:11:DE:26:FB:99:57:5E:B0:AE:CD:B1:F5:27:D4:BC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0476
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EDAFyqkR3ib7mVdesK7NsfUn1Lw.roa
Signing time:             Tue 01 Apr 2025 01:45:32 +0000
ROA not before:           Tue 01 Apr 2025 01:45:32 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:32 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=103005CAA911DE26FB99575EB0AECDB1F527D4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:76:1d:3d:83:80:81:3d:dd:27:98:c5:b8:
                    71:c9:c0:fb:b2:94:e5:ec:bd:5e:fd:0b:56:37:26:
                    cc:67:ba:3d:62:c5:b4:fa:d2:8c:07:c4:ca:89:86:
                    16:c6:4f:f0:46:cc:25:e9:99:1c:4a:d9:00:cd:6c:
                    bb:d5:1e:c3:0f:9a:4c:c7:6d:ad:ba:c4:6c:6d:7f:
                    9c:4f:76:14:15:10:d7:2c:e6:fe:46:a8:41:9a:b2:
                    1f:91:cc:df:87:29:bf:c9:6a:a8:1e:c0:87:2e:f9:
                    90:b1:dd:f8:4e:53:94:c0:cd:b8:c5:00:22:c5:0d:
                    f0:51:49:f9:ff:72:1d:c0:0f:81:8d:55:50:41:5e:
                    54:e2:e4:eb:b1:6c:d8:43:22:1d:84:a0:c0:10:9b:
                    ee:e9:79:77:6b:55:3c:20:10:58:fa:1c:6b:4b:d9:
                    aa:82:9d:3a:9e:ec:d8:11:1f:bf:54:7e:30:34:49:
                    17:d1:da:92:bb:a7:25:09:d0:e1:98:c3:40:f3:96:
                    37:32:af:a9:17:bc:b2:08:b0:92:bb:29:53:6d:7e:
                    b4:94:09:d3:4a:0b:9c:71:57:a9:28:21:e0:35:b7:
                    94:7e:37:af:31:2b:47:b5:6a:82:bb:3a:e5:69:84:
                    9e:5c:9c:e2:63:75:39:78:2f:a9:a9:1e:94:f5:f1:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:05:CA:A9:11:DE:26:FB:99:57:5E:B0:AE:CD:B1:F5:27:D4:BC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EDAFyqkR3ib7mVdesK7NsfUn1Lw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:5e:9d:84:51:f5:76:0e:18:0c:33:43:c4:b7:88:66:cc:
         c2:21:e6:92:d7:04:2f:1d:00:37:bb:6d:f2:59:0e:ee:ae:d8:
         38:ff:b0:c2:2a:92:f4:0f:dc:16:47:2a:5f:c9:6b:55:e4:6f:
         c6:17:cc:71:a4:f4:bf:72:99:81:22:51:ac:72:6c:fb:53:db:
         76:63:f9:26:02:d6:ac:3c:75:eb:95:dd:48:c7:61:f2:40:4f:
         a0:f6:30:60:77:fa:59:cd:ab:02:bd:af:54:62:b6:c0:0e:85:
         59:b6:c6:e8:0c:23:24:8f:51:d7:46:c9:5a:da:05:b4:73:47:
         c7:bf:df:fd:9e:ab:ac:ea:45:b7:8f:dc:da:00:3b:38:04:c1:
         ac:ee:57:d5:81:ac:2c:2a:ae:ab:27:7e:8d:85:61:03:fa:c0:
         49:6f:0d:d9:87:8f:5b:18:30:72:02:05:0a:95:74:f7:18:3b:
         db:34:ff:e3:b5:aa:8e:c3:7b:8b:d7:e4:bd:77:37:d9:9f:fb:
         e9:81:17:75:8a:8c:87:82:b6:e6:7c:26:52:2a:00:de:4a:2c:
         17:05:65:b1:5f:9a:7c:65:50:11:74:f6:2f:f9:56:f6:80:38:
         96:05:ad:63:e0:b0:3d:1b:f2:d2:57:ee:31:b5:d7:70:70:09:
         58:c7:b4:af
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTQ1MzJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwMzAwNUNBQTkxMURF
MjZGQjk5NTc1RUIwQUVDREIxRjUyN0Q0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCweXYdPYOAgT3dJ5jFuHHJwPuylOXsvV79C1Y3Jsxnuj1ixbT6
0owHxMqJhhbGT/BGzCXpmRxK2QDNbLvVHsMPmkzHba26xGxtf5xPdhQVENcs5v5G
qEGash+RzN+HKb/JaqgewIcu+ZCx3fhOU5TAzbjFACLFDfBRSfn/ch3AD4GNVVBB
XlTi5OuxbNhDIh2EoMAQm+7peXdrVTwgEFj6HGtL2aqCnTqe7NgRH79UfjA0SRfR
2pK7pyUJ0OGYw0Dzljcyr6kXvLIIsJK7KVNtfrSUCdNKC5xxV6koIeA1t5R+N68x
K0e1aoK7OuVphJ5cnOJjdTl4L6mpHpT18QfpAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUEDAFyqkR3ib7mVdesK7NsfUn1LwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9FREFGeXFrUjNpYjdtVmRlc0s3TnNmVW4xTHcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa1kwDQYJKoZIhvcNAQELBQADggEBAF9qXp2EUfV2DhgMM0PE
t4hmzMIh5pLXBC8dADe7bfJZDu6u2Dj/sMIqkvQP3BZHKl/Ja1Xkb8YXzHGk9L9y
mYEiUaxybPtT23Zj+SYC1qw8deuV3UjHYfJAT6D2MGB3+lnNqwK9r1RitsAOhVm2
xugMIySPUddGyVraBbRzR8e/3/2eq6zqRbeP3NoAOzgEwazuV9WBrCwqrqsnfo2F
YQP6wElvDdmHj1sYMHICBQqVdPcYO9s0/+O1qo7De4vX5L13N9mf++mBF3WKjIeC
tuZ8JlIqAN5KLBcFZbFfmnxlUBF09i/5VvaAOJYFrWPgsD0b8tJX7jG113BwCVjH
tK8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net