Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EK36cN0aCXy0OH0maMly-NrVRPQ.roa
File:                     EK36cN0aCXy0OH0maMly-NrVRPQ.roa (raw, json)
Hash identifier:          a+ad2D60eM1FkFSyR08pMdgafXss02lYiDHB4Hd7hGQ=
Subject key identifier:   10:AD:FA:70:DD:1A:09:7C:B4:38:7D:26:68:C9:72:F8:DA:D5:44:F4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       045D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EK36cN0aCXy0OH0maMly-NrVRPQ.roa
Signing time:             Tue 01 Apr 2025 01:42:27 +0000
ROA not before:           Tue 01 Apr 2025 01:42:27 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:27 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=10ADFA70DD1A097CB4387D2668C972F8DAD544F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:85:2a:23:02:88:fa:3f:49:a8:01:b8:b5:
                    c6:d1:06:85:71:ec:ee:ae:cf:ea:86:8f:cf:c0:a6:
                    dd:6c:6a:00:98:3c:c7:b3:e3:6d:69:4c:aa:ef:28:
                    83:b7:1c:e4:cb:ac:54:57:a8:0d:e3:5f:5f:30:b1:
                    d4:2b:3a:e3:c6:b1:6c:aa:80:28:5d:3c:57:f4:10:
                    1f:34:43:29:50:74:62:35:24:e0:d1:0e:90:bc:29:
                    0a:0b:29:d3:42:40:84:00:a9:87:6f:35:31:2f:ac:
                    0e:a0:eb:da:12:e6:69:36:f6:d1:c1:c7:47:51:a6:
                    ca:71:0c:f0:7c:53:5b:12:2f:14:a7:02:f5:b5:50:
                    30:13:a1:60:31:ce:8a:4a:1c:b9:b1:7a:ae:f2:83:
                    52:84:51:39:c9:2f:7b:81:9d:ea:0f:9b:2c:2b:44:
                    fd:2c:04:6e:96:c3:30:b9:a9:bf:75:b3:b3:f6:08:
                    4c:3e:72:df:56:ed:fb:23:9d:57:b2:2e:1d:ff:07:
                    65:38:c8:63:3c:c2:2a:47:69:44:69:6b:15:24:3b:
                    1b:a8:32:7d:bd:5b:7e:1a:a7:7b:65:70:43:a0:f3:
                    84:de:c2:1d:d7:ef:71:84:57:11:ff:09:29:21:25:
                    47:c4:d6:38:3b:11:26:c6:2c:3b:e5:b2:00:d1:e8:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:FA:70:DD:1A:09:7C:B4:38:7D:26:68:C9:72:F8:DA:D5:44:F4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EK36cN0aCXy0OH0maMly-NrVRPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:c6:bd:75:77:65:9e:3c:1b:8f:d3:15:60:14:3d:25:2b:
         9a:d8:12:28:70:32:49:3d:c8:4c:fa:9d:4e:40:7a:48:78:0f:
         a3:31:9f:9b:6c:7b:3a:76:54:3a:69:43:f2:00:eb:fd:7d:99:
         f3:04:4f:5d:0f:58:3d:6d:a4:a2:0d:80:ec:55:34:57:b5:e8:
         76:14:30:e2:59:db:8f:bc:ac:cd:23:57:0e:f8:a1:6c:5d:06:
         4e:ac:63:c8:82:e1:ba:5a:c9:1c:b6:bf:ca:9c:46:2e:6f:8b:
         e6:f6:0b:d1:22:14:e3:7d:21:e8:1c:e8:14:2a:46:95:05:66:
         ac:69:ab:6e:39:8b:48:2b:75:7a:44:4c:78:e4:ca:0e:c7:49:
         65:9b:89:0e:c2:88:d9:39:aa:9b:26:95:ee:bf:54:fd:64:ff:
         c9:05:00:79:5e:72:3b:72:05:67:42:ad:04:40:61:83:7e:86:
         80:c0:24:b5:8d:79:da:a6:e7:cb:88:5c:41:8c:1c:aa:f4:40:
         ee:90:7d:57:93:79:20:a9:82:22:0c:3c:6d:5e:37:0a:78:21:
         e1:0a:28:97:31:d4:5d:01:fa:c9:19:9a:75:96:11:2a:8b:ed:
         86:6c:6b:1d:6c:06:1f:56:8e:46:ba:21:28:7f:15:9a:00:27:
         be:b6:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net