Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EfIbFFV9eOlMfngXjh78G3v5VRw.roa
File:                     EfIbFFV9eOlMfngXjh78G3v5VRw.roa (raw, json)
Hash identifier:          YDxeOlcqHDLpNlFgYyF/9Oh1WsznbLxhLs2diRYjMao=
Subject key identifier:   11:F2:1B:14:55:7D:78:E9:4C:7E:78:17:8E:1E:FC:1B:7B:F9:55:1C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03E2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EfIbFFV9eOlMfngXjh78G3v5VRw.roa
Signing time:             Tue 01 Apr 2025 01:28:59 +0000
ROA not before:           Tue 01 Apr 2025 01:28:59 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=11F21B14557D78E94C7E78178E1EFC1B7BF9551C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:ee:e3:76:cb:e1:6c:b5:18:ea:cf:c0:a2:
                    94:b4:7e:31:7a:44:42:06:d2:bc:4b:c4:b7:72:63:
                    dc:22:49:f9:f2:57:3b:52:14:4f:c9:f6:de:44:68:
                    ed:75:91:e9:11:6a:08:6b:af:fe:6b:de:2b:e2:a6:
                    63:f4:1a:61:2f:0d:8f:1b:08:ce:96:f2:31:b0:74:
                    78:cd:1a:76:85:b7:90:e8:da:94:fc:01:67:1e:26:
                    9b:c3:b4:93:49:5e:b0:82:76:bb:fe:a9:98:68:a4:
                    f6:12:95:ab:ce:8c:a1:7f:91:3a:5c:7a:c0:61:7a:
                    5e:21:3e:fc:73:61:62:21:a5:fc:60:85:92:57:b6:
                    1d:b7:23:2b:8a:98:ff:9d:46:3e:ea:26:0a:a9:0e:
                    78:c1:a4:6d:72:bb:f7:43:90:2f:d8:e4:b1:96:27:
                    e7:a8:89:61:b0:64:00:09:75:57:b8:26:55:62:a3:
                    23:60:11:ba:0f:46:ba:f6:15:1c:1e:dd:3f:c0:33:
                    87:7d:fe:3c:d1:0a:cb:78:75:b9:05:91:76:55:a5:
                    46:d2:c4:24:21:4f:d5:40:4b:4a:26:74:30:2c:72:
                    82:92:b0:82:34:0c:3f:ba:09:67:70:9a:b7:e2:b1:
                    19:4f:68:0a:4b:7a:11:f7:5c:8e:80:08:26:32:2c:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:1B:14:55:7D:78:E9:4C:7E:78:17:8E:1E:FC:1B:7B:F9:55:1C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EfIbFFV9eOlMfngXjh78G3v5VRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:b2:db:de:c7:6e:a9:c4:05:40:39:d2:15:1d:9b:24:ef:4c:
         c7:d5:5e:6f:32:4c:61:48:f8:c6:7a:0a:d7:ae:32:e3:dd:96:
         dc:23:bd:18:09:6a:4b:29:3a:40:b4:21:83:75:5c:d6:5d:55:
         8e:c8:04:8f:d7:54:c2:60:f6:2a:61:7b:3b:43:b0:1a:e2:87:
         8d:87:04:85:60:f3:6c:7f:ad:8a:9a:b7:5a:a7:7d:d9:20:8a:
         38:f0:05:43:4c:b5:67:41:ac:73:84:28:15:e5:ab:9a:b3:47:
         be:76:ae:cf:42:64:99:d6:32:d7:2a:b4:93:64:dd:7d:e9:17:
         39:f2:06:54:48:2d:36:a0:bb:c4:8c:74:c7:d9:1d:64:e8:2b:
         c5:dc:e9:3b:7f:77:f0:58:90:50:23:8a:61:61:be:1a:36:9a:
         24:0b:c7:81:80:70:c1:4c:de:39:36:7a:a8:9a:93:cb:17:69:
         01:ec:99:58:35:d6:9d:d7:d5:54:47:1e:47:83:48:94:99:3e:
         50:fb:78:ef:f4:26:89:69:78:30:ef:21:c1:3b:18:20:05:be:
         40:ea:e4:2a:fd:14:e0:54:fb:8e:d1:23:35:31:e1:57:f4:5a:
         4c:fd:6e:05:64:e1:4a:e3:90:60:2b:59:11:8d:7a:33:aa:c7:
         36:f9:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net