Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I0YA71_y91gr235lDfH7ir-xV8k.roa
File:                     I0YA71_y91gr235lDfH7ir-xV8k.roa (raw, json)
Hash identifier:          Wki6wx5mj5NU75MBnKB+dmEzIwQrmHOYD116M93CGsQ=
Subject key identifier:   23:46:00:EF:5F:F2:F7:58:2B:DB:7E:65:0D:F1:FB:8A:BF:B1:57:C9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0498
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I0YA71_y91gr235lDfH7ir-xV8k.roa
Signing time:             Tue 01 Apr 2025 01:49:18 +0000
ROA not before:           Tue 01 Apr 2025 01:49:18 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:18 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=234600EF5FF2F7582BDB7E650DF1FB8ABFB157C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:84:29:37:47:a6:ad:68:e6:71:fc:c4:f5:
                    e5:8d:ff:cb:84:d7:51:be:cd:fd:f8:ec:7d:31:7d:
                    a7:4b:be:58:e0:a1:84:7c:84:b6:c7:98:17:99:4c:
                    38:cd:37:63:cc:2c:fb:2f:18:a8:66:d8:d6:61:ec:
                    f3:de:bb:50:98:8c:91:d7:b4:c4:a5:7d:f5:e6:ef:
                    73:18:93:f8:d8:d6:43:d5:4f:0c:78:3f:19:55:40:
                    0f:4e:06:06:d8:41:fa:92:b0:15:54:5f:fb:79:44:
                    d1:23:2c:c7:83:b5:7e:a9:c2:08:59:d1:96:50:36:
                    0c:e6:6b:9a:f6:06:aa:67:bb:86:e1:54:62:97:82:
                    5e:dd:1d:35:97:ac:ae:73:7d:07:9c:34:c6:98:30:
                    f7:c6:63:8e:87:d4:f2:48:2c:a2:63:a2:df:35:4d:
                    67:de:c2:94:9b:10:2e:20:da:99:34:7a:85:dd:cf:
                    de:9f:f4:8c:01:6f:7c:cd:16:ea:83:1b:f7:3f:8d:
                    35:05:91:6b:ee:a0:b2:ff:77:a4:60:61:bc:d3:22:
                    05:4a:80:92:a9:e2:10:df:52:7e:ee:10:0d:81:85:
                    e7:2b:3d:a6:02:c4:ff:c5:46:05:0f:77:0e:99:74:
                    d5:60:e7:67:17:ea:52:fd:d5:a9:43:e0:95:fb:1e:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:00:EF:5F:F2:F7:58:2B:DB:7E:65:0D:F1:FB:8A:BF:B1:57:C9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I0YA71_y91gr235lDfH7ir-xV8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:04:b4:60:44:fb:47:96:42:80:43:15:86:5d:3e:98:9c:
         f2:37:26:99:e6:7c:e9:bb:0d:69:5a:c4:26:a2:89:ea:fe:0d:
         21:ca:d7:2f:4d:7c:1c:66:f0:02:52:3d:cf:46:63:19:3e:0f:
         b5:5b:e6:56:6e:b9:12:46:9f:6b:ef:d2:0d:a7:b8:69:4c:b2:
         6c:25:0a:64:0d:06:61:b9:cf:4d:76:9c:af:30:0d:73:33:1e:
         59:32:86:88:8b:3a:b4:23:fb:cd:5d:a2:f3:66:ab:cc:d6:c9:
         89:45:6b:84:8f:48:42:80:c6:6a:0d:58:5a:69:d0:08:40:4a:
         61:3b:16:38:e7:1f:85:18:a2:63:4d:98:ea:89:b9:17:fd:57:
         92:89:cf:7b:e5:9b:9f:31:b2:23:4d:f5:3f:47:f6:5c:ae:7f:
         5b:ff:0b:4a:4d:98:fc:ad:20:91:41:e4:88:3d:04:f5:b7:27:
         6e:7f:c7:34:d8:3e:6c:5b:a4:08:09:c8:e8:31:aa:32:dd:49:
         24:54:03:10:34:af:e5:32:70:c2:51:81:24:11:d8:c8:55:0d:
         f5:b0:fc:64:41:b6:17:d9:31:89:42:35:05:c9:1f:4b:11:5c:
         51:d6:5f:02:45:4e:15:a2:b7:e9:8a:1d:04:20:dc:38:cd:fe:
         2a:63:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net