Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M2fcq2hBjV-3A2Y2rgHuQe_SY4k.roa
File:                     M2fcq2hBjV-3A2Y2rgHuQe_SY4k.roa (raw, json)
Hash identifier:          AOT8n+YbW6AGXRMFQiYMbeuLDcf/8k3X5Kt51j1zfvs=
Subject key identifier:   33:67:DC:AB:68:41:8D:5F:B7:03:66:36:AE:01:EE:41:EF:D2:63:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0467
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M2fcq2hBjV-3A2Y2rgHuQe_SY4k.roa
Signing time:             Tue 01 Apr 2025 01:42:31 +0000
ROA not before:           Tue 01 Apr 2025 01:42:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3367DCAB68418D5FB7036636AE01EE41EFD26389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:61:d2:10:87:ae:0c:69:8f:b8:06:12:78:
                    a4:68:73:a9:2d:e3:54:d0:e6:11:de:a8:79:eb:84:
                    13:6b:89:6f:4c:f9:04:5b:e1:85:1d:94:de:6d:64:
                    47:bf:ce:d0:b9:f4:d1:df:a0:05:7b:75:53:db:34:
                    89:b2:fc:5c:f9:43:8c:54:5f:9e:e8:4a:2f:a0:31:
                    c9:70:2b:47:66:09:7b:9e:27:dd:66:bd:a5:2c:e1:
                    d8:6e:12:0c:cd:0e:42:ee:8a:83:cf:d7:b0:c4:d6:
                    b5:a2:67:7c:6f:e1:57:e9:f2:21:35:43:db:f2:d9:
                    e2:4e:78:cf:90:b9:42:ff:03:2f:9a:ae:84:b9:c9:
                    45:f1:21:66:d0:c8:84:f2:70:15:6c:61:3a:32:51:
                    63:54:14:80:37:11:f5:d3:7f:ef:30:aa:3a:65:0f:
                    cd:53:64:60:13:d2:2e:15:8e:8f:7d:f1:7a:9c:10:
                    1b:aa:46:9c:84:0f:96:af:41:11:28:2d:92:ad:ff:
                    03:c1:c8:ff:4a:99:c8:5a:c8:a4:f6:bb:5b:ab:69:
                    ba:a8:4c:35:0a:3a:a6:f4:69:2c:ed:da:3a:98:2a:
                    d7:d5:d9:0e:d6:8a:83:98:b7:91:26:33:2b:c4:1f:
                    89:a0:56:9e:9a:08:8a:39:41:cf:4b:b4:5b:54:90:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:67:DC:AB:68:41:8D:5F:B7:03:66:36:AE:01:EE:41:EF:D2:63:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M2fcq2hBjV-3A2Y2rgHuQe_SY4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:0a:a5:e5:f2:54:8c:54:68:42:3c:30:93:65:48:31:77:
         22:92:9f:9c:38:39:fe:4f:6d:64:85:64:05:17:ac:4d:aa:00:
         83:a0:97:a0:c1:9a:40:c6:04:27:fe:80:99:e2:29:f8:ec:0c:
         7f:3c:d4:e8:4d:7d:56:95:4f:4f:46:b3:dd:05:56:16:96:e6:
         5f:65:74:ba:13:49:8c:fd:45:a0:70:4a:9e:29:b4:ed:e5:63:
         31:8b:55:bc:8e:92:cb:a4:a0:83:55:b2:3e:65:b5:d1:3c:f4:
         21:1b:ad:10:1b:93:1b:5b:33:bd:21:c4:d0:4b:43:fc:5c:e0:
         08:fa:c2:42:04:15:f0:b1:4a:ae:5c:37:95:ec:40:6e:12:42:
         66:5e:22:df:09:db:44:32:e3:2b:e3:98:4e:c1:4a:38:35:d0:
         e6:61:b5:79:44:4b:2e:73:a6:42:4a:02:50:7f:53:b8:7d:c0:
         89:17:a9:e5:0a:f3:96:98:ec:03:ec:ee:66:25:7c:32:d2:58:
         b8:c4:46:60:b6:1a:1b:82:78:9f:e2:ca:c3:74:b4:5c:d9:82:
         e2:ee:31:a2:30:b0:a6:cf:ea:8d:1b:08:d1:ac:44:b6:65:c4:
         84:4f:ba:cf:f3:68:99:8a:b9:7d:7f:b8:68:19:74:51:4e:10:
         62:b1:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net