Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MsOz5wKQ_f1Y2yj7V-ojc-VfZY8.roa
File:                     MsOz5wKQ_f1Y2yj7V-ojc-VfZY8.roa (raw, json)
Hash identifier:          8TqK2vrCdbGdcEyg0BOCZefBcVTe5hEKk6CWK+RsNhg=
Subject key identifier:   32:C3:B3:E7:02:90:FD:FD:58:DB:28:FB:57:EA:23:73:E5:5F:65:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04A1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MsOz5wKQ_f1Y2yj7V-ojc-VfZY8.roa
Signing time:             Tue 01 Apr 2025 01:49:23 +0000
ROA not before:           Tue 01 Apr 2025 01:49:23 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:4900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:23 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=32C3B3E70290FDFD58DB28FB57EA2373E55F658F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:ce:03:45:a1:cc:4b:7d:c1:49:fe:bf:66:
                    f0:91:0b:6e:89:13:7c:76:cc:ef:1b:03:0b:07:d0:
                    2d:3e:a0:df:53:8f:dc:56:5a:93:e5:08:09:2e:fd:
                    89:d6:73:9c:00:43:18:9f:c3:11:45:d8:04:7f:cb:
                    d1:10:23:33:4c:e7:1b:ce:9a:d5:c7:ed:c3:8f:08:
                    9c:06:fc:2b:14:10:58:11:e3:ea:cc:70:c4:ea:d4:
                    ac:57:fb:6b:3d:5d:52:63:f0:b8:4f:d4:fb:d3:4f:
                    24:7b:88:0e:7d:8a:de:5b:5c:c1:44:93:11:59:c4:
                    38:de:71:96:f4:a3:b3:36:45:3d:9d:dd:6c:02:fd:
                    12:ed:21:8d:1b:5b:a3:80:e1:af:36:2a:cf:17:c8:
                    bf:10:13:76:fc:a6:c2:7e:98:0b:9a:2f:10:0a:da:
                    d6:39:39:9b:1f:e8:d2:c7:51:fe:f4:40:63:d4:8a:
                    d5:73:ce:4d:ac:92:39:db:90:3f:5a:9f:5a:a9:3a:
                    08:9d:ca:77:40:86:b1:1a:89:14:3f:60:cc:e1:22:
                    b8:77:a2:8b:29:6e:55:cb:3f:68:2c:d9:65:2a:97:
                    2b:62:65:b8:64:0c:4e:c8:54:7c:43:ce:ff:69:f7:
                    9e:54:f9:10:b2:3f:d1:a3:61:07:17:3d:99:03:86:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C3:B3:E7:02:90:FD:FD:58:DB:28:FB:57:EA:23:73:E5:5F:65:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MsOz5wKQ_f1Y2yj7V-ojc-VfZY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:7c:f2:3b:fc:40:e5:95:4e:cf:12:b9:e4:28:9e:0f:a7:
         48:a9:1b:d8:d6:e4:26:d7:be:6b:b1:9a:a9:34:98:51:7e:3a:
         e6:d6:72:9d:89:cf:af:3b:6c:14:5b:46:50:ea:c1:83:20:47:
         29:5d:af:85:04:9e:96:51:62:99:50:aa:fc:98:9a:5d:19:b9:
         ee:f4:f1:ec:54:8d:df:da:6a:e8:ce:34:94:59:ef:d2:19:f4:
         17:14:03:48:96:a4:17:69:32:99:0e:9b:46:7a:c0:2b:66:8f:
         bf:0f:8d:64:11:dd:08:8a:30:0e:28:54:2e:ff:50:47:93:7a:
         60:64:5d:0f:15:fd:bc:26:46:28:c7:c3:f0:69:88:38:8c:9b:
         09:38:b3:d9:60:70:f1:71:a1:90:8a:2a:8b:a2:70:f4:f1:35:
         e4:fb:c4:09:fe:7c:85:a3:a1:39:9d:33:9f:8d:e7:bc:60:ac:
         31:84:e3:26:80:a4:ae:86:56:97:ed:11:6c:d2:77:9e:76:d9:
         b2:74:36:8c:cb:4d:b2:df:44:db:eb:4a:0b:62:1d:3b:4f:4a:
         4b:ef:76:64:a1:b3:5d:1c:a0:61:67:9e:31:88:4f:03:5c:5b:
         1d:d3:9a:b6:c3:fc:6d:9d:e1:2c:19:3d:dc:fb:68:b7:0e:32:
         ff:94:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net