Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OrJ_TjuBlyf-DMuCqXjhuyeLoRw.roa
File:                     OrJ_TjuBlyf-DMuCqXjhuyeLoRw.roa (raw, json)
Hash identifier:          V5ohAK0SU/uFN/Fbl/W4vfaGVFSvrrpZYDgiZmDOHEQ=
Subject key identifier:   3A:B2:7F:4E:3B:81:97:27:FE:0C:CB:82:A9:78:E1:BB:27:8B:A1:1C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       041F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OrJ_TjuBlyf-DMuCqXjhuyeLoRw.roa
Signing time:             Tue 01 Apr 2025 01:35:36 +0000
ROA not before:           Tue 01 Apr 2025 01:35:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3AB27F4E3B819727FE0CCB82A978E1BB278BA11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:0b:28:66:94:07:2f:bf:0a:37:31:d1:dd:
                    f0:0f:66:fe:b3:3d:1b:ca:97:e0:68:b4:1b:c4:f1:
                    06:06:35:0c:72:2f:94:0f:84:62:f0:dc:52:a8:16:
                    8b:79:86:62:dc:2a:c5:49:78:78:da:fd:70:5f:a1:
                    8a:01:d3:c2:63:9d:c3:e0:9f:3c:b1:90:64:ff:95:
                    94:b9:7c:35:91:76:76:8f:88:be:49:66:d7:5e:b1:
                    d8:c4:a7:9f:94:68:2d:19:1a:1c:6e:43:90:cb:89:
                    be:ec:37:2c:83:63:3b:b8:1e:82:25:0a:9e:ca:79:
                    e0:41:61:bb:d7:b6:6a:ee:8b:19:35:cb:48:7e:fa:
                    98:45:49:1e:cf:ca:9a:d8:97:78:0a:68:5a:a6:f3:
                    6d:38:08:34:59:fd:80:91:bd:4a:da:4f:f9:98:35:
                    13:c4:8b:46:a1:27:e8:d4:c7:cb:50:67:76:20:20:
                    c9:2e:c5:06:b7:9b:59:71:11:08:2d:c4:d7:33:07:
                    63:6b:35:2d:77:70:96:b3:24:32:8e:3a:c7:06:70:
                    27:b9:d0:03:a0:fe:c7:2b:da:53:70:ec:8c:ce:07:
                    38:e0:4e:1a:74:e6:47:f3:42:2e:e6:cc:c0:2c:25:
                    50:b4:ff:a3:16:50:ab:e9:fe:bc:6c:14:23:db:75:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:7F:4E:3B:81:97:27:FE:0C:CB:82:A9:78:E1:BB:27:8B:A1:1C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OrJ_TjuBlyf-DMuCqXjhuyeLoRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:50:c7:d7:ac:88:65:36:59:ae:35:17:fe:7a:7c:d9:78:
         7b:b4:17:17:78:f3:b4:b3:c8:64:7d:04:59:15:0c:f3:b6:6e:
         25:7e:ec:9d:17:9c:46:07:1b:14:47:a6:e9:ee:c5:29:e1:05:
         6a:89:b3:37:e4:48:00:4e:42:1d:ed:c6:fb:8b:bc:47:c4:5f:
         83:db:64:50:f7:86:94:23:b3:7a:77:59:d3:d5:c6:d3:c9:a0:
         d7:8c:12:81:bf:4b:ec:c9:f0:e3:1a:ad:ed:05:c3:57:31:30:
         92:93:69:b3:69:d8:05:0d:f2:d4:7c:71:4e:bf:2f:70:e9:0e:
         ea:29:ec:9d:8e:1f:af:5e:ff:16:58:6b:3c:73:68:63:6d:42:
         bb:30:c1:d8:1e:6d:07:e6:49:ba:e6:67:e2:82:24:86:c3:b2:
         b7:b6:1e:7d:fc:ff:96:a9:2b:de:1e:72:06:f8:3d:7b:b1:23:
         fd:99:f8:d0:ed:3e:d4:2f:0f:b2:87:0a:98:8c:9a:c1:b8:bd:
         3f:87:91:a8:0e:fd:5b:15:e7:98:bc:e5:e9:d3:d6:85:f6:82:
         a4:c4:1b:c3:b2:50:d9:49:2a:a7:a6:7e:14:ec:84:7f:0e:b1:
         95:64:bf:45:4f:23:3e:08:5f:e6:aa:5d:50:3f:68:6d:6e:91:
         9d:d4:ba:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNBQjI3RjRFM0I4MTk3
MjdGRTBDQ0I4MkE5NzhFMUJCMjc4QkExMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiGQsoZpQHL78KNzHR3fAPZv6zPRvKl+BotBvE8QYGNQxyL5QP
hGLw3FKoFot5hmLcKsVJeHja/XBfoYoB08JjncPgnzyxkGT/lZS5fDWRdnaPiL5J
ZtdesdjEp5+UaC0ZGhxuQ5DLib7sNyyDYzu4HoIlCp7KeeBBYbvXtmruixk1y0h+
+phFSR7PyprYl3gKaFqm8204CDRZ/YCRvUraT/mYNRPEi0ahJ+jUx8tQZ3YgIMku
xQa3m1lxEQgtxNczB2NrNS13cJazJDKOOscGcCe50AOg/scr2lNw7IzOBzjgThp0
5kfzQi7mzMAsJVC0/6MWUKvp/rxsFCPbdXcpAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUOrJ/TjuBlyf+DMuCqXjhuyeLoRwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9PckpfVGp1Qmx5Zi1ETXVDcVhqaHV5ZUxvUncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAawwwDQYJKoZIhvcNAQELBQADggEBAAvOUMfXrIhlNlmuNRf+
enzZeHu0Fxd487SzyGR9BFkVDPO2biV+7J0XnEYHGxRHpunuxSnhBWqJszfkSABO
Qh3txvuLvEfEX4PbZFD3hpQjs3p3WdPVxtPJoNeMEoG/S+zJ8OMare0Fw1cxMJKT
abNp2AUN8tR8cU6/L3DpDuop7J2OH69e/xZYazxzaGNtQrswwdgebQfmSbrmZ+KC
JIbDsre2Hn38/5apK94ecgb4PXuxI/2Z+NDtPtQvD7KHCpiMmsG4vT+HkagO/VsV
55i85enT1oX2gqTEG8OyUNlJKqemfhTshH8OsZVkv0VPIz4IX+aqXVA/aG1ukZ3U
ul8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:25 2025 by rpki-client on console.sobornost.net