Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RQvdJbI2JBXW-LRNmz4m8UlzQhQ.roa
File:                     RQvdJbI2JBXW-LRNmz4m8UlzQhQ.roa (raw, json)
Hash identifier:          ivoy5wkDrJOWZ/cVGuQuN346Ul4J/cmAEt8ziMfYyCQ=
Subject key identifier:   45:0B:DD:25:B2:36:24:15:D6:F8:B4:4D:9B:3E:26:F1:49:73:42:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0493
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RQvdJbI2JBXW-LRNmz4m8UlzQhQ.roa
Signing time:             Tue 01 Apr 2025 01:45:45 +0000
ROA not before:           Tue 01 Apr 2025 01:45:45 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:45 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=450BDD25B2362415D6F8B44D9B3E26F149734214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:b3:0b:65:a9:be:3e:67:4c:e9:5e:f3:03:
                    ce:e2:2c:ca:81:c2:07:f4:2a:64:c7:43:8e:35:f9:
                    e6:9e:13:ed:61:e7:db:f3:6a:c8:2b:66:65:76:5d:
                    94:88:ac:05:e8:d3:f7:eb:7c:13:c9:49:ed:80:2f:
                    45:90:75:12:b2:63:55:b8:11:9c:eb:f5:c5:fe:28:
                    e6:25:75:c8:8e:6d:6a:8a:03:78:9f:2d:8a:aa:fd:
                    81:c5:f2:f3:ce:d0:ef:c5:9e:12:83:a6:01:81:eb:
                    cc:4b:15:84:53:6e:70:f6:57:8e:2b:ec:2b:1c:53:
                    80:ad:ba:c2:f2:15:08:83:e2:58:d1:54:a9:47:d2:
                    12:82:0d:a0:e7:48:70:07:c8:55:5f:ee:bb:d2:be:
                    50:0e:40:cc:58:9e:35:71:b3:6c:8b:b0:c8:be:ec:
                    14:ef:7f:fd:8a:d3:f7:9e:97:83:d8:c1:73:70:66:
                    5b:16:b0:fe:e5:93:41:2f:bf:85:d5:cf:14:d3:47:
                    88:02:b9:c7:1a:7e:81:b5:cb:2b:d2:f7:10:14:7d:
                    26:f1:14:7b:ea:fe:8d:de:01:9e:7d:10:2c:57:c0:
                    5c:05:2d:e9:c1:eb:c4:90:57:a4:9a:66:bd:08:ef:
                    74:e2:a3:a9:df:5f:bd:b4:0d:e4:32:69:25:8d:d0:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:DD:25:B2:36:24:15:D6:F8:B4:4D:9B:3E:26:F1:49:73:42:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RQvdJbI2JBXW-LRNmz4m8UlzQhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:36:ba:8b:fa:f8:27:f1:cd:92:a7:fa:c1:03:c9:52:bc:61:
         1e:36:c7:a3:58:a1:5d:bc:ae:a7:9d:51:e8:66:ff:f3:d2:8e:
         b6:d5:2b:c8:70:ea:41:1e:9e:ed:93:93:8c:be:87:53:e6:b9:
         d5:4e:04:9d:12:26:96:a1:93:f2:33:e6:d3:d1:ba:b1:d2:88:
         89:64:45:f2:32:9a:a3:8c:0d:f3:49:26:e7:59:ae:11:6c:32:
         07:cd:86:50:33:0f:fe:c6:79:6e:f9:a6:fc:3f:18:ed:c4:a4:
         ca:fb:2e:16:fe:05:02:ae:18:59:2d:62:80:ea:7b:0e:b8:11:
         10:ec:3a:50:96:88:4e:b4:c5:63:20:e0:bd:09:74:8f:e1:99:
         ab:66:22:27:d1:e5:ac:83:40:f2:b5:6c:08:37:8d:56:c8:7e:
         61:81:ae:e7:f6:65:e8:e1:e5:f8:a4:67:42:ad:43:a5:4e:46:
         96:ae:73:dd:55:54:04:22:2a:97:02:be:21:19:ff:45:7c:61:
         2b:30:98:e2:c9:c3:95:2a:c1:9d:10:72:20:64:7d:a5:08:33:
         3a:7f:de:da:69:46:a7:45:1a:e2:08:97:f5:7a:cc:9e:3b:2b:
         b1:1a:8e:34:34:38:70:00:bf:c2:0e:f5:c6:d0:e2:20:d2:33:
         6b:f0:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:26 2025 by rpki-client on console.sobornost.net