Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wi2G3ijTU-rM2LThPUnipQ4oE_A.roa
File:                     Wi2G3ijTU-rM2LThPUnipQ4oE_A.roa (raw, json)
Hash identifier:          tcdJzeR+3YB1tFQjcBMgaw3NwXQuqdHNCHotXWogUx8=
Subject key identifier:   5A:2D:86:DE:28:D3:53:EA:CC:D8:B4:E1:3D:49:E2:A5:0E:28:13:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       040F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wi2G3ijTU-rM2LThPUnipQ4oE_A.roa
Signing time:             Tue 01 Apr 2025 01:35:30 +0000
ROA not before:           Tue 01 Apr 2025 01:35:30 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f01c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:30 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=5A2D86DE28D353EACCD8B4E13D49E2A50E2813F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:dc:c6:88:74:58:b0:0b:2e:aa:8d:3b:2c:
                    ec:df:c9:72:a5:7d:e2:ba:3e:22:00:d1:37:44:fc:
                    39:d5:9d:17:f6:f2:06:31:e0:d2:9d:1d:82:be:44:
                    0b:d0:fe:28:8c:38:f4:b1:76:82:71:b4:29:64:56:
                    b2:aa:2d:76:1b:d9:5c:12:77:fa:d6:f3:92:b2:d5:
                    fc:8c:eb:48:3f:7b:33:79:d9:1f:8a:95:46:82:7b:
                    00:24:6c:4a:08:c4:e9:fc:b5:92:14:90:42:67:d5:
                    e5:d7:1b:13:bf:8b:a8:f4:2b:eb:c3:c8:65:4b:54:
                    e1:e0:ad:7e:a7:55:04:29:3f:e2:8d:d3:2c:db:72:
                    43:fa:86:a0:8b:03:f7:cc:db:27:26:20:d7:f2:52:
                    e6:5b:5d:e4:20:56:6f:c2:3c:9f:ca:b9:02:02:7c:
                    cd:69:86:d6:fd:72:f6:2d:e6:2f:b6:b9:18:13:ee:
                    a4:83:b1:df:74:de:bd:b1:d3:fb:93:5d:11:71:df:
                    95:63:ef:e6:e0:fa:c7:d6:f6:e8:93:25:cd:60:95:
                    42:56:2a:8e:37:0f:ee:e5:54:dd:1a:68:b4:b2:ed:
                    e7:00:7c:0f:51:be:fc:d6:b1:92:02:c5:e3:9a:79:
                    0c:2a:63:ad:2b:7d:bb:08:c1:2e:6a:3d:67:e6:47:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2D:86:DE:28:D3:53:EA:CC:D8:B4:E1:3D:49:E2:A5:0E:28:13:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wi2G3ijTU-rM2LThPUnipQ4oE_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:56:d9:4e:f1:7b:ef:b3:e2:fc:19:79:52:8c:6b:28:65:df:
         07:04:7a:b5:7e:28:bc:2b:ab:dd:cd:30:a9:86:fa:bf:4d:26:
         2f:84:e6:b6:f6:96:02:40:72:ba:ff:8e:2d:d2:af:7e:ed:4f:
         d8:92:13:7a:ed:9c:0d:13:e6:7f:d8:ff:f2:13:fa:dc:86:83:
         e9:35:49:72:20:84:05:2e:72:1e:4c:6b:a5:c3:10:a0:62:ca:
         e6:c7:4d:3c:e7:26:99:42:dd:1a:7e:15:49:d4:35:db:12:c8:
         f1:24:88:80:07:73:a0:66:cb:69:a4:78:6f:ec:a2:4d:b4:f2:
         6d:61:6a:f7:20:94:c6:b7:d5:68:1a:99:f8:e3:29:c9:37:1d:
         e0:d8:17:4f:f2:39:54:ab:22:33:d6:f1:b7:e1:dc:d5:6d:98:
         0d:59:cc:2b:32:99:8c:a9:8d:b3:ea:8a:e9:d4:7d:9a:bd:96:
         31:59:1e:9d:c1:d1:91:ff:9e:08:7f:8f:5c:bc:1e:66:da:66:
         ed:2e:ac:7b:e6:48:2d:01:22:a8:41:dd:3e:86:8d:38:c9:5b:
         d7:53:d5:28:36:1b:c4:b7:99:fc:35:49:5c:24:b0:d3:a5:3f:
         e7:b9:25:bf:7c:e0:d7:e6:6c:a2:8e:60:30:54:0d:ae:60:97:
         ae:df:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:26 2025 by rpki-client on console.sobornost.net