Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wo-R0vnJVdcID_lTOHvCsDmeU_E.roa
File:                     Wo-R0vnJVdcID_lTOHvCsDmeU_E.roa (raw, json)
Hash identifier:          yhduDQL60kTGKtrd6nF1NKanEsssusidRH5XjacNb80=
Subject key identifier:   5A:8F:91:D2:F9:C9:55:D7:08:0F:F9:53:38:7B:C2:B0:39:9E:53:F1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       048B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wo-R0vnJVdcID_lTOHvCsDmeU_E.roa
Signing time:             Tue 01 Apr 2025 01:45:42 +0000
ROA not before:           Tue 01 Apr 2025 01:45:42 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:8500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:42 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=5A8F91D2F9C955D7080FF953387BC2B0399E53F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:49:eb:64:d5:94:a7:fd:fc:b7:e1:66:67:
                    53:e6:4e:b6:55:45:32:1b:14:ff:35:c3:1b:90:b3:
                    fa:01:fe:52:4d:9a:c9:8c:9c:05:45:95:33:aa:9d:
                    37:f0:23:8b:0c:8d:25:ac:7d:36:73:e1:0b:49:8d:
                    3a:07:52:ae:76:b2:da:79:17:b9:07:78:77:7e:22:
                    93:42:56:98:2b:f3:8f:6c:0e:bf:ff:83:a5:d8:29:
                    06:71:0f:f1:f3:3e:77:74:e2:cb:7a:68:9b:e0:f3:
                    87:a0:83:4c:8f:1c:e0:03:7a:8e:40:6e:52:c8:d3:
                    1e:be:dd:cb:f9:bd:2a:3e:79:af:20:ed:0e:77:48:
                    17:b4:ae:33:b2:fd:54:5a:ca:8e:ec:56:7f:e9:79:
                    63:d4:b1:7b:5b:5f:8e:06:8f:54:11:18:fc:26:23:
                    52:1b:ba:a2:53:f9:ae:0b:eb:fb:19:84:a6:81:31:
                    c5:1e:9c:c8:a3:13:d3:25:f9:37:f3:67:71:33:c4:
                    0b:16:37:de:4e:c5:32:4b:68:90:fe:aa:f3:0c:36:
                    b6:3f:74:36:82:18:4a:5e:66:cf:f1:07:6c:af:a0:
                    f1:12:ef:3a:5f:13:bc:ca:fe:6a:be:17:4b:25:35:
                    91:06:3f:98:dc:e1:d5:a1:e7:ab:d2:d7:bc:bd:19:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8F:91:D2:F9:C9:55:D7:08:0F:F9:53:38:7B:C2:B0:39:9E:53:F1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wo-R0vnJVdcID_lTOHvCsDmeU_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:62:d4:11:79:83:c7:92:30:76:e9:51:19:48:4f:5a:86:91:
         6b:17:61:52:72:74:dd:28:8e:61:2c:c4:51:e5:45:21:fc:c4:
         f4:16:ca:17:78:1f:bc:ae:b9:24:5e:36:e4:2d:23:ee:93:2b:
         d7:cf:bc:91:6b:4b:3c:bf:7e:53:0a:6c:cd:34:cb:e2:0c:ac:
         25:3b:c5:02:23:d9:29:2f:88:3c:0a:2e:8d:ca:ea:59:04:94:
         98:e3:76:2b:3c:f6:60:9d:28:ad:eb:74:94:3d:af:82:a2:d2:
         94:c5:25:4b:1d:b2:32:11:5f:ca:55:0a:11:08:64:ab:e5:de:
         f5:e4:7a:fd:65:ff:02:e8:9e:e4:cc:54:13:45:36:f5:9a:1a:
         6f:32:3e:bd:bf:9b:35:c1:c4:4e:7e:f3:32:18:b1:2c:62:36:
         5d:67:e3:2b:b2:3d:e4:13:06:11:c8:f0:f7:82:d0:52:aa:95:
         fa:2b:b8:b0:00:2f:d8:ca:64:e4:9a:12:cc:20:d5:c6:3a:44:
         7c:5f:fc:85:f1:fd:5f:e0:4b:bb:db:f4:e0:21:83:61:1e:9d:
         46:89:1d:98:06:3d:5f:46:f6:96:de:2b:b4:24:3c:c0:b0:50:
         57:8d:03:e5:8a:a8:d5:5f:de:6e:58:7f:ad:41:be:82:df:d1:
         87:9f:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:26 2025 by rpki-client on console.sobornost.net