Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y4puTMZcp1eg2U2p38_eOEuNcnc.roa
File:                     Y4puTMZcp1eg2U2p38_eOEuNcnc.roa (raw, json)
Hash identifier:          amgUepOeFvfdoNrymt+iWoc4NTw0JCvnRS/ySEHoSfw=
Subject key identifier:   63:8A:6E:4C:C6:5C:A7:57:A0:D9:4D:A9:DF:CF:DE:38:4B:8D:72:77
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y4puTMZcp1eg2U2p38_eOEuNcnc.roa
Signing time:             Tue 01 Apr 2025 01:52:53 +0000
ROA not before:           Tue 01 Apr 2025 01:52:53 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=638A6E4CC65CA757A0D94DA9DFCFDE384B8D7277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:0b:a9:d9:43:39:b2:11:55:37:0a:9d:c9:
                    6e:4f:bb:6b:03:f5:5f:42:76:89:3d:fc:e9:a8:58:
                    6e:d3:c7:ba:6d:9d:36:d1:76:b0:7f:4f:34:e5:46:
                    61:c4:cc:2e:5c:8c:0d:64:dd:2e:f0:26:2a:9c:fe:
                    2c:b8:6b:c4:c8:e1:df:af:a9:c6:3d:aa:fa:8c:51:
                    ef:9f:cd:dc:c1:8e:1c:61:01:47:92:c7:a2:a5:46:
                    f7:e8:49:3b:65:73:ef:b9:b8:a3:98:49:2a:45:c6:
                    6f:5a:50:1a:43:e5:eb:a9:5a:8e:76:b9:4c:91:ce:
                    fe:5e:b0:37:a0:85:9e:e0:b5:c3:28:24:bc:79:29:
                    7e:e5:76:cd:4e:0a:01:df:3b:62:00:91:09:8f:f8:
                    05:dc:81:51:8a:5b:66:1c:5e:7c:28:a4:2a:c7:7e:
                    26:45:f6:33:c9:9a:73:02:14:81:5c:b2:21:ca:62:
                    f4:15:3b:d8:a8:58:68:66:39:cd:9c:11:ac:77:08:
                    4a:0e:3c:fa:53:59:e8:cf:b6:23:a0:ec:0e:5a:2c:
                    3a:47:1f:b0:80:97:38:94:1f:11:3d:7e:f3:4d:dc:
                    da:86:1e:d0:f8:b8:37:5c:da:84:b6:e1:15:6b:4f:
                    7c:50:1f:9b:b0:72:d9:f8:01:a3:c0:9f:03:10:83:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:6E:4C:C6:5C:A7:57:A0:D9:4D:A9:DF:CF:DE:38:4B:8D:72:77
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y4puTMZcp1eg2U2p38_eOEuNcnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:97:3e:f6:47:f5:0b:ea:cc:7d:e9:8b:f8:db:5b:0f:06:16:
         92:a7:7a:13:be:8f:26:5c:3c:5b:e4:e6:89:03:79:ec:ec:10:
         a4:b3:bd:af:0a:d7:25:fd:6a:76:81:2f:b5:af:48:da:17:9a:
         ee:d9:ca:39:dc:c4:49:70:05:e2:9f:9a:36:11:7e:91:05:3a:
         ad:3b:fa:e0:e4:47:10:41:1b:35:7c:e8:50:b8:c9:2f:45:9c:
         e1:c5:4c:eb:06:2c:92:48:fa:ba:47:37:01:5d:ab:43:6b:cd:
         d5:be:17:88:5f:f9:f6:12:06:f9:f4:a6:d6:fe:f5:c0:63:73:
         de:9d:2a:bf:f9:70:4d:80:fc:ab:17:58:8f:69:c3:fb:05:1c:
         79:43:38:7e:9f:cd:f1:2b:c6:58:fb:d9:34:19:37:23:d7:e8:
         c0:75:2e:3b:ef:7c:dd:19:e7:2d:b9:e4:ec:e4:3f:a1:68:80:
         1a:b2:5a:ac:3a:be:86:af:7b:b5:76:78:72:fe:ae:f4:43:78:
         64:9a:ef:ea:fc:18:51:4b:34:00:4b:00:0b:45:37:a2:eb:5e:
         e0:90:53:01:ea:34:25:dc:fd:97:c0:36:9e:63:33:83:d4:68:
         0d:49:18:ed:35:db:b8:73:43:ad:9d:20:87:8b:88:0a:2f:c8:
         f5:4f:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net