Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_gmfDh6ARqYO2qDltZKbAfr0nqE.roa
File:                     _gmfDh6ARqYO2qDltZKbAfr0nqE.roa (raw, json)
Hash identifier:          c1tr6jbdTW8+O21s2xbszNl/zlUmHnpa3ZF9HyCqOuI=
Subject key identifier:   FE:09:9F:0E:1E:80:46:A6:0E:DA:A0:E5:B5:92:9B:01:FA:F4:9E:A1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       041E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_gmfDh6ARqYO2qDltZKbAfr0nqE.roa
Signing time:             Tue 01 Apr 2025 01:35:36 +0000
ROA not before:           Tue 01 Apr 2025 01:35:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:2:ccc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FE099F0E1E8046A60EDAA0E5B5929B01FAF49EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:71:36:96:0d:02:dc:28:a4:04:91:07:5f:
                    8d:3c:b2:29:3b:ef:fa:bc:c8:47:2d:03:9b:34:c9:
                    41:54:14:71:39:5e:85:41:f5:24:94:90:e5:64:0d:
                    7f:db:f5:99:2b:e0:8e:4d:11:bc:14:51:42:65:b8:
                    ac:57:1d:bf:3f:6d:97:3a:10:6f:bb:e0:ad:7a:6a:
                    64:2a:bf:e1:af:ee:54:cf:6a:57:a5:7e:8a:11:04:
                    a6:c6:a5:5f:62:b8:87:08:77:61:54:01:c5:2e:53:
                    40:cc:1e:08:8e:c9:de:61:b4:bc:63:40:d6:aa:92:
                    56:12:0d:15:73:68:3f:e2:72:f1:e5:3f:4f:b8:3e:
                    88:e8:af:34:41:e3:59:2e:7f:ea:05:29:57:84:7a:
                    28:fa:6b:08:00:d4:fc:c6:c4:49:28:78:0b:4b:d4:
                    16:c5:8c:93:b4:9d:57:67:49:fc:4a:2d:1d:97:c9:
                    f7:58:b5:b0:15:70:3d:19:d9:b3:6e:81:90:59:70:
                    9a:f4:48:30:61:1a:de:70:b2:74:94:fb:db:a4:5f:
                    99:0a:0e:5e:37:95:c7:d1:15:0f:0d:09:a6:ff:c8:
                    c3:66:d1:90:cd:c3:a9:15:f5:ff:e3:b3:34:d9:da:
                    18:a4:5d:fe:c4:51:f2:a5:60:cf:03:d2:5f:2b:10:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:9F:0E:1E:80:46:A6:0E:DA:A0:E5:B5:92:9B:01:FA:F4:9E:A1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_gmfDh6ARqYO2qDltZKbAfr0nqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:ccc::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:77:3c:03:0c:6f:21:9c:20:ac:5f:e6:d1:e5:4b:82:57:1e:
         4f:d9:65:6f:c3:6b:a0:d2:66:a8:5d:d4:18:0a:62:19:9d:a3:
         c2:ce:1e:49:9e:77:ff:fb:2c:0b:38:cb:f1:f2:9c:c5:c5:45:
         a8:93:37:48:5b:c5:1d:73:3c:6d:79:a3:ae:d3:bb:62:dc:a5:
         b0:41:36:1d:a4:c3:85:da:56:bc:33:ab:e0:b2:ac:a1:2d:19:
         03:e9:49:d3:a2:19:77:66:36:94:74:1e:f1:95:68:29:d7:ea:
         48:db:34:e2:1c:78:5d:16:63:86:e3:4e:3e:09:b0:07:bf:c5:
         92:31:3c:26:75:fd:fa:c5:d5:b9:65:7a:eb:c2:7d:0b:52:9b:
         27:34:1e:2d:ad:b0:89:42:32:0c:1c:c4:41:d3:81:25:09:48:
         6c:de:4b:a5:64:76:43:c3:a0:05:8a:7c:32:fa:74:3e:b2:a5:
         d6:9a:55:0c:41:0f:00:f0:05:f9:43:fe:9f:50:a1:1e:ea:25:
         e6:78:07:54:a8:a4:94:a5:08:ee:34:50:53:ef:62:11:db:6c:
         56:6e:71:1c:f4:c9:1f:0d:9c:fe:a9:68:b3:48:28:93:5a:ee:
         92:44:f2:59:46:b1:c8:b3:22:32:3d:d0:b2:f5:4e:b7:e1:e2:
         06:23:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net