Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aPEN8vLZ5EMGKMeZlH6l0cPgfRs.roa
File:                     aPEN8vLZ5EMGKMeZlH6l0cPgfRs.roa (raw, json)
Hash identifier:          aAB6OTo3bJ/candGbuD/CFhf5eIuxHA9VPSAStCcIa8=
Subject key identifier:   68:F1:0D:F2:F2:D9:E4:43:06:28:C7:99:94:7E:A5:D1:C3:E0:7D:1B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0446
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aPEN8vLZ5EMGKMeZlH6l0cPgfRs.roa
Signing time:             Tue 01 Apr 2025 01:39:34 +0000
ROA not before:           Tue 01 Apr 2025 01:39:34 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:2b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:34 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=68F10DF2F2D9E4430628C799947EA5D1C3E07D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:69:83:00:57:94:db:02:44:50:b3:da:80:
                    2c:82:54:e1:48:66:68:6b:0d:e5:b5:bd:ff:4f:32:
                    6d:c4:b7:0e:4c:30:ba:ec:42:8b:e0:d7:10:5f:0a:
                    e4:38:03:40:06:f1:6c:ba:9d:33:58:6d:a9:23:32:
                    9a:2e:ac:85:e4:11:34:22:a7:04:49:df:32:ed:3c:
                    69:50:cb:bb:80:84:97:0d:6c:8b:57:e3:20:45:6a:
                    da:94:2b:e4:11:8c:c1:fa:31:21:ef:77:4d:3a:78:
                    11:d2:1d:f5:e9:00:2f:58:6e:9d:17:58:fe:8d:6c:
                    ef:19:36:d7:0d:75:49:d7:e5:6a:a5:7b:75:dc:d2:
                    f6:04:8b:09:cb:3a:54:a0:95:da:27:2c:48:d6:be:
                    ff:94:2e:c5:be:23:f2:df:8b:16:74:2d:21:54:f1:
                    fe:df:fe:ca:3d:5e:87:a6:6b:95:aa:20:f2:33:e4:
                    db:f0:84:69:8f:50:66:7c:5e:a8:fa:b4:e0:fb:24:
                    7d:ca:2a:a2:c8:83:6b:8c:49:bc:6b:b3:d8:bb:3c:
                    43:ee:83:d3:f8:55:97:f5:23:23:17:67:d3:26:7d:
                    af:46:1e:82:8b:ee:2e:53:36:1e:d7:dd:7c:3e:84:
                    b5:e5:31:5f:e7:51:e0:a0:ef:4d:56:99:0d:e2:a5:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:0D:F2:F2:D9:E4:43:06:28:C7:99:94:7E:A5:D1:C3:E0:7D:1B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aPEN8vLZ5EMGKMeZlH6l0cPgfRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:fb:23:23:72:6a:c2:1b:71:36:1a:97:3a:93:07:3b:fc:7b:
         fa:0e:e1:96:dc:58:64:ea:27:f6:a6:3b:3d:3e:47:41:bc:94:
         ae:82:1e:4b:18:34:0b:3e:f1:7e:cc:88:c1:ab:15:19:38:b7:
         4b:aa:46:84:c4:b8:0b:08:fc:d6:13:42:e6:c4:17:62:3e:6a:
         de:d6:7a:ea:9e:b8:0e:36:4c:1d:e0:b8:6b:bf:5e:aa:6d:85:
         f8:e1:0d:87:3a:84:66:78:d8:c9:09:ed:66:e9:65:d6:89:01:
         46:37:7e:31:ed:c8:d4:a7:fd:c6:27:f7:30:95:93:d2:28:c9:
         52:aa:da:76:2c:6d:99:81:8a:7b:e6:e0:f5:5c:31:3b:3b:d8:
         d4:16:da:37:66:40:6e:14:5c:8a:d7:67:3c:84:bb:90:15:cc:
         b7:93:25:c7:0c:e5:80:e5:60:30:57:b3:73:9d:6a:06:ef:99:
         1b:4f:6b:39:62:47:14:cb:d8:7d:10:4c:fa:6b:88:9e:e1:fd:
         1b:fb:ea:23:6a:08:48:96:ff:2f:1b:ae:0e:b9:8f:36:05:36:
         14:24:7b:c0:5c:b6:79:01:9b:bf:12:43:2d:41:35:63:ac:a3:
         55:89:dc:3a:cb:1f:34:0b:77:2c:58:30:41:4d:0d:d5:4f:e4:
         d9:92:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net