Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
File:                     aqicje0PPm_bBvL43LuK2AAbUpk.roa (raw, json)
Hash identifier:          18sUHWpVD/Bg5tvuCCuNGQXI5q5YoC20iXhicEnSwts=
Subject key identifier:   6A:A8:9C:8D:ED:0F:3E:6F:DB:06:F2:F8:DC:BB:8A:D8:00:1B:52:99
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03DE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
Signing time:             Tue 01 Apr 2025 01:28:58 +0000
ROA not before:           Tue 01 Apr 2025 01:28:58 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:3700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:58 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6AA89C8DED0F3E6FDB06F2F8DCBB8AD8001B5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:b1:a9:36:fc:97:95:6a:d5:d3:f9:70:66:
                    88:43:6a:c9:21:78:55:1c:25:53:fe:b7:5d:64:d4:
                    14:43:4c:9a:e1:01:3d:47:7e:d5:48:c1:66:d7:29:
                    a7:aa:2b:f2:b0:e7:51:f3:10:f2:21:8d:1e:d0:47:
                    35:e6:08:bb:aa:1a:8b:7b:e6:74:26:75:e4:c9:52:
                    4f:be:66:1c:f1:aa:d3:d7:2f:8c:62:42:ea:b8:d6:
                    c4:85:d2:13:0c:cf:70:44:2d:bc:cd:e7:b2:6f:ee:
                    bb:62:0e:bf:0b:63:e3:70:de:8d:fe:35:99:db:b2:
                    40:1b:0a:b7:be:2f:a8:cd:b0:fd:b0:1b:0c:bf:7e:
                    3c:c4:ab:fd:cf:14:4b:cf:6e:2d:3f:2b:21:80:31:
                    e7:1d:3a:5f:0e:6a:8e:b9:66:13:d9:5e:7d:5c:d9:
                    38:8e:c9:63:56:aa:a5:09:3e:9a:cf:5c:8d:b7:02:
                    83:3f:53:39:c3:35:6b:ab:5b:0f:ff:5c:44:fa:6e:
                    cc:ad:52:ca:dc:fd:1e:38:a6:7b:b7:21:af:3f:0a:
                    0b:d3:e6:cd:eb:fd:95:88:62:11:b4:4c:1c:78:d6:
                    e2:c7:3c:68:63:d8:ee:f3:53:d5:17:d3:3f:19:57:
                    ce:75:d4:87:fb:ee:9b:1f:e0:af:93:a2:2c:c2:b4:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A8:9C:8D:ED:0F:3E:6F:DB:06:F2:F8:DC:BB:8A:D8:00:1B:52:99
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aqicje0PPm_bBvL43LuK2AAbUpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:0b:0c:ed:34:6e:d9:2d:f6:37:4d:e3:e5:5a:0c:c7:0d:ad:
         9f:de:bd:c1:61:94:22:e9:b5:c3:45:01:6a:83:61:b1:9a:f0:
         e3:49:e9:e1:3c:79:df:f3:48:f1:03:3c:a4:77:87:eb:e7:21:
         d6:6c:d2:84:df:dd:d0:a5:b2:fd:e4:ec:e6:c6:61:ea:5f:51:
         55:54:cd:fb:eb:b9:42:50:c5:bd:86:de:73:7f:10:ba:08:94:
         2b:80:0c:5f:52:89:26:45:b6:16:91:19:8f:8a:9a:50:5c:68:
         d1:de:61:1f:1c:2e:95:8f:22:73:c1:42:38:57:79:60:e5:ff:
         05:0b:af:17:67:92:82:09:05:a5:ff:73:82:27:ef:56:72:82:
         19:55:a2:ec:1d:66:fd:74:6d:df:ef:c8:dc:2a:7b:39:ff:d6:
         4b:57:6b:95:bb:5c:76:b1:7e:7a:87:5a:a2:39:85:98:58:71:
         a9:57:91:00:fd:15:65:c6:89:8a:a7:47:59:6f:c7:15:eb:4d:
         f3:42:90:e3:a8:b9:c4:da:43:d2:60:1a:34:29:c4:cf:e4:8a:
         a8:98:1a:fc:97:74:6c:4a:3c:86:92:c4:47:21:d1:a9:c4:9f:
         11:0d:bb:4f:15:6f:a1:e9:35:a9:1b:cc:c6:7d:85:a3:79:d9:
         92:35:ed:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTI4NThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBQTg5QzhERUQwRjNF
NkZEQjA2RjJGOERDQkI4QUQ4MDAxQjUyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBKLGpNvyXlWrV0/lwZohDaskheFUcJVP+t11k1BRDTJrhAT1H
ftVIwWbXKaeqK/Kw51HzEPIhjR7QRzXmCLuqGot75nQmdeTJUk++ZhzxqtPXL4xi
Quq41sSF0hMMz3BELbzN57Jv7rtiDr8LY+Nw3o3+NZnbskAbCre+L6jNsP2wGwy/
fjzEq/3PFEvPbi0/KyGAMecdOl8Oao65ZhPZXn1c2TiOyWNWqqUJPprPXI23AoM/
UznDNWurWw//XET6bsytUsrc/R44pnu3Ia8/CgvT5s3r/ZWIYhG0TBx41uLHPGhj
2O7zU9UX0z8ZV8511If77psf4K+ToizCtPCTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUaqicje0PPm/bBvL43LuK2AAbUpkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9hcWljamUwUFBtX2JCdkw0M0x1SzJBQWJVcGsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazcwDQYJKoZIhvcNAQELBQADggEBALILDO00btkt9jdN4+Va
DMcNrZ/evcFhlCLptcNFAWqDYbGa8ONJ6eE8ed/zSPEDPKR3h+vnIdZs0oTf3dCl
sv3k7ObGYepfUVVUzfvruUJQxb2G3nN/ELoIlCuADF9SiSZFthaRGY+KmlBcaNHe
YR8cLpWPInPBQjhXeWDl/wULrxdnkoIJBaX/c4In71ZyghlVouwdZv10bd/vyNwq
ezn/1ktXa5W7XHaxfnqHWqI5hZhYcalXkQD9FWXGiYqnR1lvxxXrTfNCkOOoucTa
Q9JgGjQpxM/kiqiYGvyXdGxKPIaSxEch0anEnxENu08Vb6HpNakbzMZ9haN52ZI1
7fI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net