Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aufFRTXK2FvBblKJ06JoOw7s5Ok.roa
File:                     aufFRTXK2FvBblKJ06JoOw7s5Ok.roa (raw, json)
Hash identifier:          vFR+dyBdju1RqX0BbcpodQWs1pOUithCiocys7WThCw=
Subject key identifier:   6A:E7:C5:45:35:CA:D8:5B:C1:6E:52:89:D3:A2:68:3B:0E:EC:E4:E9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       049F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aufFRTXK2FvBblKJ06JoOw7s5Ok.roa
Signing time:             Tue 01 Apr 2025 01:49:22 +0000
ROA not before:           Tue 01 Apr 2025 01:49:22 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:e900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:22 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6AE7C54535CAD85BC16E5289D3A2683B0EECE4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:fd:14:a1:70:a9:14:73:da:4e:47:d8:5d:
                    5e:f7:c4:54:aa:c8:b1:de:51:e3:29:aa:6e:74:c1:
                    6d:b5:57:8b:be:4b:be:da:51:d9:3b:e4:fa:f8:37:
                    9b:50:52:bf:a6:98:f6:66:69:72:22:41:68:f5:f3:
                    57:e5:e3:eb:6b:a5:60:93:a8:88:d8:bc:09:30:75:
                    66:e0:a7:c0:c4:65:ef:e6:ae:bc:29:c3:fc:68:1b:
                    93:cd:4e:8d:72:b6:a2:cd:dc:f9:eb:c4:b3:7f:64:
                    4f:27:23:2c:a4:f2:5b:f3:85:0b:3b:93:8b:e4:1f:
                    89:1c:bd:06:04:69:ae:7a:07:a8:1f:77:84:3c:8d:
                    2b:05:32:42:87:9e:3a:0a:b1:a2:06:34:76:d7:7e:
                    69:8d:19:a9:41:d2:d0:10:3d:46:03:ba:9c:64:2d:
                    df:07:9e:a4:a5:72:91:47:cd:5d:64:f7:49:98:3f:
                    e2:27:99:42:2b:b0:59:fa:f8:ea:46:b9:1f:ce:f5:
                    0b:fa:db:a8:6a:7c:d5:b3:b6:c9:62:25:61:dd:78:
                    4f:a0:14:91:ac:c2:3c:f1:55:0b:a3:48:62:b8:69:
                    44:a5:16:46:f5:4e:58:30:c8:4a:3f:8e:07:17:5f:
                    7a:f4:54:4c:10:76:52:39:d1:b1:06:49:4d:79:3f:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E7:C5:45:35:CA:D8:5B:C1:6E:52:89:D3:A2:68:3B:0E:EC:E4:E9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aufFRTXK2FvBblKJ06JoOw7s5Ok.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e900::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:8c:3d:94:b5:6e:d3:2e:0e:c6:c6:1d:6e:5c:58:05:ef:
         77:9a:43:fd:7e:5b:fc:aa:c6:3a:fb:da:2d:2c:02:fb:95:f9:
         47:84:4f:16:93:b6:25:0c:92:f5:bd:a8:71:11:2e:e0:cf:28:
         7f:1e:29:5a:70:66:34:59:6e:9f:a4:5f:ee:e4:92:9d:a0:2f:
         de:c3:72:07:80:d7:57:ad:4e:d4:64:ec:96:4e:63:79:73:79:
         4f:62:d1:c3:21:2d:30:ad:05:d4:1a:cc:85:e6:a4:9a:cb:bb:
         1b:ad:e3:cd:f7:8c:8b:7e:9c:f4:06:db:f2:42:9c:a6:40:73:
         79:57:da:de:e0:0a:62:7d:2b:ad:d4:f3:fe:24:35:2d:b4:76:
         ec:c6:50:bc:a8:aa:c1:c8:7d:bc:f5:6c:18:20:3f:12:04:e2:
         25:9b:d0:78:8e:6d:39:13:63:56:58:13:08:03:3b:0c:dc:98:
         29:d0:84:35:b9:91:8f:b2:47:14:31:a4:c2:c0:01:42:7c:c2:
         cc:95:c2:44:42:9f:92:25:06:95:e6:9f:87:af:20:78:43:9f:
         ad:c6:f1:0a:10:8c:89:3b:d9:55:3b:cc:1c:d7:88:ca:f4:42:
         d3:58:9a:60:c8:e9:0e:7b:88:87:d1:16:30:4f:3a:09:e4:e0:
         24:f4:86:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTQ5MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBRTdDNTQ1MzVDQUQ4
NUJDMTZFNTI4OUQzQTI2ODNCMEVFQ0U0RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8of0UoXCpFHPaTkfYXV73xFSqyLHeUeMpqm50wW21V4u+S77a
Udk75Pr4N5tQUr+mmPZmaXIiQWj181fl4+trpWCTqIjYvAkwdWbgp8DEZe/mrrwp
w/xoG5PNTo1ytqLN3PnrxLN/ZE8nIyyk8lvzhQs7k4vkH4kcvQYEaa56B6gfd4Q8
jSsFMkKHnjoKsaIGNHbXfmmNGalB0tAQPUYDupxkLd8HnqSlcpFHzV1k90mYP+In
mUIrsFn6+OpGuR/O9Qv626hqfNWztsliJWHdeE+gFJGswjzxVQujSGK4aUSlFkb1
TlgwyEo/jgcXX3r0VEwQdlI50bEGSU15P0ClAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUaufFRTXK2FvBblKJ06JoOw7s5OkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9hdWZGUlRYSzJGdkJibEtKMDZKb093N3M1T2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa+kwDQYJKoZIhvcNAQELBQADggEBADiwjD2UtW7TLg7Gxh1u
XFgF73eaQ/1+W/yqxjr72i0sAvuV+UeETxaTtiUMkvW9qHERLuDPKH8eKVpwZjRZ
bp+kX+7kkp2gL97DcgeA11etTtRk7JZOY3lzeU9i0cMhLTCtBdQazIXmpJrLuxut
4833jIt+nPQG2/JCnKZAc3lX2t7gCmJ9K63U8/4kNS20duzGULyoqsHIfbz1bBgg
PxIE4iWb0HiObTkTY1ZYEwgDOwzcmCnQhDW5kY+yRxQxpMLAAUJ8wsyVwkRCn5Il
BpXmn4evIHhDn63G8QoQjIk72VU7zBzXiMr0QtNYmmDI6Q57iIfRFjBPOgnk4CT0
hjM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net