Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAZ4FVutiys3V3llhVJe9MRU4hY.roa
File:                     bAZ4FVutiys3V3llhVJe9MRU4hY.roa (raw, json)
Hash identifier:          vhOhavUgeKc7qremhcxRmMUJ5G4AepfCacOs+IUMGo4=
Subject key identifier:   6C:06:78:15:5B:AD:8B:2B:37:57:79:65:85:52:5E:F4:C4:54:E2:16
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03FB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAZ4FVutiys3V3llhVJe9MRU4hY.roa
Signing time:             Tue 01 Apr 2025 01:32:10 +0000
ROA not before:           Tue 01 Apr 2025 01:32:10 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:10 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6C0678155BAD8B2B3757796585525EF4C454E216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:fd:27:66:83:d9:2a:0f:bd:15:3e:b2:51:
                    79:3e:88:d2:d1:b3:9d:9a:6e:3f:9d:93:83:82:c8:
                    b7:3a:c8:53:42:da:b8:8f:e4:6c:ef:9c:9b:bc:7c:
                    c4:46:d2:5b:0c:09:da:55:e7:82:01:d1:f0:85:55:
                    75:9a:68:0d:17:63:19:da:b2:3c:d0:ec:a2:13:08:
                    03:d5:71:23:8b:b0:ab:3a:81:63:5e:cb:65:2b:62:
                    4f:1e:46:c8:3b:c3:79:6e:5e:8f:93:76:62:f8:e9:
                    94:a5:da:a4:77:9a:24:46:f2:1c:99:14:f7:eb:79:
                    24:4b:ae:ae:8f:a8:81:d7:96:70:f4:a3:65:ee:ed:
                    4d:14:06:8f:04:da:bb:3c:4e:e6:69:51:b6:76:c9:
                    d3:a3:aa:f6:9d:1f:e3:1c:51:ac:11:33:ba:bd:a5:
                    45:b0:12:fc:03:2b:c2:64:4e:01:39:d8:67:64:59:
                    31:8d:78:6d:36:c6:04:db:22:6d:05:2f:6f:e9:e8:
                    0b:de:39:43:2a:3c:9e:cc:49:ad:3a:b7:ff:d6:95:
                    be:8f:b9:06:51:a2:fc:6b:b2:2a:cf:38:ed:34:77:
                    8a:18:c5:be:44:43:16:6d:1f:8e:c4:17:b4:6b:e3:
                    b3:4a:9f:7a:64:4f:7f:01:85:b2:dd:53:f4:6a:4e:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:78:15:5B:AD:8B:2B:37:57:79:65:85:52:5E:F4:C4:54:E2:16
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAZ4FVutiys3V3llhVJe9MRU4hY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:61:63:01:d7:ce:37:46:d2:c5:0d:cd:94:34:80:1e:a9:c1:
         4b:57:95:be:fa:71:14:de:b5:30:92:0e:62:5d:f2:5d:0c:54:
         4f:64:33:68:48:1a:75:63:2d:7a:f5:9b:00:42:e2:29:71:4d:
         b6:97:53:87:ba:2e:b8:6f:5a:5f:db:cc:9f:03:e3:26:13:64:
         28:8e:53:34:22:1a:60:a3:a2:c2:80:ea:22:74:ca:97:15:6d:
         00:ef:32:2e:2b:c4:ef:71:3e:d5:0c:4d:2d:ab:a2:6f:cd:b4:
         d7:6a:71:14:38:6c:93:68:e3:d9:d2:bd:3e:92:3d:e9:b2:99:
         9e:57:ce:52:25:46:61:02:64:76:89:c5:0c:82:a0:b1:77:8c:
         ba:f9:bc:70:cd:ca:a3:fc:3a:04:5f:bc:ae:de:5c:d5:d3:ca:
         db:52:2e:f3:23:a1:18:7e:87:3d:5c:d3:3b:6c:12:03:a1:35:
         d7:00:62:31:e7:1f:f1:41:f6:1f:46:a9:b9:16:b8:16:66:81:
         d4:d2:a5:af:f1:79:2c:0b:57:2f:aa:68:0a:c3:a3:8d:9e:0e:
         dd:c2:df:98:74:64:fc:26:24:54:13:36:09:84:08:07:7e:ec:
         78:22:4d:43:a0:ac:18:71:05:67:27:f6:ec:c0:8b:43:1c:74:
         77:81:95:97
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTMyMTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDMDY3ODE1NUJBRDhC
MkIzNzU3Nzk2NTg1NTI1RUY0QzQ1NEUyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/dv0nZoPZKg+9FT6yUXk+iNLRs52abj+dk4OCyLc6yFNC2riP
5GzvnJu8fMRG0lsMCdpV54IB0fCFVXWaaA0XYxnasjzQ7KITCAPVcSOLsKs6gWNe
y2UrYk8eRsg7w3luXo+TdmL46ZSl2qR3miRG8hyZFPfreSRLrq6PqIHXlnD0o2Xu
7U0UBo8E2rs8TuZpUbZ2ydOjqvadH+McUawRM7q9pUWwEvwDK8JkTgE52GdkWTGN
eG02xgTbIm0FL2/p6AveOUMqPJ7MSa06t//Wlb6PuQZRovxrsirPOO00d4oYxb5E
QxZtH47EF7Rr47NKn3pkT38BhbLdU/RqTl37AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUbAZ4FVutiys3V3llhVJe9MRU4hYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9iQVo0RlZ1dGl5czNWM2xsaFZKZTlNUlU0aFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/8wDQYJKoZIhvcNAQELBQADggEBAEhhYwHXzjdG0sUNzZQ0
gB6pwUtXlb76cRTetTCSDmJd8l0MVE9kM2hIGnVjLXr1mwBC4ilxTbaXU4e6Lrhv
Wl/bzJ8D4yYTZCiOUzQiGmCjosKA6iJ0ypcVbQDvMi4rxO9xPtUMTS2rom/NtNdq
cRQ4bJNo49nSvT6SPemymZ5XzlIlRmECZHaJxQyCoLF3jLr5vHDNyqP8OgRfvK7e
XNXTyttSLvMjoRh+hz1c0ztsEgOhNdcAYjHnH/FB9h9GqbkWuBZmgdTSpa/xeSwL
Vy+qaArDo42eDt3C35h0ZPwmJFQTNgmECAd+7HgiTUOgrBhxBWcn9uzAi0McdHeB
lZc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net