Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bKOgxBkerfeZjFZ70EcfPhBNZ0A.roa
File:                     bKOgxBkerfeZjFZ70EcfPhBNZ0A.roa (raw, json)
Hash identifier:          KXi1K0skrDxjsuzgd8+pLxR2lGjZSo+e+uLYDkHxHHg=
Subject key identifier:   6C:A3:A0:C4:19:1E:AD:F7:99:8C:56:7B:D0:47:1F:3E:10:4D:67:40
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       042B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bKOgxBkerfeZjFZ70EcfPhBNZ0A.roa
Signing time:             Tue 01 Apr 2025 01:35:42 +0000
ROA not before:           Tue 01 Apr 2025 01:35:42 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:42 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6CA3A0C4191EADF7998C567BD0471F3E104D6740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:85:27:d4:29:5f:62:7f:e0:14:cd:62:b2:
                    fc:7d:b8:fb:c4:e1:1b:2b:ce:2e:35:15:fe:c8:1d:
                    dc:39:21:c5:27:fd:48:f5:99:20:a6:9f:59:28:fe:
                    3c:24:36:df:6b:5a:2e:6f:f0:02:1f:d3:b7:00:ae:
                    6b:13:14:b3:3a:ae:8f:a2:89:4c:c6:40:63:cd:10:
                    b9:de:75:4e:24:cc:8e:ed:9a:26:e5:4b:8f:e3:e0:
                    1f:75:23:71:cb:ca:67:4b:89:64:d3:a9:2c:5b:f1:
                    3a:57:da:0f:11:9f:4d:d5:d0:af:e8:7c:b2:0d:d5:
                    38:2c:2f:2c:a6:c4:4c:0d:c8:95:04:95:64:0e:8f:
                    a2:07:c6:5c:a0:43:ca:f7:5d:1d:f3:63:f8:6a:80:
                    33:8b:85:25:7a:58:08:43:27:bd:1c:78:f3:8e:4c:
                    e4:ee:67:b3:32:34:cc:22:0b:7d:0c:5f:82:e8:97:
                    23:2c:85:56:5b:15:74:e1:a1:a2:f8:6d:74:6c:8c:
                    d5:00:94:72:df:31:d3:ef:c8:93:cf:b4:a8:ff:be:
                    f7:70:b1:ad:f4:5c:a3:1d:eb:5e:0c:40:6b:d6:35:
                    b8:c8:88:db:2b:e8:1d:35:30:d7:2e:46:34:7e:b7:
                    4c:2d:4d:5d:7a:e1:67:34:bc:f2:3b:3f:e4:a6:6a:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:A0:C4:19:1E:AD:F7:99:8C:56:7B:D0:47:1F:3E:10:4D:67:40
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bKOgxBkerfeZjFZ70EcfPhBNZ0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:66:48:77:57:12:46:32:e7:3d:88:c2:63:ac:71:61:c4:
         0a:4b:f0:d6:0c:ee:41:42:5f:02:d6:5b:0f:80:ff:73:70:ac:
         79:c3:54:d6:95:5c:32:86:ab:7f:c2:80:16:ab:a5:0a:7f:e5:
         aa:52:c4:ec:4e:35:54:ac:70:f6:c5:a0:98:c1:e5:1c:97:ca:
         53:ea:a1:c5:0e:3c:db:be:e6:99:23:7d:7f:15:e5:59:0a:0b:
         2e:be:a4:45:31:68:fd:10:fd:31:11:d0:83:67:0a:93:25:c5:
         73:47:14:c3:60:4e:84:75:3f:ae:74:81:a9:09:64:fe:5b:7b:
         5d:e4:d0:4d:cd:44:a0:d6:53:b1:4b:a4:c3:ef:2f:37:b9:32:
         92:9e:e1:08:e7:fa:4c:62:2e:4a:71:00:65:07:60:e6:9f:fd:
         d8:28:dd:6a:86:b8:bf:a0:84:a2:cc:69:a6:9d:d9:e2:79:d0:
         76:76:b9:93:23:e1:37:aa:ce:f2:3b:f6:be:14:a4:c2:41:6f:
         f1:ee:65:65:a9:71:68:42:cf:af:20:64:cd:3d:c8:dc:c7:43:
         a5:9c:e6:25:9e:87:25:0f:21:e2:f9:ea:98:50:9b:26:7a:de:
         b6:6c:5e:38:27:d7:5a:53:33:35:85:12:c2:4b:1a:d2:87:68:
         b1:6c:15:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1NDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDQTNBMEM0MTkxRUFE
Rjc5OThDNTY3QkQwNDcxRjNFMTA0RDY3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3zoUn1ClfYn/gFM1isvx9uPvE4Rsrzi41Ff7IHdw5IcUn/Uj1
mSCmn1ko/jwkNt9rWi5v8AIf07cArmsTFLM6ro+iiUzGQGPNELnedU4kzI7tmibl
S4/j4B91I3HLymdLiWTTqSxb8TpX2g8Rn03V0K/ofLIN1TgsLyymxEwNyJUElWQO
j6IHxlygQ8r3XR3zY/hqgDOLhSV6WAhDJ70cePOOTOTuZ7MyNMwiC30MX4LolyMs
hVZbFXThoaL4bXRsjNUAlHLfMdPvyJPPtKj/vvdwsa30XKMd614MQGvWNbjIiNsr
6B01MNcuRjR+t0wtTV164Wc0vPI7P+SmakiDAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUbKOgxBkerfeZjFZ70EcfPhBNZ0AwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9iS09neEJrZXJmZVpqRlo3MEVjZlBoQk5aMEEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7UwDQYJKoZIhvcNAQELBQADggEBAJC/Zkh3VxJGMuc9iMJj
rHFhxApL8NYM7kFCXwLWWw+A/3NwrHnDVNaVXDKGq3/CgBarpQp/5apSxOxONVSs
cPbFoJjB5RyXylPqocUOPNu+5pkjfX8V5VkKCy6+pEUxaP0Q/TER0INnCpMlxXNH
FMNgToR1P650gakJZP5be13k0E3NRKDWU7FLpMPvLze5MpKe4Qjn+kxiLkpxAGUH
YOaf/dgo3WqGuL+ghKLMaaad2eJ50HZ2uZMj4TeqzvI79r4UpMJBb/HuZWWpcWhC
z68gZM09yNzHQ6Wc5iWehyUPIeL56phQmyZ63rZsXjgn11pTMzWFEsJLGtKHaLFs
Ffc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net