Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/blYYKYmXLiwrRedcudIOFsKWggY.roa
File:                     blYYKYmXLiwrRedcudIOFsKWggY.roa (raw, json)
Hash identifier:          XfcYWDSCuy3PCRsxwFm4CXxliwEvIGWvuOiLvkwFU/Y=
Subject key identifier:   6E:56:18:29:89:97:2E:2C:2B:45:E7:5C:B9:D2:0E:16:C2:96:82:06
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       040B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/blYYKYmXLiwrRedcudIOFsKWggY.roa
Signing time:             Tue 01 Apr 2025 01:35:28 +0000
ROA not before:           Tue 01 Apr 2025 01:35:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:1000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6E56182989972E2C2B45E75CB9D20E16C2968206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:b7:a4:92:8c:eb:e9:ff:ac:5f:83:67:4b:
                    09:6e:e8:0c:40:e7:c8:be:cb:d5:58:72:7f:31:16:
                    b9:bd:7b:bf:4b:29:95:f0:f4:5b:73:4a:75:68:2e:
                    5c:21:27:a8:d9:f9:31:f0:53:c4:f0:f4:fc:51:83:
                    95:c3:1e:fe:95:41:57:9e:68:eb:03:7f:14:30:e0:
                    85:a1:57:02:a2:f4:3e:cc:53:fb:c0:20:e8:3e:ea:
                    16:63:39:a7:aa:ef:6d:24:72:a6:cd:49:08:2b:85:
                    5b:ec:3c:eb:87:93:38:a6:6c:9e:9d:0f:e8:29:cf:
                    67:4d:a8:63:ef:26:6a:95:2f:1c:63:20:12:80:e4:
                    dd:13:a6:da:2c:93:28:a0:ce:e0:8e:8a:2d:f1:56:
                    4b:d9:39:a5:e3:86:e7:74:be:39:ef:4a:54:cb:e6:
                    96:6a:e6:68:ad:8d:76:a2:81:2e:4f:7b:44:cb:ba:
                    21:cd:92:7a:a2:62:34:c1:20:38:36:a0:a5:47:f9:
                    d7:99:5a:9d:1e:02:fb:9a:f4:e8:16:c8:fa:72:a2:
                    34:d9:4b:80:cb:87:15:a5:0e:59:2c:c0:a0:83:e0:
                    e3:e7:c3:ff:f8:9f:0f:16:8c:59:d2:9b:b9:04:dc:
                    f5:94:c9:1d:36:55:1f:70:8d:53:2b:2c:38:a2:1e:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:18:29:89:97:2E:2C:2B:45:E7:5C:B9:D2:0E:16:C2:96:82:06
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/blYYKYmXLiwrRedcudIOFsKWggY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:17:c0:d3:33:00:7f:69:b1:4c:66:93:9a:1d:13:15:b3:
         d6:eb:22:13:80:dd:b5:b1:ed:1a:a5:1e:3d:95:f9:6d:f8:a5:
         e9:8f:89:a0:9f:d0:02:b5:1d:ab:6a:0f:ed:31:fc:c1:8b:59:
         4f:96:17:51:80:40:7f:31:5a:8d:a6:36:9a:28:72:c3:12:89:
         2b:69:9c:c7:2c:3e:71:e6:4a:1f:25:f8:c2:5b:7a:db:fd:67:
         fa:5f:ca:e1:96:b4:d7:48:78:01:4d:86:1a:92:c6:f2:1a:33:
         47:dd:62:77:5e:10:e0:55:52:82:00:f6:0b:9c:d2:cc:ed:78:
         ac:e0:4c:05:c3:1a:f0:5f:95:3f:b0:01:da:0d:78:43:a9:de:
         c9:1e:95:94:3c:bf:5a:2f:f9:27:b5:bf:ec:7c:9e:2f:86:b5:
         79:f2:74:46:af:7e:d9:26:44:93:4c:c0:dd:dc:00:93:12:e2:
         48:d9:5a:83:90:3f:14:57:2b:23:b5:25:5e:70:8d:27:35:86:
         92:37:d8:98:b0:00:cb:f5:58:4b:e1:7e:ed:07:7c:aa:43:4f:
         62:30:00:7b:7f:d5:4f:5b:f5:e5:32:c4:d4:57:6a:e7:15:6d:
         c4:b9:99:01:70:df:ce:34:5b:e3:cd:ad:76:15:8e:70:4a:b5:
         fc:18:60:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1MjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZFNTYxODI5ODk5NzJF
MkMyQjQ1RTc1Q0I5RDIwRTE2QzI5NjgyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5Lrekkozr6f+sX4NnSwlu6AxA58i+y9VYcn8xFrm9e79LKZXw
9FtzSnVoLlwhJ6jZ+THwU8Tw9PxRg5XDHv6VQVeeaOsDfxQw4IWhVwKi9D7MU/vA
IOg+6hZjOaeq720kcqbNSQgrhVvsPOuHkzimbJ6dD+gpz2dNqGPvJmqVLxxjIBKA
5N0TptoskyigzuCOii3xVkvZOaXjhud0vjnvSlTL5pZq5mitjXaigS5Pe0TLuiHN
knqiYjTBIDg2oKVH+deZWp0eAvua9OgWyPpyojTZS4DLhxWlDlkswKCD4OPnw//4
nw8WjFnSm7kE3PWUyR02VR9wjVMrLDiiHjqhAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUblYYKYmXLiwrRedcudIOFsKWggYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9ibFlZS1ltWExpd3JSZWRjdWRJT0ZzS1dnZ1ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYDJAoAYRAwDQYJKoZIhvcNAQELBQADggEBAEdeF8DTMwB/abFMZpOa
HRMVs9brIhOA3bWx7RqlHj2V+W34pemPiaCf0AK1HatqD+0x/MGLWU+WF1GAQH8x
Wo2mNpoocsMSiStpnMcsPnHmSh8l+MJbetv9Z/pfyuGWtNdIeAFNhhqSxvIaM0fd
YndeEOBVUoIA9guc0szteKzgTAXDGvBflT+wAdoNeEOp3skelZQ8v1ov+Se1v+x8
ni+GtXnydEavftkmRJNMwN3cAJMS4kjZWoOQPxRXKyO1JV5wjSc1hpI32JiwAMv1
WEvhfu0HfKpDT2IwAHt/1U9b9eUyxNRXaucVbcS5mQFw3840W+PNrXYVjnBKtfwY
YNg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net