Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c5isSgcdIQry4NmojRLt4szfpuk.roa
File:                     c5isSgcdIQry4NmojRLt4szfpuk.roa (raw, json)
Hash identifier:          GUmfnsIFKxtOimI0VF+x45uMnAh3AYLe5JPlCWfirO8=
Subject key identifier:   73:98:AC:4A:07:1D:21:0A:F2:E0:D9:A8:8D:12:ED:E2:CC:DF:A6:E9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04CE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c5isSgcdIQry4NmojRLt4szfpuk.roa
Signing time:             Tue 01 Apr 2025 01:52:59 +0000
ROA not before:           Tue 01 Apr 2025 01:52:59 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:2000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7398AC4A071D210AF2E0D9A88D12EDE2CCDFA6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:e1:6f:05:42:4c:83:84:06:25:8c:2e:fa:
                    a2:f9:de:cb:16:b0:ef:1a:58:04:1e:a1:f6:f3:6e:
                    59:3f:ab:cb:a1:a1:67:62:8b:5e:c9:42:29:5e:96:
                    09:4a:53:ca:1f:01:a3:b1:7d:e2:0e:0d:1e:4f:f0:
                    58:68:2a:fd:b3:e7:28:92:27:90:02:93:32:92:14:
                    8b:ca:d2:14:9c:ba:d2:d4:37:b9:4a:17:9d:d9:3d:
                    e7:f0:6b:45:d4:5b:7d:e2:52:70:b4:e2:00:0f:4f:
                    50:15:6a:4d:ff:c0:4c:19:92:45:d6:e1:ec:61:3b:
                    7f:61:8e:84:f8:f8:41:31:e7:dc:78:2f:c3:31:1a:
                    82:c3:02:90:e0:3f:5e:0f:91:ce:1a:4a:fe:b3:e5:
                    8f:15:f8:95:0b:01:11:9d:c1:ed:7f:16:6e:ac:4b:
                    42:13:34:8a:c5:75:fc:2f:2c:61:47:fb:07:99:32:
                    30:2e:59:c6:d2:12:9f:ed:e6:fb:07:9e:32:4f:6b:
                    b1:f5:c5:c8:be:57:01:c7:62:b0:65:10:af:1e:1f:
                    6e:7c:34:f5:77:ed:65:f0:c5:78:92:26:d5:36:06:
                    72:75:15:13:0e:38:c3:24:8f:f6:e9:2d:09:c0:1b:
                    c2:70:28:c5:6b:87:b6:ba:7f:e5:fa:2f:41:51:53:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:98:AC:4A:07:1D:21:0A:F2:E0:D9:A8:8D:12:ED:E2:CC:DF:A6:E9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c5isSgcdIQry4NmojRLt4szfpuk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:0b:9a:a9:50:9e:81:02:42:e1:7c:0a:95:8b:6d:cf:8a:
         e6:9c:da:83:9c:6e:77:f9:58:01:cb:51:93:5b:d1:33:72:f2:
         f2:46:cc:af:2e:8a:84:7c:42:33:cc:2c:ad:1e:89:87:5a:b9:
         52:bc:c6:21:23:94:e7:17:ed:2e:af:94:8c:ef:44:38:17:b7:
         c4:6d:b2:de:70:e2:ff:62:ac:64:1d:73:f0:17:66:0c:07:8e:
         93:70:5b:e5:00:56:fb:8a:fe:a3:1b:41:3c:ea:ed:15:2a:0e:
         bd:77:e4:84:e4:3e:ef:39:af:92:f3:3e:a9:df:f6:6e:ef:7e:
         b8:1e:99:0c:56:0f:92:76:4a:e3:6d:63:01:98:f0:64:3e:95:
         46:b3:7c:f1:7f:cb:aa:3e:27:18:f8:72:eb:28:3f:70:51:6c:
         d3:2c:cf:83:d5:6f:d3:fe:61:b9:ca:f7:8b:a3:d5:29:aa:15:
         db:ed:59:1d:57:ba:cc:3d:30:14:f9:d9:53:64:7d:52:71:08:
         dd:50:70:6c:2d:7b:ce:83:68:57:de:36:82:57:50:a6:dc:15:
         82:b2:71:00:f9:18:dc:db:dd:6d:d3:ea:f3:b2:22:89:02:6c:
         a7:1e:7e:72:11:95:fc:89:4b:16:06:ee:27:a2:86:8f:16:0d:
         86:58:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net