Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cW2whOYNVJrELbzh_jqUkh28kak.roa
File:                     cW2whOYNVJrELbzh_jqUkh28kak.roa (raw, json)
Hash identifier:          CwourZw8RICTiXP1NQaGNF5m1PSnH5O+GAI8x+vPcQo=
Subject key identifier:   71:6D:B0:84:E6:0D:54:9A:C4:2D:BC:E1:FE:3A:94:92:1D:BC:91:A9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04B1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cW2whOYNVJrELbzh_jqUkh28kak.roa
Signing time:             Tue 01 Apr 2025 01:49:30 +0000
ROA not before:           Tue 01 Apr 2025 01:49:30 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:3000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:30 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=716DB084E60D549AC42DBCE1FE3A94921DBC91A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:38:2c:8f:e3:9a:10:f4:3e:09:70:ba:1f:
                    e2:e2:5c:85:bb:a0:25:15:16:cb:35:b3:c5:32:61:
                    58:ec:61:dc:41:9e:b7:68:bb:ee:6f:a7:45:b4:b7:
                    c4:66:cd:93:7c:20:85:73:66:40:cf:97:a0:9b:14:
                    9f:9e:a3:8e:6c:da:b8:82:b8:89:eb:52:3a:4d:e0:
                    e1:85:00:03:5d:be:4e:4b:50:c3:35:69:5e:51:28:
                    87:78:50:be:32:8f:27:ba:94:52:03:73:ec:aa:87:
                    2e:90:0a:ad:de:99:2a:dd:05:15:71:87:11:f8:87:
                    f8:6f:eb:35:fb:01:7b:7a:f8:44:c5:1c:15:60:d4:
                    26:9f:08:c8:88:4b:3f:e3:ad:2e:f5:0f:79:21:07:
                    01:c4:59:67:d5:03:7d:f4:4a:98:cd:34:55:40:1f:
                    3b:4a:e0:2f:1d:e9:fd:e3:7e:50:19:b3:a0:2c:05:
                    d9:76:24:88:8f:86:39:45:5f:37:d0:4a:4d:c7:31:
                    27:fc:2b:4b:18:ff:37:31:ab:1d:18:c9:cd:4f:e0:
                    41:e1:a3:8e:e2:8a:70:e8:b1:24:f4:11:88:be:67:
                    c3:06:ba:a6:7e:c1:27:af:66:38:b3:75:d3:c6:a5:
                    3b:73:01:48:07:ec:c9:b7:bd:98:cc:34:af:98:85:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:B0:84:E6:0D:54:9A:C4:2D:BC:E1:FE:3A:94:92:1D:BC:91:A9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cW2whOYNVJrELbzh_jqUkh28kak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         85:44:b5:f9:3a:a0:01:05:67:3d:f2:0e:ef:33:f7:68:7f:9d:
         82:f0:ce:4d:6b:5f:9c:fa:6c:c3:6a:15:17:4f:e5:cf:e9:34:
         ea:45:51:78:42:dc:56:23:54:a6:99:2e:68:04:25:59:98:75:
         f2:ae:2e:5f:a6:7e:ba:de:f0:d1:47:3e:38:ec:9d:d3:73:35:
         92:47:22:c4:17:ce:0e:d1:56:07:03:ac:f4:ed:5d:64:ff:e7:
         97:c1:0c:49:a0:6e:7c:d2:37:03:f2:bc:be:e5:7f:3a:59:71:
         dc:3a:ff:01:10:9f:cc:45:2f:ac:75:0e:68:16:25:53:d7:ab:
         43:62:63:b5:ba:3e:f8:78:7d:75:79:d4:a8:2f:89:fc:73:93:
         34:2f:ce:14:ba:4a:83:37:a4:31:b3:4c:6b:7c:55:d2:88:24:
         fc:65:6e:d8:15:32:62:e1:ce:3f:30:d9:7e:b0:ee:16:fd:f1:
         33:42:cc:f8:5e:e4:cb:55:56:d6:be:47:f4:98:6c:bd:e3:2a:
         14:33:51:42:b4:d6:72:a0:b5:ba:ec:d5:50:b9:29:7c:9f:94:
         fa:c3:6c:f0:32:08:cb:ae:b6:8c:2d:e9:15:0a:b3:3f:4d:61:
         e5:bb:22:03:46:74:ac:d7:2a:b3:38:8a:10:d2:2f:77:7f:b2:
         31:c3:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net