Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_pdqeHUIZ06kXTOLU8IM59jIyw.roa
File:                     d_pdqeHUIZ06kXTOLU8IM59jIyw.roa (raw, json)
Hash identifier:          4d2foiq+80psXeHIZMfAtlnPQLxq8k+JyWtTb8pF/1o=
Subject key identifier:   77:FA:5D:A9:E1:D4:21:9D:3A:91:74:CE:2D:4F:08:33:9F:63:23:2C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04D8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_pdqeHUIZ06kXTOLU8IM59jIyw.roa
Signing time:             Tue 01 Apr 2025 01:53:04 +0000
ROA not before:           Tue 01 Apr 2025 01:53:04 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f00e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:53:04 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=77FA5DA9E1D4219D3A9174CE2D4F08339F63232C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:4b:85:ce:ec:e3:0b:c1:51:32:4a:ae:8c:
                    a7:2c:ab:7f:42:66:2c:9b:8c:a5:22:9c:25:cb:43:
                    1f:92:e0:7c:17:c6:83:e9:bf:c4:d1:d0:9c:76:67:
                    17:a8:79:04:db:21:4f:2f:fa:62:1c:37:8d:5e:d6:
                    82:ed:2e:1e:aa:1a:58:fa:b0:d3:c5:a2:d2:d3:c6:
                    22:d1:11:e2:d9:9b:0e:b8:c0:4b:20:75:76:20:48:
                    e2:ac:27:3d:9d:9b:4c:4a:1d:41:43:36:2e:c8:76:
                    01:2d:12:cf:37:e4:fb:29:60:e1:4e:32:94:d3:77:
                    05:17:7b:3c:15:d2:05:ff:59:e2:a9:50:8e:f5:dd:
                    74:09:5a:1e:0c:ee:a8:bc:4d:b1:18:5a:c4:c7:41:
                    05:08:79:2a:7a:19:6c:99:7e:e3:42:76:18:27:ff:
                    ad:d4:eb:e9:ad:f1:49:59:cd:5f:c1:14:d3:f2:fb:
                    cb:d5:56:8d:1b:b8:c4:3c:0a:cd:b5:39:d5:39:1c:
                    9b:b0:1f:bf:5e:b4:7a:d9:58:5f:b1:84:e5:17:36:
                    80:91:34:4b:49:ed:ec:34:d5:c7:91:1c:57:bf:75:
                    cf:2b:8d:71:a2:5f:e6:f1:6f:8c:b4:15:42:2f:7c:
                    c3:21:f4:11:0c:b6:fe:d6:c8:e4:67:a0:0d:92:d9:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FA:5D:A9:E1:D4:21:9D:3A:91:74:CE:2D:4F:08:33:9F:63:23:2C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_pdqeHUIZ06kXTOLU8IM59jIyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:4d:8d:15:d6:2d:f7:64:25:d7:e1:81:20:29:b2:10:6a:
         5c:0f:1d:ab:56:e4:83:38:85:76:ec:26:88:59:87:23:f7:b8:
         95:b9:a6:66:fe:2e:3b:e3:9e:5a:c5:44:37:53:63:2b:d4:53:
         03:c6:9e:f9:bc:ad:b1:7e:fc:80:f9:3f:db:d4:9d:5f:66:3b:
         54:44:4c:19:0a:80:7c:36:6b:ca:a9:a4:99:8c:bb:a5:44:54:
         95:f6:65:27:e5:97:d5:fa:e7:6e:f8:c0:62:3c:ab:ac:b3:4d:
         2f:e6:17:01:15:69:35:20:c9:04:de:ea:a4:b5:aa:df:8a:fa:
         e4:28:23:72:d4:d4:c8:c8:3c:6a:6d:c1:92:d4:99:01:89:b0:
         f5:59:b2:33:44:61:8f:63:5d:15:6d:8b:66:06:60:4e:c1:5f:
         ab:5a:5b:db:34:e0:92:c1:db:ae:f7:b6:8d:3c:11:93:19:98:
         30:bf:5b:01:9b:52:8b:2b:7c:c0:56:9c:1f:89:89:23:2b:e3:
         85:3e:06:65:61:40:19:81:c3:92:73:4a:a2:33:a1:0a:68:2c:
         74:81:e7:ab:14:5e:b7:d1:34:6f:e0:fe:80:69:f8:5d:39:99:
         28:75:d7:63:ae:09:00:3c:7b:2a:4e:60:c4:c4:ba:12:51:e8:
         01:b0:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net