Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eXDNbEWDR4Xipbo3sbCWl6YA3h8.roa
File:                     eXDNbEWDR4Xipbo3sbCWl6YA3h8.roa (raw, json)
Hash identifier:          M0O+iMRNxGe0TZBa6XgKdBxZvjLbkB3e1gSJM1lq+aE=
Subject key identifier:   79:70:CD:6C:45:83:47:85:E2:A5:BA:37:B1:B0:96:97:A6:00:DE:1F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eXDNbEWDR4Xipbo3sbCWl6YA3h8.roa
Signing time:             Tue 01 Apr 2025 01:28:46 +0000
ROA not before:           Tue 01 Apr 2025 01:28:46 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:ab00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:46 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7970CD6C45834785E2A5BA37B1B09697A600DE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:55:ad:20:4a:72:c5:2a:64:af:06:1d:c9:
                    98:05:71:ac:e8:fb:76:6c:9b:d9:a2:16:72:1a:98:
                    65:49:aa:f9:3a:41:f0:8b:3e:aa:21:c1:b1:8d:a0:
                    2e:3f:92:fa:4b:f7:ad:09:06:d0:30:bc:29:02:b8:
                    2b:8c:5c:07:d4:5b:1b:0c:78:bc:75:36:15:e7:a9:
                    e0:a2:e7:51:45:37:02:a0:22:4a:ee:ea:27:1c:63:
                    88:b9:15:74:1e:74:df:43:6c:73:ed:2a:c6:20:c5:
                    df:11:4b:62:6b:25:19:b8:bf:1e:e2:77:57:33:d8:
                    76:6b:0a:41:4e:1e:3d:27:0f:33:f7:0f:a1:1b:3a:
                    63:d6:c2:58:99:cb:25:bc:48:28:e2:90:c8:4c:67:
                    b3:2c:9a:fb:22:a6:df:89:52:ce:45:e7:62:1d:35:
                    86:09:c4:73:c7:f0:61:5c:de:69:ec:ed:9f:c5:f2:
                    fc:fd:08:dc:47:35:62:24:32:20:f2:d8:c4:a0:37:
                    81:c0:20:c8:4c:48:46:f0:88:ce:5a:fd:e2:3e:34:
                    fe:62:a2:ab:e5:0b:cd:4c:5d:26:61:f7:87:c9:9b:
                    4b:59:f1:ca:a9:1e:d6:f7:b5:47:76:d0:1d:32:7e:
                    28:dd:c8:27:3a:86:dc:43:6e:5a:38:41:6d:08:4e:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:CD:6C:45:83:47:85:E2:A5:BA:37:B1:B0:96:97:A6:00:DE:1F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eXDNbEWDR4Xipbo3sbCWl6YA3h8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:3c:73:ba:80:b8:4e:da:1b:92:2c:8f:da:93:11:7a:8d:
         10:80:4c:6a:bc:01:05:60:86:f9:3f:7d:5b:0a:93:f4:cb:96:
         8c:2d:c9:f2:f0:34:43:3c:4c:e1:b6:44:3f:18:02:83:96:4d:
         b0:05:47:f8:38:bc:ec:92:a3:cd:41:2b:8e:99:50:26:60:5c:
         c0:bc:2b:d1:ae:fb:78:7e:80:2f:94:7c:27:79:16:37:a9:8b:
         fe:4c:9d:ca:ac:c9:ff:bc:fe:60:a4:20:68:17:c1:1a:3a:a5:
         54:be:6b:9a:c2:a8:67:ee:b7:18:e9:eb:37:d5:57:97:63:23:
         be:1f:7a:59:d8:0e:de:03:96:80:cc:32:39:5b:6e:38:37:7d:
         bb:c9:4e:82:21:ba:59:00:51:51:64:c3:99:61:cb:94:d9:aa:
         cb:21:5f:83:08:35:62:9f:b3:a8:c6:95:9f:c8:53:f6:7a:d3:
         83:92:b9:f1:ad:bd:bb:e7:31:f6:ba:89:7c:79:cd:c6:14:ab:
         f9:3f:21:48:00:0a:09:78:d6:bb:55:e2:52:56:7a:47:f0:97:
         14:7d:c3:87:1d:3c:c9:9d:76:71:b5:11:2c:61:76:c8:45:88:
         21:d9:ba:d2:e6:f5:c8:78:07:d3:bf:9a:30:f9:7d:dd:fa:95:
         23:e9:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net