Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/epATpgtbIauAtygIunGMh-6ppjk.roa
File:                     epATpgtbIauAtygIunGMh-6ppjk.roa (raw, json)
Hash identifier:          fsptvf6ZJqeWtF9taCivaYGUIkTjFKooQ5Tc0DLyKY8=
Subject key identifier:   7A:90:13:A6:0B:5B:21:AB:80:B7:28:08:BA:71:8C:87:EE:A9:A6:39
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0417
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/epATpgtbIauAtygIunGMh-6ppjk.roa
Signing time:             Tue 01 Apr 2025 01:35:33 +0000
ROA not before:           Tue 01 Apr 2025 01:35:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:2700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7A9013A60B5B21AB80B72808BA718C87EEA9A639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:05:9e:a7:51:e0:30:75:99:94:09:58:58:
                    fa:f1:a7:8d:3f:30:b2:58:8a:13:d2:af:2d:9b:75:
                    44:67:b5:8c:13:24:aa:5d:f8:32:a0:04:ad:9b:f0:
                    db:f4:a3:f4:9f:e5:0b:89:0f:1e:cd:b4:04:cc:90:
                    2c:1c:cb:34:61:e7:05:9c:3b:75:44:bc:e5:6e:3e:
                    00:26:e1:a3:2f:3c:f5:0a:69:7a:8f:9e:81:08:05:
                    d1:c6:4b:30:5f:e1:ea:17:2c:20:51:c7:c9:bc:fc:
                    60:bf:83:f4:ca:09:49:3f:bd:24:f2:6f:55:39:28:
                    a9:dc:9b:3c:b0:66:92:c8:07:b4:7e:49:67:e4:9d:
                    64:b5:ef:82:93:65:60:04:f2:db:09:29:fb:5e:54:
                    2b:0c:c7:3e:e5:eb:5c:f2:7a:41:9a:e8:83:3c:42:
                    2a:f3:db:9e:ee:cf:b4:e4:9d:b9:03:13:ef:34:56:
                    7a:02:4a:14:33:f0:1c:f9:28:ad:cb:48:61:71:98:
                    ab:da:c3:53:73:0e:d9:46:15:d2:7e:38:c3:82:74:
                    e2:2f:b6:23:42:3e:f2:44:ed:8a:ea:7f:61:22:8b:
                    4e:82:5a:1e:09:b8:fe:e6:f0:f4:52:db:1f:89:8a:
                    29:4e:06:00:2a:68:5d:7c:e0:ba:de:81:b6:6a:31:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:13:A6:0B:5B:21:AB:80:B7:28:08:BA:71:8C:87:EE:A9:A6:39
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/epATpgtbIauAtygIunGMh-6ppjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:38:39:7e:1a:96:d9:b4:d4:fb:2d:76:2d:0b:69:30:6d:
         7a:1d:d6:c9:ee:68:47:5e:5e:80:fa:b1:54:53:40:36:8a:50:
         dc:81:53:b1:d3:c3:22:d7:ee:c3:25:e2:d0:b5:5b:14:8f:38:
         d1:8d:46:c7:5a:e5:ac:98:7e:e9:cd:08:98:21:84:f0:4d:b1:
         78:63:be:65:ba:8b:c4:9a:d2:50:6e:17:34:19:a4:a3:04:4f:
         b0:82:f2:54:3c:19:53:33:80:d7:6a:e0:15:98:35:5b:c5:e2:
         48:6b:19:71:40:67:31:63:4c:da:6d:85:99:9e:62:00:d7:1b:
         b7:0d:d5:54:7f:a9:22:fd:8b:30:4a:c4:2d:0e:aa:b5:b4:2f:
         77:4f:b3:c8:c5:b9:a9:8c:73:e3:47:de:6c:ef:d2:e1:f4:3d:
         cb:1f:06:54:04:be:55:c3:cf:b2:76:f6:28:ff:bc:d3:ec:e9:
         51:e0:4e:a7:b5:96:1c:5c:70:6a:e3:b1:b0:c4:d2:01:98:e2:
         48:93:8e:21:97:ad:50:ea:af:0a:54:4f:0a:ce:6a:5f:22:5e:
         51:7e:bb:52:26:a0:af:44:19:df:df:5f:e8:f5:79:65:e3:e9:
         b2:3c:9e:12:80:4e:ea:a2:7f:75:8e:25:55:2e:34:7f:c4:49:
         47:97:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net