Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fvmNfDpS56BYc1JD4tdsBBzXaUI.roa
File:                     fvmNfDpS56BYc1JD4tdsBBzXaUI.roa (raw, json)
Hash identifier:          Crx4p66KHyqRG7LirClcFnWwAsZIgBvt7SKZAI/U2HI=
Subject key identifier:   7E:F9:8D:7C:3A:52:E7:A0:58:73:52:43:E2:D7:6C:04:1C:D7:69:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04A2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fvmNfDpS56BYc1JD4tdsBBzXaUI.roa
Signing time:             Tue 01 Apr 2025 01:49:24 +0000
ROA not before:           Tue 01 Apr 2025 01:49:24 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:24 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=7EF98D7C3A52E7A058735243E2D76C041CD76942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:87:fa:74:67:d8:d5:48:90:0b:32:72:54:
                    5f:64:1b:30:8d:8e:13:c5:78:bc:05:09:e8:d4:01:
                    8d:c3:fc:87:b1:ee:6a:d8:42:f0:76:3e:80:97:cb:
                    dd:95:32:b2:be:0e:6b:90:e2:82:7e:b7:21:c7:0b:
                    46:61:4c:0b:64:37:0a:58:38:a2:5b:d3:2e:0b:91:
                    a8:92:36:1b:2c:d9:e3:b2:4a:be:36:95:2b:b9:cb:
                    92:eb:a7:c1:f2:d7:ca:2b:2c:2f:8f:28:5d:44:fa:
                    30:d9:66:22:4e:73:b4:ea:65:38:d2:8d:8b:2c:a7:
                    3f:ed:f7:15:37:5a:d4:5e:4c:a4:18:60:80:b7:ef:
                    cb:2b:95:82:78:07:47:e4:be:20:02:72:79:1c:ba:
                    86:0f:df:a1:9e:21:e1:fc:90:16:8c:ef:89:c0:60:
                    82:9c:96:4a:24:5b:df:ec:f1:59:c3:ee:c9:cf:54:
                    00:8e:0c:95:a3:ae:ba:3c:98:9b:76:34:50:57:2c:
                    28:88:ba:3e:63:6e:f3:ac:41:bc:22:98:a1:d6:31:
                    52:2d:f8:87:9e:63:1c:97:6d:82:1d:f3:d0:17:56:
                    50:49:6b:36:df:59:6c:91:fe:e6:79:07:da:e1:55:
                    d4:20:38:0e:6c:e2:b5:6f:8d:ca:69:2d:29:ca:f0:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:8D:7C:3A:52:E7:A0:58:73:52:43:E2:D7:6C:04:1C:D7:69:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fvmNfDpS56BYc1JD4tdsBBzXaUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:d8:ed:1a:19:6a:1b:9a:9d:1a:81:e6:29:c9:b3:d3:ac:47:
         ca:fe:20:c6:cb:6a:f2:8e:41:d8:68:2f:78:db:e4:c1:37:c1:
         14:5a:d2:78:37:a7:56:97:43:bf:9c:f9:10:ca:76:2d:3b:fc:
         a7:cf:b7:65:8f:b3:76:41:f8:26:f7:a4:3b:c8:e9:0f:be:d8:
         63:16:b1:ce:f3:d6:12:6b:2a:03:1d:12:a6:4f:3f:87:34:ee:
         09:93:5f:17:ba:9f:e6:58:16:89:69:17:ba:9e:36:20:68:5e:
         58:2b:77:15:8f:cd:de:da:d0:d9:61:ff:84:26:92:3f:53:b5:
         86:29:21:98:fa:8e:ec:39:d9:7d:e1:10:0d:1f:29:1e:b0:8d:
         f7:10:42:cd:1a:3f:d2:2f:e5:61:24:cf:1b:5d:ec:02:95:ed:
         db:d0:ff:f3:24:f1:7f:1f:c8:74:56:05:d6:8c:90:f6:7c:9a:
         93:db:67:5b:cb:bb:89:22:5f:b7:ab:b0:d3:96:94:1f:7f:60:
         e0:bb:5c:f9:2a:c8:14:3b:95:69:e3:1b:ea:3c:fe:f4:fb:3d:
         3d:fa:43:4a:3e:d4:3d:72:e6:7d:97:8b:7d:6c:a0:64:3f:73:
         c4:f0:10:bb:d6:b7:fc:39:47:39:4d:78:ee:9f:3e:7a:8e:a1:
         f7:b7:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net