Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h7UHDxNM_igtBlxfDd91oJpYxx0.roa
File:                     h7UHDxNM_igtBlxfDd91oJpYxx0.roa (raw, json)
Hash identifier:          lEXxjzWjhm1eP9Kx27GwdFVQK6hNgwdlw9/Wvkh8278=
Subject key identifier:   87:B5:07:0F:13:4C:FE:28:2D:06:5C:5F:0D:DF:75:A0:9A:58:C7:1D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04E6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h7UHDxNM_igtBlxfDd91oJpYxx0.roa
Signing time:             Tue 01 Apr 2025 01:55:52 +0000
ROA not before:           Tue 01 Apr 2025 01:55:52 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:f500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:55:52 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=87B5070F134CFE282D065C5F0DDF75A09A58C71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:e0:45:04:5d:66:78:04:37:df:6e:ae:43:
                    04:db:00:a2:e2:3d:1c:4a:e3:5c:79:52:2b:b9:74:
                    84:f5:c0:53:c5:84:c8:0e:6e:e3:cb:0f:24:7a:a4:
                    ef:62:75:03:ae:2c:a7:2d:c7:7c:7f:09:37:db:0f:
                    6b:87:0f:da:98:42:4c:55:08:9e:30:3f:58:ae:2d:
                    fb:78:e8:1c:5a:92:a2:43:30:8d:07:30:cc:fe:5a:
                    61:74:60:21:08:0b:f2:a4:7c:ca:62:d1:56:be:45:
                    db:e6:00:d2:fe:55:1e:f4:12:56:8a:4b:9b:e0:57:
                    7a:40:24:0a:9e:15:3a:3f:99:10:69:48:27:04:b9:
                    4a:8c:11:e7:f1:80:17:ee:cd:a4:06:70:0f:72:fc:
                    a6:b6:5b:d1:35:b2:1e:72:6a:cf:79:b3:ce:79:c7:
                    52:b4:b4:4a:c2:b7:74:ba:7f:cd:dd:ab:af:c9:40:
                    23:27:08:b0:b9:a3:71:9c:37:79:a5:13:3c:05:0b:
                    ee:6c:f9:8d:8c:31:37:2b:74:38:d2:5c:db:fd:02:
                    83:6f:99:07:99:39:ac:cf:ae:12:53:45:68:67:c0:
                    61:f9:20:14:8b:39:48:57:b3:6c:ba:65:d0:5c:2b:
                    19:ed:5b:87:b6:63:96:d1:b7:00:ca:9f:d6:ce:8b:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B5:07:0F:13:4C:FE:28:2D:06:5C:5F:0D:DF:75:A0:9A:58:C7:1D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h7UHDxNM_igtBlxfDd91oJpYxx0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:a5:0d:70:a0:6d:c1:ca:44:d6:0e:4a:77:30:06:b6:88:a0:
         78:91:ac:e5:61:f6:9d:79:9c:3f:40:4e:45:11:38:54:b3:fa:
         64:5e:10:9c:3e:a1:52:28:50:07:e8:e2:2c:57:de:a1:dc:c3:
         67:bf:8d:e6:b3:e5:4b:b3:55:a9:43:0d:28:79:9d:6f:56:e2:
         b6:58:83:33:b3:c3:65:96:00:bb:ff:af:ae:4b:2f:dd:23:b6:
         71:15:03:c3:22:b6:0d:2a:c6:73:8c:f0:e6:77:f4:7b:01:01:
         a7:c8:0d:b2:46:c6:b2:71:47:ea:b3:1a:92:fa:9d:28:b2:2d:
         8d:f5:ab:50:a1:82:84:6c:5d:83:6a:57:78:d5:d4:39:a2:a0:
         3a:05:b9:c5:d6:b8:9a:aa:9b:19:57:39:8b:55:3c:cc:7c:c7:
         2d:e3:86:b2:e8:a1:7b:43:a6:65:a2:0e:92:bb:e9:e7:4c:3d:
         2b:88:c6:16:25:fd:02:bb:47:14:64:93:71:d0:fc:ec:32:44:
         82:27:99:4b:97:98:a8:30:aa:fb:ca:6b:77:14:8f:62:9d:86:
         09:43:ee:63:1d:99:5c:a8:cd:b9:80:71:7f:61:87:76:21:5f:
         ec:f7:30:04:94:e1:3e:6d:dc:66:0e:07:ff:53:79:18:88:da:
         0f:7d:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:27 2025 by rpki-client on console.sobornost.net