Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hUkg75ZlmJr345wKYdf_pIAfn6A.roa
File:                     hUkg75ZlmJr345wKYdf_pIAfn6A.roa (raw, json)
Hash identifier:          sv2yXZ7Ds1kpuCP05zMMpLnH9qGo44zTNaBadm7Hubo=
Subject key identifier:   85:49:20:EF:96:65:98:9A:F7:E3:9C:0A:61:D7:FF:A4:80:1F:9F:A0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04AA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hUkg75ZlmJr345wKYdf_pIAfn6A.roa
Signing time:             Tue 01 Apr 2025 01:49:27 +0000
ROA not before:           Tue 01 Apr 2025 01:49:27 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:27 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=854920EF9665989AF7E39C0A61D7FFA4801F9FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:29:75:01:ec:27:46:f7:35:55:31:f4:49:
                    0a:ca:10:8d:85:3f:1a:19:a2:8b:2e:32:8e:62:b2:
                    db:7e:cd:de:88:11:c0:11:31:3e:79:b6:5f:dd:90:
                    87:3c:1b:f4:da:b0:af:3e:43:0c:56:72:d9:68:e3:
                    a3:f5:de:e9:29:3c:94:55:6c:fa:29:83:c3:f4:06:
                    d8:e6:e3:cf:f0:27:0c:bc:76:d1:8e:5c:33:5d:a1:
                    dc:64:69:b9:50:06:f9:aa:37:93:07:2d:f8:28:78:
                    b7:86:6b:63:3b:68:c7:70:cd:7e:84:5a:77:d5:27:
                    05:60:73:66:00:de:e5:3b:4d:b7:96:83:22:f8:88:
                    a6:ba:b1:91:fa:62:35:97:ab:7e:9c:5e:2d:6f:99:
                    c9:ae:94:0a:99:f4:62:63:ae:33:59:82:57:24:07:
                    b0:b8:34:c7:4c:7c:55:ac:aa:51:f4:32:43:65:85:
                    57:f0:1e:79:c2:95:11:e6:b2:23:a0:a6:e3:35:f4:
                    43:28:ef:d6:92:b7:ce:45:36:9a:2e:a0:fa:fc:4e:
                    66:ad:86:60:c3:66:87:72:01:0b:a8:42:c3:24:a9:
                    94:cc:e0:3b:d0:b8:7c:7a:a9:6a:1c:02:78:f4:09:
                    9b:48:9e:9f:e2:f4:a9:80:43:31:df:8a:cc:88:6d:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:49:20:EF:96:65:98:9A:F7:E3:9C:0A:61:D7:FF:A4:80:1F:9F:A0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hUkg75ZlmJr345wKYdf_pIAfn6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:31:51:64:d0:5d:3e:25:6f:d5:05:9b:af:e9:2f:df:8c:
         dd:72:86:42:f2:20:4a:e2:08:62:ac:b7:e4:b9:f4:1c:b6:66:
         7a:20:05:08:ef:ad:dd:30:0c:84:5e:72:d5:79:15:a2:21:ef:
         aa:ae:e0:d1:62:38:7b:48:66:fe:e4:ee:91:4f:2d:cc:1f:b3:
         bd:c3:82:6e:3b:da:50:95:91:36:5b:8e:95:70:48:26:68:6d:
         11:d0:f9:6c:a9:8c:a4:8e:ce:d9:b9:53:a7:8a:59:b0:86:9c:
         62:c1:74:ee:ba:2f:ef:82:2f:8c:29:0f:af:ab:22:39:50:35:
         d6:33:9e:2b:3c:ae:4b:45:fc:6f:bc:11:89:b1:e0:e0:4b:b9:
         3e:d8:8c:6e:35:7d:e7:c3:37:0e:10:56:02:1d:4c:8b:52:25:
         c3:a4:ab:dc:35:6e:06:71:9e:7e:89:31:05:da:5f:84:0e:4e:
         2e:2d:f2:55:45:92:91:0c:18:b5:80:c6:0a:31:29:4e:98:e4:
         94:f8:d8:d1:4a:22:67:8a:a1:b2:6e:5f:de:fc:a1:6b:e4:36:
         05:5d:f2:7d:3f:5e:20:e3:16:a1:9d:32:ef:46:59:03:99:fb:
         6e:32:59:17:fe:78:ac:6e:d5:2c:c9:ea:5a:28:4e:05:51:1e:
         94:56:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net