Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j-iz7vabVZaQVyYQuuxHPvXE_kM.roa
File:                     j-iz7vabVZaQVyYQuuxHPvXE_kM.roa (raw, json)
Hash identifier:          dSyQ4UgTPu9Hq/2B5NrhBrv1uyGZ3rJQyKn67n4Zros=
Subject key identifier:   8F:E8:B3:EE:F6:9B:55:96:90:57:26:10:BA:EC:47:3E:F5:C4:FE:43
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0449
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j-iz7vabVZaQVyYQuuxHPvXE_kM.roa
Signing time:             Tue 01 Apr 2025 01:39:35 +0000
ROA not before:           Tue 01 Apr 2025 01:39:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f010::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8FE8B3EEF69B559690572610BAEC473EF5C4FE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:6e:e0:58:86:a6:6d:26:06:39:93:51:2e:
                    c2:47:2f:43:66:f5:1f:e9:0e:c1:42:db:86:ed:f7:
                    22:89:2c:ee:69:ad:34:b7:8d:d8:79:14:34:af:41:
                    c9:72:a5:fa:78:97:a0:7b:95:28:e6:a9:43:f8:27:
                    8b:f1:9d:e6:1f:c9:49:28:34:5b:fa:45:34:96:60:
                    d7:ed:b9:2a:d7:1f:fc:41:77:79:3f:e4:3b:40:42:
                    dd:95:79:d9:1f:1b:62:bc:14:d2:28:08:81:fe:dd:
                    fc:b5:9a:54:0d:9d:86:05:c4:99:9b:f0:ed:7b:d0:
                    48:e7:6d:2c:ad:39:5a:dc:bd:41:65:21:f9:fc:1d:
                    5a:21:1f:95:6f:a9:d9:d3:5c:79:88:72:36:ed:b1:
                    46:fc:b0:2b:f2:43:58:fe:d4:92:83:c8:ef:7a:1a:
                    9f:10:ea:dc:88:ae:75:5b:c1:b5:4d:7e:93:aa:97:
                    16:bc:85:a9:b7:93:da:f9:66:df:0a:b2:b7:ab:ca:
                    97:a1:16:2e:d1:f6:4d:e2:41:6c:60:b3:36:9d:b8:
                    0a:38:a4:7a:fd:cd:55:be:a2:63:c8:47:b5:f7:07:
                    82:2d:bc:66:ab:f6:ac:07:2a:24:be:e6:ea:14:36:
                    0f:30:ae:96:80:69:ef:62:e5:a2:e2:33:ff:9b:a1:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:B3:EE:F6:9B:55:96:90:57:26:10:BA:EC:47:3E:F5:C4:FE:43
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j-iz7vabVZaQVyYQuuxHPvXE_kM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f010::/45

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:3c:ad:2a:0b:40:0a:05:cf:c9:92:d2:c3:47:69:8b:43:
         0f:17:a0:42:43:c3:a1:c5:38:d7:7f:69:3d:02:22:9e:67:9f:
         7d:5e:71:d6:be:d4:b1:d0:b0:02:c3:5b:63:a6:ee:c1:cc:67:
         f3:04:34:ff:bf:36:f8:9d:29:51:25:89:ac:03:1a:5c:57:f0:
         e9:21:56:a6:a0:c6:3b:33:e3:4f:38:8d:fe:c3:9a:ff:e1:fb:
         53:a3:af:ce:b8:56:1b:4f:f6:30:fa:59:3e:01:52:4c:10:98:
         d6:fa:cf:76:98:78:20:c9:7f:f6:60:c1:8c:95:57:82:01:c2:
         17:4f:ee:49:9b:b8:da:ae:aa:11:8e:67:9e:a6:0b:aa:1e:fe:
         72:95:e4:f0:69:42:c6:c1:81:fc:06:3e:ca:ca:ce:ce:bd:ba:
         27:05:42:ea:60:38:e4:e6:1b:0a:ed:b5:f4:13:60:c9:d8:ee:
         4d:c9:3a:cd:e8:d8:b8:c7:a4:b5:40:26:6e:b1:91:21:cb:c4:
         76:d1:40:9a:38:a0:a2:ef:22:3d:db:ee:c6:3a:69:d1:67:28:
         97:e0:ee:7e:40:25:07:6e:f8:e0:5e:5a:aa:2a:6f:6b:32:72:
         09:04:e6:cb:e5:09:dd:a8:e3:2b:6c:0b:ff:f6:5e:db:a7:73:
         bc:e9:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net