Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kpA9ej1C1vINshfHhL7_za9EaEc.roa
File:                     kpA9ej1C1vINshfHhL7_za9EaEc.roa (raw, json)
Hash identifier:          9F0j327knBo/as7utrApkqpHjXuixGCh9rItijT5iqc=
Subject key identifier:   92:90:3D:7A:3D:42:D6:F2:0D:B2:17:C7:84:BE:FF:CD:AF:44:68:47
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03EF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kpA9ej1C1vINshfHhL7_za9EaEc.roa
Signing time:             Tue 01 Apr 2025 01:32:05 +0000
ROA not before:           Tue 01 Apr 2025 01:32:05 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:05 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=92903D7A3D42D6F20DB217C784BEFFCDAF446847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:53:b9:f8:16:17:c4:87:66:fa:d7:69:07:
                    66:0a:cc:38:0c:c2:c7:9c:7e:3a:dd:c9:4a:04:cb:
                    14:6d:3b:2c:cb:a5:0c:70:b8:dd:da:54:24:c1:3d:
                    0f:45:7c:79:4b:9f:31:02:11:01:2b:a5:36:6f:0d:
                    d8:1d:f4:6e:31:ea:4e:ce:ae:ec:8f:06:ab:df:3b:
                    55:fa:58:3e:2b:a8:b8:7b:64:7d:46:91:f8:0e:f4:
                    6a:47:38:f1:c9:9b:82:ea:12:b7:c2:0c:68:37:c3:
                    4a:a3:75:ee:49:39:76:43:a5:26:00:fc:e5:a4:7a:
                    25:e4:86:1f:ee:cd:04:ea:0d:c5:7c:05:a3:a0:0e:
                    bb:e6:ac:6c:3c:32:5b:b9:08:98:aa:93:61:d1:c0:
                    63:f7:4b:59:9a:22:51:9f:f1:0b:e5:dd:8f:df:14:
                    c4:36:b6:82:30:23:94:70:00:cd:7b:d1:17:df:f4:
                    ab:6c:f9:7f:54:57:76:b6:90:9d:ab:0d:c7:ab:04:
                    09:46:e8:1b:7a:da:74:78:1c:08:b6:e0:d1:7f:8f:
                    2d:e5:61:58:20:ab:54:7b:3e:52:a6:a4:61:33:17:
                    88:66:c1:ab:2d:b6:00:be:fe:3f:0f:60:73:42:c8:
                    a8:e3:8a:4f:c7:07:9f:57:17:6e:44:92:82:c3:ef:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:3D:7A:3D:42:D6:F2:0D:B2:17:C7:84:BE:FF:CD:AF:44:68:47
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kpA9ej1C1vINshfHhL7_za9EaEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:d2:f5:8a:a5:16:45:e3:ac:cf:71:dc:c1:50:2d:f8:d5:e0:
         8b:c3:0d:68:0d:11:48:46:ee:7d:ec:50:b1:50:b4:f7:85:15:
         fc:90:e1:4d:ad:ea:97:d5:5d:34:74:9b:79:16:14:84:25:6b:
         b2:25:32:ee:09:a4:e1:9a:0d:de:7d:46:13:70:c1:28:a1:95:
         9c:df:48:a0:26:15:7c:b8:bb:77:4e:25:be:d2:8d:57:d8:ac:
         cf:39:b5:0c:53:c5:a8:c4:21:57:87:11:b4:6b:dd:f9:79:d3:
         72:7a:68:f6:b2:20:52:22:4d:91:46:72:74:48:4a:fd:e5:de:
         0c:52:19:4e:91:3c:2f:88:3d:92:47:5c:c1:a8:6c:9b:d4:a3:
         43:f4:bc:88:4f:df:32:df:f5:88:98:d2:ff:09:be:4f:27:de:
         11:d0:71:8d:57:7d:d1:f5:23:5c:53:3b:23:e8:08:c4:5a:97:
         61:4e:72:45:16:c1:53:0d:5c:02:39:84:29:11:18:fb:93:6b:
         63:d2:db:22:6e:bd:44:02:db:b1:a3:e1:52:86:57:11:d8:75:
         0c:c3:6b:6c:e2:cd:3b:cf:42:34:bc:4c:f7:cc:b7:23:da:ef:
         6f:40:a4:1b:9a:b2:4b:7e:90:93:e4:0d:fa:4b:d5:8b:6a:ba:
         46:ae:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net