Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/liDzsX8GEr1WXgCMevmEsK9lJMg.roa
File:                     liDzsX8GEr1WXgCMevmEsK9lJMg.roa (raw, json)
Hash identifier:          kvegLnPkrVsv9unApgVprKb1e5InpXV88/LE4nnHFdY=
Subject key identifier:   96:20:F3:B1:7F:06:12:BD:56:5E:00:8C:7A:F9:84:B0:AF:65:24:C8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03D5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/liDzsX8GEr1WXgCMevmEsK9lJMg.roa
Signing time:             Tue 01 Apr 2025 01:28:53 +0000
ROA not before:           Tue 01 Apr 2025 01:28:53 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=9620F3B17F0612BD565E008C7AF984B0AF6524C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:24:40:d2:0d:f5:52:68:98:09:fa:95:c5:
                    27:7a:ef:c5:b4:16:c7:5f:6e:6d:dd:3e:27:7c:ea:
                    2d:36:ea:51:0b:44:79:a4:3c:ff:fd:a7:18:38:3b:
                    81:43:82:8b:3e:c9:23:dc:a7:44:98:4b:97:e9:d8:
                    a5:65:9f:51:41:6a:2b:33:3e:b2:09:4b:b3:21:96:
                    5e:dc:10:c5:65:88:28:8e:a3:64:02:da:b1:d3:a6:
                    21:42:6f:0c:66:b4:70:d3:9b:c8:39:15:2a:7b:4a:
                    23:31:4d:1e:a1:6a:b8:7a:05:38:c3:2e:88:23:21:
                    5a:15:46:08:e4:15:91:5c:e5:27:1c:c0:c4:75:4b:
                    86:b1:13:a5:f2:b1:42:51:ef:88:cf:e9:b9:bd:74:
                    18:5e:7f:61:e2:ce:78:0c:36:c7:62:b9:2c:85:46:
                    82:84:e8:75:48:6c:ff:36:ec:38:da:94:39:48:31:
                    f6:25:05:2c:73:b8:79:2f:c9:65:76:8b:9d:e4:3f:
                    af:4c:31:a3:d9:58:64:39:2d:ca:d1:14:91:2c:25:
                    64:f5:f0:46:59:c7:a4:7d:38:ac:ea:74:44:c6:db:
                    8e:28:ca:49:ac:db:04:f3:28:e3:23:57:db:aa:86:
                    74:27:d1:5a:47:7f:78:39:8b:64:1a:a2:78:24:56:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:F3:B1:7F:06:12:BD:56:5E:00:8C:7A:F9:84:B0:AF:65:24:C8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/liDzsX8GEr1WXgCMevmEsK9lJMg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:e7:c8:0a:7f:f1:32:d1:f8:91:c1:b0:69:25:85:b2:a5:
         d3:a0:44:d8:35:8b:82:e2:8f:88:21:b2:bc:20:94:8b:fe:40:
         ca:68:4d:c4:33:2a:77:8b:6e:b4:e6:d2:bb:e6:57:81:8f:19:
         d9:6a:91:36:f5:2d:95:b2:93:63:95:70:82:7d:a1:0c:e8:e6:
         8a:81:c5:0f:9f:b1:c7:5d:1d:95:58:0a:ad:cf:16:a4:23:5e:
         c0:46:59:59:ca:59:e6:63:d4:a9:6e:98:94:4e:27:8e:2c:31:
         10:ee:f6:31:3a:c0:ac:a5:c5:04:05:45:52:9a:35:cc:aa:e1:
         50:61:9b:8c:2f:e9:3d:88:4f:8d:ce:05:1b:04:00:18:07:ac:
         b5:bb:4d:95:4c:e2:22:70:90:41:93:4d:dc:8a:b7:26:7e:2e:
         9a:8a:f7:41:87:48:37:0d:22:8c:e1:73:8c:3a:21:04:b2:9c:
         95:36:38:8f:0b:05:8d:04:98:73:0d:9b:e6:2e:bf:2f:8b:3f:
         7d:2c:f4:6c:c2:07:4a:1a:4b:59:64:90:27:6f:0a:2c:44:30:
         a5:69:49:bc:58:18:da:7a:ca:8a:07:c3:a5:18:8f:f4:ac:29:
         c0:cd:b7:40:e1:2d:b9:1e:32:a6:52:39:17:8a:37:80:4d:9f:
         8e:e0:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net