Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pQDhY8jkJDcbQbW2vkY_slb5mvg.roa
File:                     pQDhY8jkJDcbQbW2vkY_slb5mvg.roa (raw, json)
Hash identifier:          ObOxNmaEBMsIXw3rhOTiGvpg7anLE34yUn9PJ8aXG18=
Subject key identifier:   A5:00:E1:63:C8:E4:24:37:1B:41:B5:B6:BE:46:3F:B2:56:F9:9A:F8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03D7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pQDhY8jkJDcbQbW2vkY_slb5mvg.roa
Signing time:             Tue 01 Apr 2025 01:28:54 +0000
ROA not before:           Tue 01 Apr 2025 01:28:54 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:54 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A500E163C8E424371B41B5B6BE463FB256F99AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:57:ae:f5:87:6b:8e:d8:77:07:72:7e:c4:
                    29:34:f8:c0:3a:61:7e:77:ad:fa:1b:f9:9f:72:8e:
                    54:e5:7d:b9:f7:d7:40:11:ca:9a:74:05:bd:ab:26:
                    b2:b6:48:05:2c:74:34:32:e1:01:85:ad:be:33:e9:
                    07:be:63:b2:bf:af:a9:37:f3:bd:f0:d5:d5:f3:9a:
                    fa:0a:ac:2b:08:a7:4b:6c:43:c5:dd:41:eb:16:e6:
                    c6:f1:85:08:fe:63:51:06:7f:60:42:9f:df:6f:83:
                    53:61:39:0f:a0:1c:7b:56:de:65:ec:3f:92:34:f7:
                    1f:49:ff:66:ca:c8:17:57:1c:ce:5f:a9:09:41:d5:
                    c0:3e:4b:b1:b2:4d:d7:96:64:54:84:75:0e:f8:b3:
                    52:03:b6:f8:38:ac:8e:b8:63:fe:d0:92:32:f0:bb:
                    c3:54:5c:53:68:b4:1f:02:37:f1:f0:05:e8:69:19:
                    37:ca:33:2c:4d:7c:60:3b:39:53:d8:9e:f8:aa:77:
                    de:aa:58:88:e9:99:79:8f:b9:e6:ef:69:9b:4d:3b:
                    2d:47:b4:7b:5d:29:2e:9a:a8:ba:8c:3e:9e:89:30:
                    11:68:b7:ab:69:3a:d1:25:c8:48:7c:22:db:ee:ea:
                    60:85:37:24:8e:65:a1:1e:11:2d:b1:d6:41:30:f0:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:E1:63:C8:E4:24:37:1B:41:B5:B6:BE:46:3F:B2:56:F9:9A:F8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pQDhY8jkJDcbQbW2vkY_slb5mvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:82:14:66:77:40:5a:1c:5c:ac:e8:32:ba:03:5f:7c:bd:e5:
         cd:59:85:8d:f7:8d:a7:93:a9:8b:11:33:77:35:f1:d2:c4:61:
         05:c7:1f:4e:eb:e9:c9:7a:de:5f:77:06:75:82:c9:c8:b9:d0:
         db:3c:83:2d:07:b3:3e:e6:26:3e:05:98:1d:75:f5:94:89:26:
         11:96:da:bb:8a:d2:37:95:66:c3:a7:44:1f:c7:dd:de:15:6f:
         a9:a9:9f:42:20:4c:07:8f:03:f2:6f:2f:e9:fb:c8:ea:0a:b6:
         71:ad:f0:7c:c4:b5:e0:c6:d2:d2:51:80:bd:a5:1a:fb:03:42:
         2b:33:09:6b:5f:75:25:9a:15:8f:01:9a:f3:05:67:02:17:9b:
         64:8b:9e:84:ad:cc:86:c7:82:3d:4b:a2:20:66:21:c9:5f:a4:
         f3:89:dc:59:3d:39:97:06:f2:1b:46:9c:37:91:23:52:70:3e:
         3f:ec:a5:27:d3:46:bb:1a:49:15:8d:71:a7:ff:b2:20:83:48:
         fa:0d:5d:ef:8a:06:15:c8:ed:f7:f2:37:6f:2d:7a:84:dc:8a:
         6c:cf:db:8e:97:f4:a0:f6:82:11:4d:5c:e9:8b:79:9e:0e:51:
         1d:79:f2:7c:e4:a1:bf:48:e3:8c:8c:a8:be:48:92:b3:8a:1a:
         1b:54:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net