Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t6jfrw1kbPAa1U98ozdmG0dQNK4.roa
File:                     t6jfrw1kbPAa1U98ozdmG0dQNK4.roa (raw, json)
Hash identifier:          cWzd4bV9PyIldh5FfHzGzx09j+OVMe6t3dF24ALiSvQ=
Subject key identifier:   B7:A8:DF:AF:0D:64:6C:F0:1A:D5:4F:7C:A3:37:66:1B:47:50:34:AE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04BA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t6jfrw1kbPAa1U98ozdmG0dQNK4.roa
Signing time:             Tue 01 Apr 2025 01:52:49 +0000
ROA not before:           Tue 01 Apr 2025 01:52:49 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:d500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:49 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B7A8DFAF0D646CF01AD54F7CA337661B475034AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:07:a7:48:22:96:49:14:c3:cd:21:57:aa:
                    80:87:4e:7d:a9:ac:d5:39:0e:27:62:83:90:b8:1a:
                    6c:ce:9b:47:b9:83:28:78:49:1c:c4:2a:c5:ee:b8:
                    dc:92:a8:d7:b5:32:fa:b6:15:5a:d0:84:12:63:fb:
                    8d:66:f5:bc:6f:be:45:a6:92:11:92:72:4d:99:44:
                    72:1e:a2:54:51:1b:e9:e7:f4:e8:72:ae:06:ad:e3:
                    0c:14:8d:69:ad:c3:5e:ee:dc:7a:9f:84:62:c8:87:
                    36:43:0c:60:ba:7b:8d:8e:b0:c6:2c:ba:f0:23:a5:
                    6d:aa:82:dc:50:7a:be:c6:e3:2e:80:2e:f8:f3:87:
                    5d:ff:4e:f6:5f:f8:b5:bb:84:e3:2b:35:ca:59:1d:
                    2b:1b:58:f5:de:9b:22:b3:0a:a5:94:f6:43:60:a0:
                    d8:e2:09:e2:74:91:66:c9:7a:a1:e4:8a:9f:06:91:
                    8d:d3:b5:4e:f8:e4:5d:a8:cb:ff:14:eb:42:11:f2:
                    ab:28:73:b9:39:e2:a2:f7:85:a8:0f:7b:32:dd:fa:
                    4b:16:ab:e0:83:a3:89:03:35:d0:61:8c:27:b8:79:
                    af:8a:23:be:65:34:1f:e2:fe:19:5a:a4:4a:c6:01:
                    26:2d:d6:df:3f:5d:76:c5:03:6b:cc:1a:26:3c:9b:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A8:DF:AF:0D:64:6C:F0:1A:D5:4F:7C:A3:37:66:1B:47:50:34:AE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t6jfrw1kbPAa1U98ozdmG0dQNK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:33:4c:95:c8:69:1a:fe:fc:58:dc:98:b7:56:1f:aa:0b:be:
         c2:5c:18:f9:ae:67:12:bd:3a:8f:1e:ff:88:d1:ed:76:f6:4f:
         a9:a9:f6:50:6c:69:79:e3:2f:0f:dd:1d:dd:7b:c0:63:5a:5a:
         16:10:1e:79:84:55:0c:f9:3a:f4:d8:f2:66:18:ba:19:fb:a6:
         41:fc:d6:c7:5f:5e:db:f4:75:6d:33:90:88:8b:c1:d9:17:80:
         8b:a2:e3:de:8e:50:a5:82:47:8d:2c:0d:fd:2e:4b:aa:97:61:
         65:86:5a:9e:30:10:9d:70:45:4f:1f:86:b4:84:d1:4f:f0:8f:
         fc:be:e1:2c:2a:15:9d:7d:f4:c9:16:19:00:a1:e1:18:65:7e:
         b7:d6:a1:63:6d:4e:3f:90:9a:4f:02:51:9a:81:b2:56:c1:65:
         45:f4:97:9c:3e:63:00:89:16:c6:af:d8:0c:25:23:50:e8:1a:
         92:6a:29:b5:15:a2:16:78:0b:e4:02:57:c1:00:a3:2a:84:f5:
         23:2b:fd:12:77:9e:72:9b:14:ea:31:08:ef:76:f0:8a:5a:0b:
         e5:42:aa:4c:16:a9:b0:68:10:f9:dc:db:c4:15:9c:81:74:a4:
         5c:5e:14:c5:2c:83:03:3d:e0:ef:4f:33:b3:51:57:7f:3c:bf:
         05:3a:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net