Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tCMAeaFUpCVqi-Z_j-kamEWNjJk.roa
File:                     tCMAeaFUpCVqi-Z_j-kamEWNjJk.roa (raw, json)
Hash identifier:          yo8tRJH1iHaB4LhAMUzW71UFzt3cMw0MqJ36bGxjtuQ=
Subject key identifier:   B4:23:00:79:A1:54:A4:25:6A:8B:E6:7F:8F:E9:1A:98:45:8D:8C:99
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0480
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tCMAeaFUpCVqi-Z_j-kamEWNjJk.roa
Signing time:             Tue 01 Apr 2025 01:45:36 +0000
ROA not before:           Tue 01 Apr 2025 01:45:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B4230079A154A4256A8BE67F8FE91A98458D8C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:1e:3d:34:83:55:4a:55:dc:f6:8a:5c:4b:
                    1a:84:cd:63:13:5a:8f:6b:0d:1f:58:7b:73:98:f8:
                    11:01:f3:be:a6:3d:40:36:fe:1d:ec:5d:e7:84:4f:
                    c1:87:a8:d8:24:51:e1:11:ed:06:6b:91:4e:6d:c0:
                    a4:e3:a6:74:e1:21:e7:17:12:b5:66:7e:4a:3c:87:
                    53:5b:58:49:6d:d0:b8:e4:0d:4d:20:9e:e2:b8:a6:
                    ae:0d:03:44:f2:b3:b8:1d:38:a8:c0:31:12:5a:3c:
                    c4:cc:a9:4f:a4:40:4f:ea:f0:13:2d:1a:7f:30:57:
                    c1:74:25:e7:b7:31:8f:c8:2a:11:63:aa:e3:c4:51:
                    f8:57:fd:a8:41:6b:b0:16:ac:a1:fb:a7:48:11:f9:
                    53:6d:53:b2:cf:3d:bb:41:e6:be:f9:02:47:06:a8:
                    f4:ee:4f:eb:ac:7e:87:5d:b5:6e:82:26:66:60:d1:
                    3b:7c:7b:a9:cf:ad:a3:cb:8f:4b:c3:3c:e4:51:bb:
                    32:b8:b2:f4:07:a3:c6:9f:7b:f8:e8:11:79:6d:6a:
                    09:2b:09:b0:b1:5d:e4:52:45:50:bd:de:54:a0:55:
                    82:33:55:9f:6d:af:cd:25:25:20:6d:15:db:17:6d:
                    88:1d:40:64:10:b6:e2:2d:03:56:18:79:7d:64:ea:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:00:79:A1:54:A4:25:6A:8B:E6:7F:8F:E9:1A:98:45:8D:8C:99
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tCMAeaFUpCVqi-Z_j-kamEWNjJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:67:98:4b:18:ba:ec:94:6e:c3:f9:6f:8b:c9:96:27:96:db:
         f7:9f:ef:19:17:8f:1d:77:e2:fa:8e:46:41:9c:ab:21:f1:5f:
         6b:dd:93:17:84:38:d2:22:49:47:3a:c0:64:fe:11:9d:c4:a9:
         74:41:01:13:b2:e7:6d:d4:1d:68:bb:95:d9:8a:c8:b2:72:73:
         bc:e6:b0:78:24:40:64:c9:98:26:1b:67:7e:96:34:d7:04:46:
         a3:50:f6:6b:4a:a1:1b:9f:1e:09:53:e3:c9:39:46:7e:5c:ef:
         15:36:4f:33:11:c9:4d:db:e2:cc:1c:e7:78:87:8c:ba:fb:57:
         d8:5b:37:b6:cf:8e:15:86:da:71:2d:43:91:08:6c:33:0f:bc:
         1f:33:09:d5:0e:60:07:b5:5e:11:a9:5e:b1:e8:ef:51:f6:97:
         ff:ee:ca:0e:7e:0c:6f:eb:8a:01:a0:43:1e:9a:f3:52:25:7c:
         13:aa:1c:52:d3:32:b8:25:1d:98:ce:bc:4b:04:a4:73:3f:32:
         d4:b5:c0:a4:48:a4:d3:33:7c:ba:fa:cb:c3:35:6c:ef:22:a7:
         19:bf:8e:27:b7:b1:1d:12:87:2e:22:61:f0:b3:e0:4c:99:e2:
         b3:55:c9:9d:d3:01:bf:16:44:b4:df:65:6a:1b:b3:0d:0c:39:
         95:05:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net