Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tsygtDG7BeCfuU8qzDyBs5uyM7w.roa
File:                     tsygtDG7BeCfuU8qzDyBs5uyM7w.roa (raw, json)
Hash identifier:          9uVcM4T8jAsfIXdSNZQBjeK5r98LxMpmxZlXMWRhl58=
Subject key identifier:   B6:CC:A0:B4:31:BB:05:E0:9F:B9:4F:2A:CC:3C:81:B3:9B:B2:33:BC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03D0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tsygtDG7BeCfuU8qzDyBs5uyM7w.roa
Signing time:             Tue 01 Apr 2025 01:28:51 +0000
ROA not before:           Tue 01 Apr 2025 01:28:51 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:c200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:51 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B6CCA0B431BB05E09FB94F2ACC3C81B39BB233BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:08:28:fe:6a:db:46:fa:47:8e:2e:42:5d:
                    83:57:3f:5f:0b:49:85:fe:74:1a:35:12:0e:0c:66:
                    36:92:76:5f:5b:96:90:09:ef:bc:7c:3f:71:05:17:
                    7f:4d:4c:10:ff:b9:57:78:67:0a:47:d0:16:43:99:
                    41:57:48:c2:ff:ee:d0:b0:a5:07:33:c5:2e:82:06:
                    0e:f1:e0:a3:87:7e:be:3d:bb:6c:e0:fe:ee:8c:63:
                    10:ca:a5:32:0b:f0:a9:c8:1b:68:f8:4d:bb:b7:4d:
                    c1:93:ee:a2:67:01:20:65:f9:7b:0f:fa:5d:14:64:
                    e3:f7:3a:42:92:8a:5f:59:c3:13:b2:3f:db:9e:c4:
                    29:b1:d9:46:d2:29:e4:bc:3e:26:ad:cd:38:05:3c:
                    00:c2:f8:1a:f0:2f:48:25:38:b8:8a:1f:b3:ac:d3:
                    a3:b5:48:5c:fd:c0:54:3a:02:a4:97:e7:ad:6a:0f:
                    59:43:6d:d7:9d:ea:1e:8e:0e:ec:16:9b:1a:c1:f7:
                    91:59:19:7b:0d:73:eb:bf:a0:c3:f7:85:7b:51:9c:
                    69:ef:cc:68:9b:fe:2c:42:a4:20:8b:ae:12:5e:aa:
                    ee:0b:e5:9f:a0:3e:e0:3a:fa:0b:25:15:ce:3b:f6:
                    13:1d:83:40:2a:15:11:a3:6d:be:de:84:52:3a:15:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CC:A0:B4:31:BB:05:E0:9F:B9:4F:2A:CC:3C:81:B3:9B:B2:33:BC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tsygtDG7BeCfuU8qzDyBs5uyM7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:65:f6:d6:87:d1:b0:c2:4d:94:5b:d1:8d:0e:2e:16:27:
         71:98:75:66:27:aa:46:0c:ed:15:3d:ba:e4:5e:fb:4a:bf:3c:
         51:d6:4b:35:62:1f:f1:e2:38:0f:94:e5:c9:f4:49:18:15:f8:
         15:70:54:ec:16:7b:d5:b8:f2:6d:e7:a1:85:f3:c1:59:7e:6c:
         ee:79:e4:1e:d4:b3:6d:4c:13:7a:5e:5d:44:19:e3:7f:1b:2d:
         c4:d4:31:b7:ab:44:0c:33:87:1a:6e:a5:45:21:c2:1d:71:dc:
         7c:24:9e:7e:f0:fa:57:56:bb:12:a1:8f:a1:e1:a9:94:bb:6c:
         ec:23:c4:eb:74:ea:4d:3a:4f:d8:81:f9:17:a5:53:02:00:4a:
         d7:2f:a8:89:9b:14:32:b8:30:7f:a3:54:3f:01:34:02:66:83:
         b6:b4:3a:c2:3c:49:e0:8f:06:00:9a:f3:e1:0f:70:4d:c7:b5:
         c8:20:7a:29:82:d0:f8:0e:67:15:0a:e1:a0:4c:49:bb:83:95:
         73:55:d5:20:e2:52:18:32:fb:0c:45:a8:f7:91:8b:d6:03:36:
         de:74:08:c4:d6:bb:31:fa:55:a6:53:1e:f1:5a:a7:94:a4:dd:
         8e:d6:b1:a1:35:76:7c:fd:d3:29:f8:5e:59:82:a6:20:28:b8:
         98:20:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net