Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ueGL7EaawPZ7_eSGwZfT1arMoEI.roa
File:                     ueGL7EaawPZ7_eSGwZfT1arMoEI.roa (raw, json)
Hash identifier:          M7SPYoomBI8GJA30ll0sLpeVKYQ5hOWUIdSbUaUgal8=
Subject key identifier:   B9:E1:8B:EC:46:9A:C0:F6:7B:FD:E4:86:C1:97:D3:D5:AA:CC:A0:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0424
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ueGL7EaawPZ7_eSGwZfT1arMoEI.roa
Signing time:             Tue 01 Apr 2025 01:35:39 +0000
ROA not before:           Tue 01 Apr 2025 01:35:39 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:4600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:39 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B9E18BEC469AC0F67BFDE486C197D3D5AACCA042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:32:c8:76:e1:70:d7:a4:3b:65:ae:cd:78:
                    85:51:7b:45:fb:ff:2f:8f:38:d1:92:3e:9d:ea:54:
                    54:76:af:e5:78:5f:20:4f:54:29:48:7e:56:de:8a:
                    64:24:f6:4a:37:cb:4f:82:2b:de:42:dc:38:6e:20:
                    3e:23:76:e5:4b:65:6b:8b:2a:a9:b0:4d:41:1a:2a:
                    50:90:41:5f:67:f4:12:c4:75:dc:c3:80:39:aa:a1:
                    69:1d:17:50:83:50:bf:61:5b:cf:9e:42:f6:ab:68:
                    79:f5:dc:33:9a:cc:0f:33:62:9c:84:e3:94:f5:47:
                    31:0c:ea:a3:35:b0:f2:84:50:ee:8c:c2:03:e1:46:
                    5b:98:80:dc:1d:7a:63:7a:a4:cb:26:34:59:f4:37:
                    9a:0b:fa:f9:c9:02:8f:d9:85:b7:5d:f4:69:fa:c1:
                    35:96:bf:b8:22:37:d7:3c:d5:4d:f4:4a:a1:4b:36:
                    1a:a7:48:d9:53:1b:64:88:58:a0:d9:aa:64:39:8b:
                    e4:ab:eb:ab:86:09:17:8d:f0:63:05:2d:d8:70:05:
                    f9:98:98:fb:a4:d0:09:8f:06:77:4e:eb:df:0e:a8:
                    69:bb:b6:5b:95:d3:b0:fb:27:0d:78:39:7e:09:a8:
                    83:fd:2a:71:ef:83:1d:1e:ce:d2:14:26:c3:d5:85:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:8B:EC:46:9A:C0:F6:7B:FD:E4:86:C1:97:D3:D5:AA:CC:A0:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ueGL7EaawPZ7_eSGwZfT1arMoEI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:f6:4a:b9:d2:f7:af:ca:ac:82:f5:4e:98:38:09:11:92:
         fb:af:50:d6:21:b1:c3:c8:aa:9f:f0:6f:74:d5:3f:f3:24:ce:
         35:7d:16:ee:ca:f5:6b:48:6f:48:f3:bb:14:76:49:09:dc:eb:
         a8:1c:5c:89:b7:69:59:9f:9d:da:ad:7f:5b:cb:83:a3:3f:2d:
         da:06:b7:08:f5:e9:0e:fe:20:ef:8e:4f:e1:f3:05:0e:ff:27:
         04:ef:f2:74:c0:c7:f2:15:21:6f:43:68:45:38:5f:33:37:7f:
         8d:25:df:2d:11:dd:e0:a1:50:c9:f6:1d:65:20:9b:d4:81:b4:
         6e:38:07:0c:c0:19:15:b2:87:5d:34:f2:88:ee:7e:55:3b:5d:
         a8:90:27:b8:f3:19:80:76:00:5e:3f:42:ab:70:64:bc:3b:0e:
         71:c2:35:87:aa:aa:1b:12:ab:7d:81:35:62:37:1c:7d:b1:e5:
         d2:98:53:03:94:3a:f2:fc:72:a6:28:ea:61:8d:7d:e8:54:a2:
         c4:9f:0e:39:65:28:a1:a1:58:e8:41:31:c0:71:e2:78:f2:fe:
         e0:72:6d:44:03:05:b2:92:16:8e:ac:6b:f3:80:86:22:84:a6:
         a5:90:67:d6:8a:a6:b7:c2:33:b4:d3:86:72:d4:2e:6f:97:fc:
         cd:51:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net