Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vSwDjyFkAe9J_ivPR8WWBD472rY.roa
File:                     vSwDjyFkAe9J_ivPR8WWBD472rY.roa (raw, json)
Hash identifier:          nsrz0d+G/vNkEJJlAZI3UCKeqqyw999MOnu31twy11I=
Subject key identifier:   BD:2C:03:8F:21:64:01:EF:49:FE:2B:CF:47:C5:96:04:3E:3B:DA:B6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       049C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vSwDjyFkAe9J_ivPR8WWBD472rY.roa
Signing time:             Tue 01 Apr 2025 01:49:20 +0000
ROA not before:           Tue 01 Apr 2025 01:49:20 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:4400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:20 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=BD2C038F216401EF49FE2BCF47C596043E3BDAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5e:3a:2b:49:c7:00:7c:26:97:d3:e5:49:c3:
                    40:39:df:ce:97:40:6d:03:cc:18:a0:01:80:41:16:
                    e5:8f:1f:1c:2d:69:8f:6a:89:d9:f5:89:8a:e3:f0:
                    2e:39:1e:1b:58:50:18:78:53:eb:ec:6f:ad:9e:34:
                    ad:85:5c:0a:95:a4:df:b7:83:45:b9:0b:cc:ef:a0:
                    97:63:ac:52:0d:1c:a0:ce:3d:a6:93:8b:5a:a9:be:
                    d6:4c:e0:b0:2a:e6:2c:8e:a7:f0:eb:e7:ed:16:75:
                    25:85:ad:e1:fa:bc:1e:07:12:75:e9:2a:71:87:3b:
                    a3:b5:ed:79:9d:db:a9:70:a7:7c:bb:4d:c6:7b:06:
                    f7:b0:75:9a:e7:88:ad:30:06:c1:73:24:0a:da:02:
                    6f:e8:1b:44:ac:fb:7f:16:bf:7a:1c:7b:82:c3:84:
                    c2:e6:46:55:be:db:21:36:a9:b9:b0:a1:bb:57:c4:
                    19:a5:65:a2:c1:4a:6d:28:b8:93:3a:c7:63:89:c2:
                    da:d5:08:10:e7:e8:84:8e:94:80:96:3e:71:b1:f6:
                    b2:d1:21:f8:ec:dc:6b:e9:e4:7a:26:ed:d9:4f:6a:
                    f1:9b:e2:55:b2:37:cb:02:0d:67:22:41:47:c9:1f:
                    85:1d:93:16:2a:36:22:0a:b5:a3:80:31:a4:84:2c:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:03:8F:21:64:01:EF:49:FE:2B:CF:47:C5:96:04:3E:3B:DA:B6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vSwDjyFkAe9J_ivPR8WWBD472rY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:02:9a:72:39:a2:07:eb:d3:98:b7:7a:9c:8a:72:22:7d:
         f8:6c:09:7f:98:ae:e1:61:bd:f4:74:b0:67:37:25:7d:02:f9:
         dc:d9:91:e4:e8:28:f7:e9:66:70:12:e2:7a:29:3b:0c:7a:2c:
         2b:c0:97:d3:01:e2:bb:25:d7:cd:b0:5b:31:a0:75:3f:b6:6c:
         c4:38:28:37:3a:8d:38:00:d0:c5:f8:49:00:3f:bf:23:8c:18:
         f4:75:6f:3d:bd:9b:ab:16:f8:7e:07:67:4f:74:f0:b3:c7:ef:
         c4:d0:47:25:83:e7:1e:15:a0:d2:9a:43:4a:d0:74:88:2f:2e:
         26:a0:b8:73:20:7e:b0:05:fa:47:97:8d:87:ae:44:90:43:86:
         28:87:29:c2:41:c0:90:cb:9e:a1:88:98:69:bc:a5:2f:b7:4d:
         ad:76:9d:85:3b:a6:61:83:93:75:08:b6:41:aa:c6:19:2b:2c:
         7f:85:c9:e9:ed:63:9a:66:54:74:5c:85:ab:cf:ac:a2:b4:39:
         5d:79:e1:ba:4a:4d:fc:73:eb:b5:eb:c9:08:b2:f7:f2:01:04:
         29:5c:33:40:09:f8:07:89:9d:a2:ac:f7:1c:59:e2:3c:d2:62:
         69:dd:a6:85:58:d7:3b:6b:9a:e5:df:a0:2f:76:01:19:e5:14:
         3b:09:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net