Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdZaMYucUgkVMKzwM7wMPM6CdlU.roa
File:                     vdZaMYucUgkVMKzwM7wMPM6CdlU.roa (raw, json)
Hash identifier:          +OJZsWWcdl8YVlJXn3gpCD8chlqzOEYWMaPmsPhAv90=
Subject key identifier:   BD:D6:5A:31:8B:9C:52:09:15:30:AC:F0:33:BC:0C:3C:CE:82:76:55
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0401
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdZaMYucUgkVMKzwM7wMPM6CdlU.roa
Signing time:             Tue 01 Apr 2025 01:32:12 +0000
ROA not before:           Tue 01 Apr 2025 01:32:12 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:12 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=BDD65A318B9C52091530ACF033BC0C3CCE827655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:fd:dc:e8:b6:ec:e2:78:02:15:c1:b5:d6:
                    9a:b2:cc:60:9f:23:40:fb:99:02:34:ba:2d:a8:c6:
                    37:4b:8e:79:47:91:da:a1:c6:4e:8c:45:68:13:34:
                    a8:51:84:a4:b9:9e:74:7e:a3:f5:3d:9a:f0:c4:c9:
                    e6:3a:f2:41:50:b3:ff:d0:c7:1b:af:2a:20:55:92:
                    d9:33:dc:f0:b6:ee:b4:6e:d6:5f:f6:06:9c:3b:3c:
                    d8:9c:4e:d2:a6:09:a8:88:53:04:89:ad:74:39:9c:
                    ab:54:c3:52:6d:d3:e0:09:20:14:0b:7c:c1:3b:e7:
                    d5:a5:d4:79:17:3d:a2:ea:8d:63:68:2a:30:d1:82:
                    74:34:95:1d:48:25:54:a7:db:31:72:9f:9b:7b:d2:
                    69:7e:07:02:ba:c1:cf:a3:f8:8a:72:da:a3:7b:43:
                    c2:8f:12:97:ee:83:73:7c:0b:bb:51:db:5d:35:aa:
                    90:58:23:32:7f:54:41:4b:00:72:ec:50:92:0b:45:
                    ac:aa:e7:a9:26:35:0b:c1:ea:53:00:23:fe:48:b4:
                    50:a0:ec:45:0a:44:69:7c:f4:14:f6:1e:d5:03:2a:
                    19:11:cd:0d:4a:65:b3:50:54:c4:d3:71:d8:1c:53:
                    ea:fc:2d:f8:b5:a4:da:90:68:b1:ed:8d:cf:9a:9d:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:5A:31:8B:9C:52:09:15:30:AC:F0:33:BC:0C:3C:CE:82:76:55
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdZaMYucUgkVMKzwM7wMPM6CdlU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:a3:ee:16:84:49:60:97:c5:34:bb:9b:a5:fd:6b:25:0a:
         7d:e1:01:a2:ed:fd:9d:74:ba:e0:a3:66:35:8d:0b:5b:74:44:
         c4:bf:cd:f3:14:d4:33:df:65:23:13:ef:cb:6f:cb:a9:41:91:
         f8:4d:d5:02:e5:c5:70:a8:5e:98:66:b3:f3:cc:a0:46:88:68:
         24:b0:c0:8d:68:9d:ec:03:35:35:a3:61:0c:bd:bf:70:12:60:
         0f:af:69:62:15:45:4d:2f:93:53:01:d9:fd:19:a7:da:ac:f6:
         82:78:b4:eb:3c:15:86:63:4f:ab:52:86:0b:f1:5c:67:09:78:
         b9:6c:07:16:ef:85:7f:83:bf:fa:fb:d3:4e:7f:50:5c:54:d9:
         fa:6f:65:26:fc:b9:df:ac:10:35:2b:e2:ae:2c:a9:a4:c2:5b:
         19:a6:d8:2d:65:7a:5b:d2:db:0d:41:e0:e3:34:4c:58:dc:97:
         f0:06:50:b9:11:0b:0a:6b:28:08:c7:16:a7:1d:13:af:df:c4:
         76:f0:30:0b:fe:d9:7a:3d:55:71:09:22:b7:87:64:da:2c:6d:
         3d:f2:3b:fc:e6:c7:7a:11:2d:b4:bf:75:04:96:71:3d:ca:d6:
         12:41:4a:81:18:b7:c1:fb:0d:5c:61:01:09:74:3c:1f:20:2d:
         dc:3c:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net