Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
File:                     wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa (raw, json)
Hash identifier:          Fp6WCcqwYs3+6TTMmKmH9gkRNGR9DZdax5rkDzyIHII=
Subject key identifier:   C1:8C:D3:F1:C3:6F:C1:19:26:A9:0D:43:40:88:D2:6E:86:E1:66:77
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04B6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
Signing time:             Tue 01 Apr 2025 01:49:32 +0000
ROA not before:           Tue 01 Apr 2025 01:49:32 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:3f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:32 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C18CD3F1C36FC11926A90D434088D26E86E16677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:9d:bf:86:9b:51:86:02:b9:f0:9e:c9:c4:
                    6e:0d:d3:ed:5b:8c:cb:28:d1:37:7d:d1:4b:09:12:
                    d2:b6:70:22:9e:93:4b:06:a2:e5:e3:0d:23:4f:17:
                    31:f8:62:dd:1d:9b:95:9d:2c:54:81:58:77:11:de:
                    b3:30:e0:29:6a:9d:98:23:30:de:bb:9b:01:2f:d3:
                    b1:f6:af:68:9a:8a:e5:23:74:c0:61:11:01:ec:b2:
                    89:0e:8c:de:ee:c1:f6:d4:2f:2c:9d:ca:5a:90:a8:
                    f5:da:85:ad:f7:0b:1f:bb:5e:66:e4:e8:a2:2d:30:
                    5a:04:35:ba:b5:96:45:b5:1d:e6:96:d5:47:a1:d8:
                    6a:9b:0d:a9:e1:f8:aa:dc:ea:71:d6:b9:88:5c:50:
                    77:56:a0:69:e7:e8:ec:b2:56:3b:cb:f8:d4:ac:56:
                    9f:9d:14:95:43:92:8c:16:79:48:a1:a2:a3:1f:ea:
                    2b:19:79:66:6e:84:00:a3:ba:ef:fe:0f:b7:45:1e:
                    07:38:4b:76:f6:ab:cb:ed:0b:84:13:89:62:ac:17:
                    60:d9:e9:2d:ac:f4:35:01:e6:9e:2d:fd:25:9c:5f:
                    15:da:46:80:50:53:a6:a3:a1:4e:42:e2:c6:b3:ed:
                    1c:e9:68:0d:5a:41:84:9c:00:ce:a7:b4:7c:9e:ab:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:D3:F1:C3:6F:C1:19:26:A9:0D:43:40:88:D2:6E:86:E1:66:77
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wYzT8cNvwRkmqQ1DQIjSbobhZnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:8a:24:6d:5e:36:5a:cb:66:dd:57:12:90:87:5e:84:05:4a:
         3a:9d:d3:c9:b1:eb:27:2d:63:3d:5e:db:7c:dc:58:28:b5:68:
         cc:e7:87:40:8d:86:b0:8c:e9:df:a9:c9:aa:1a:54:54:d3:d7:
         7a:34:55:c5:dc:a8:6d:72:28:0c:1d:c6:c2:8e:58:18:0f:4b:
         8e:c7:7a:d4:d9:17:46:d5:e2:72:46:13:20:98:bd:a7:13:74:
         b1:43:29:2a:09:87:30:14:46:59:11:be:67:7c:dc:60:85:40:
         52:17:40:98:49:03:db:05:83:ca:58:ce:b0:2e:ab:bb:16:26:
         0d:ea:1e:95:27:db:4f:33:94:36:28:c4:a6:f0:78:de:3a:e4:
         6c:78:7d:08:7c:1a:f6:a4:0d:19:12:10:79:8e:6c:b0:09:38:
         90:5a:63:a9:67:41:7c:40:24:d2:2f:20:d1:ea:ed:27:96:e7:
         b8:ef:9f:31:9f:37:67:be:fe:f9:ba:22:e1:e9:d1:d1:d2:8b:
         7b:17:74:17:44:fe:15:5d:b4:af:74:59:e1:4d:62:00:88:0f:
         5a:4f:ac:d7:53:dc:a8:e1:9f:52:a1:58:a9:0e:bc:ef:0c:da:
         9b:cd:76:78:23:59:0d:5a:93:a5:1e:ff:59:89:40:17:c8:08:
         99:b8:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net