Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhJhHnJJwx5l8TgsKiDF-UOF7rU.roa
File:                     xhJhHnJJwx5l8TgsKiDF-UOF7rU.roa (raw, json)
Hash identifier:          H4W0eLTQU5oQhzGnP0/rXmKNTFU69lKn3Pyel3QDVtg=
Subject key identifier:   C6:12:61:1E:72:49:C3:1E:65:F1:38:2C:2A:20:C5:F9:43:85:EE:B5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0436
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhJhHnJJwx5l8TgsKiDF-UOF7rU.roa
Signing time:             Tue 01 Apr 2025 01:39:27 +0000
ROA not before:           Tue 01 Apr 2025 01:39:27 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:5e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078 (0x436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:27 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C612611E7249C31E65F1382C2A20C5F94385EEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:32:89:4f:a7:47:c2:e6:1a:ca:7c:05:be:
                    a5:3c:65:20:cf:7b:47:ed:0f:01:9c:f1:a8:f4:ba:
                    04:ea:c0:72:b5:ca:ca:3c:79:f1:1e:b5:24:9c:1d:
                    27:a3:c1:22:ef:74:2a:e8:66:a5:13:3d:c9:f3:18:
                    21:c4:d4:f8:d0:1d:70:b1:4a:c7:1d:4b:72:d3:dc:
                    fa:b0:6f:32:1a:36:b7:08:46:a2:4b:23:00:42:2d:
                    fc:d1:41:d5:49:2f:41:58:75:a6:18:db:35:72:bd:
                    fc:da:84:13:15:ad:71:f7:83:c9:48:a0:ae:3e:28:
                    b5:36:3c:7d:2f:a2:cd:b8:4c:8f:75:1c:1c:48:c0:
                    d9:15:9a:c6:13:3a:59:cd:78:7c:26:25:d2:d5:1b:
                    19:ad:91:6f:07:90:84:30:aa:cf:d5:cf:37:28:48:
                    2e:c6:95:93:31:1f:12:91:25:ce:cb:0a:6e:0e:e6:
                    fa:4e:c8:ca:37:54:14:d5:dc:98:0c:57:db:b1:42:
                    6c:22:cf:6e:6a:bc:f8:e6:ce:f8:5b:b9:a3:5f:4d:
                    4b:78:d2:77:09:6a:ac:2d:73:cf:14:60:a4:2e:04:
                    7c:62:0a:0e:62:ed:72:a1:9f:6b:08:43:31:12:49:
                    b4:22:d6:92:d3:30:18:29:20:b4:bf:ba:3b:08:75:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:61:1E:72:49:C3:1E:65:F1:38:2C:2A:20:C5:F9:43:85:EE:B5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhJhHnJJwx5l8TgsKiDF-UOF7rU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:09:1b:0e:29:ef:3c:8d:0c:98:69:5b:f0:b2:0a:42:6e:
         34:70:3a:69:55:02:24:06:c5:38:a1:45:f0:1a:e1:6d:a6:f5:
         ef:67:23:c5:41:a2:b2:db:fe:7e:83:3e:17:6e:2e:b4:33:35:
         50:fd:9b:af:8d:af:88:9b:fd:4e:cf:04:3b:44:e2:0a:45:1f:
         74:5a:a3:cc:dc:80:8a:05:82:66:1f:e1:f0:0a:79:47:b5:9b:
         06:f3:61:da:71:db:90:30:25:c8:7c:6d:c1:08:5f:1c:03:ae:
         d8:ab:12:b4:3d:d7:fd:51:35:10:30:d5:e3:81:cd:70:db:db:
         00:f4:9f:22:84:ba:cb:9f:a1:aa:f4:3b:e6:26:e7:5d:b2:32:
         cc:1e:9d:31:7c:aa:5b:18:4d:a8:9b:f9:0d:ac:66:0f:ba:d2:
         ce:26:89:12:f7:2a:52:4f:61:c3:ba:dd:e5:f5:43:b0:09:49:
         86:cd:bb:2c:d3:c0:9a:37:83:d1:77:ef:4c:dc:a8:5c:08:6d:
         71:ac:58:84:49:34:9e:c6:0a:a2:85:55:16:cf:3d:45:b3:96:
         da:db:3d:c8:1b:f9:72:ac:78:b9:8b:f2:77:1b:b4:e9:51:78:
         44:1d:26:f8:4c:8b:be:56:df:2d:2f:ab:8b:03:9c:15:c2:38:
         e0:d6:04:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM5MjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2MTI2MTFFNzI0OUMz
MUU2NUYxMzgyQzJBMjBDNUY5NDM4NUVFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC80jKJT6dHwuYaynwFvqU8ZSDPe0ftDwGc8aj0ugTqwHK1yso8
efEetSScHSejwSLvdCroZqUTPcnzGCHE1PjQHXCxSscdS3LT3PqwbzIaNrcIRqJL
IwBCLfzRQdVJL0FYdaYY2zVyvfzahBMVrXH3g8lIoK4+KLU2PH0vos24TI91HBxI
wNkVmsYTOlnNeHwmJdLVGxmtkW8HkIQwqs/VzzcoSC7GlZMxHxKRJc7LCm4O5vpO
yMo3VBTV3JgMV9uxQmwiz25qvPjmzvhbuaNfTUt40ncJaqwtc88UYKQuBHxiCg5i
7XKhn2sIQzESSbQi1pLTMBgpILS/ujsIdblLAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUxhJhHnJJwx5l8TgsKiDF+UOF7rUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS94aEpoSG5KSnd4NWw4VGdzS2lERi1VT0Y3clUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa14wDQYJKoZIhvcNAQELBQADggEBAHXJCRsOKe88jQyYaVvw
sgpCbjRwOmlVAiQGxTihRfAa4W2m9e9nI8VBorLb/n6DPhduLrQzNVD9m6+Nr4ib
/U7PBDtE4gpFH3Rao8zcgIoFgmYf4fAKeUe1mwbzYdpx25AwJch8bcEIXxwDrtir
ErQ91/1RNRAw1eOBzXDb2wD0nyKEusufoar0O+Ym512yMswenTF8qlsYTaib+Q2s
Zg+60s4miRL3KlJPYcO63eX1Q7AJSYbNuyzTwJo3g9F370zcqFwIbXGsWIRJNJ7G
CqKFVRbPPUWzltrbPcgb+XKseLmL8ncbtOlReEQdJvhMi75W3y0vq4sDnBXCOODW
BCs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net