Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yKQZSBUWWaIMUMAuS3rqYhyl9GU.roa
File:                     yKQZSBUWWaIMUMAuS3rqYhyl9GU.roa (raw, json)
Hash identifier:          cIcTQEiZzZMU8qBcBsan/A7u3YfUMX9B5ZsPuUx6UUk=
Subject key identifier:   C8:A4:19:48:15:16:59:A2:0C:50:C0:2E:4B:7A:EA:62:1C:A5:F4:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04BD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yKQZSBUWWaIMUMAuS3rqYhyl9GU.roa
Signing time:             Tue 01 Apr 2025 01:52:51 +0000
ROA not before:           Tue 01 Apr 2025 01:52:51 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:c600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:51 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C8A41948151659A20C50C02E4B7AEA621CA5F465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:bf:05:99:56:7f:9f:f1:c0:ff:86:52:bd:
                    c9:32:95:88:89:86:28:66:8f:84:a7:11:f2:17:fe:
                    77:e6:ee:6c:aa:06:58:1f:46:a2:7f:35:2e:26:8d:
                    b5:54:46:74:90:01:14:7b:d8:57:c5:f8:51:51:1c:
                    60:d9:95:83:bf:6a:de:be:4b:75:b2:64:f8:a4:60:
                    67:7b:92:e6:11:26:94:ca:8d:ec:2e:b4:6a:81:b8:
                    bb:b5:fc:0b:50:e6:86:74:ec:56:04:d5:71:a0:bf:
                    10:13:70:04:3a:5e:c5:69:23:23:87:36:3a:72:d6:
                    8f:e7:6a:0d:e7:5a:b8:9c:f2:d3:df:ce:51:39:ec:
                    42:c3:e5:6f:50:e5:61:4c:fe:b3:e9:c5:da:e4:0d:
                    fe:cb:40:99:ad:64:28:9a:b7:dc:47:ce:8f:57:d5:
                    e9:d3:8c:43:de:cb:f7:7e:65:17:99:61:0e:76:6f:
                    42:cf:33:d3:d6:b2:76:29:e5:dc:18:bc:d3:4c:d0:
                    6d:fc:c4:7f:36:62:3a:96:c7:0d:88:40:69:c5:47:
                    9d:d5:6e:99:b5:76:8f:59:34:72:3a:9b:42:f3:6c:
                    ce:9e:94:73:d5:8f:1f:fe:ca:91:c8:91:ed:a5:b3:
                    17:39:bb:c8:cb:e6:75:d9:59:5d:da:fc:2d:b7:5a:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A4:19:48:15:16:59:A2:0C:50:C0:2E:4B:7A:EA:62:1C:A5:F4:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yKQZSBUWWaIMUMAuS3rqYhyl9GU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:6f:80:82:31:a5:71:d6:72:28:66:21:e0:07:53:93:be:
         9c:06:45:b7:33:e8:07:32:50:83:9f:54:d4:f4:fd:2c:1c:56:
         0b:90:ba:d1:be:58:11:78:ad:4a:3f:8d:72:e8:20:b9:ec:11:
         2e:b3:cb:ad:b2:2a:2c:96:d6:86:35:e3:b7:f2:01:6b:00:51:
         13:9e:93:f4:ce:9e:87:6d:cb:fe:6b:eb:19:b6:f1:07:63:99:
         8d:b0:ac:cc:29:4b:93:3b:e8:95:7b:bc:55:09:ee:2f:14:08:
         15:2a:dc:e2:39:b2:6c:27:eb:c8:3e:04:64:b2:e6:50:e4:d8:
         c9:c8:31:f6:c7:d4:a7:30:46:a5:66:5f:50:08:6e:f1:93:28:
         0d:1d:67:47:04:a4:60:0b:b3:bf:f4:e8:2c:db:4d:80:fd:97:
         56:f2:1f:9c:47:6a:8a:74:7e:14:97:ee:79:71:05:a4:86:1c:
         2b:a8:24:40:3b:4a:b0:eb:37:c6:55:8f:66:b6:62:fb:0c:b8:
         1f:99:14:70:84:1d:83:a4:3e:07:39:6c:b5:c8:48:4e:ff:cb:
         a7:8b:f4:e2:cc:28:23:0a:07:70:9a:b7:da:5b:da:44:b7:4a:
         69:29:3d:2d:c8:cf:b3:86:9f:da:8a:f1:cb:cc:8a:d5:af:ae:
         2c:19:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net