Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z9RR5EHzoAt3K7ngkqyyEi1osfo.roa
File:                     z9RR5EHzoAt3K7ngkqyyEi1osfo.roa (raw, json)
Hash identifier:          0R0g5dJcufbMzJADbmHIMTV379A8H7nOFQPE3hPR4Hk=
Subject key identifier:   CF:D4:51:E4:41:F3:A0:0B:77:2B:B9:E0:92:AC:B2:12:2D:68:B1:FA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       044C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z9RR5EHzoAt3K7ngkqyyEi1osfo.roa
Signing time:             Tue 01 Apr 2025 01:39:36 +0000
ROA not before:           Tue 01 Apr 2025 01:39:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:cd00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CFD451E441F3A00B772BB9E092ACB2122D68B1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:f5:31:a9:cd:bf:71:6a:73:48:58:71:5d:
                    2d:0a:4d:ed:8a:a3:d9:8a:40:e7:5e:57:a8:b2:36:
                    24:62:7e:25:fc:77:30:4d:5f:8c:2b:a0:5a:e0:50:
                    40:1a:42:39:00:9a:52:ff:fb:8b:73:95:db:0a:a9:
                    f0:bd:ff:9e:98:4b:04:88:c6:85:51:3f:30:44:41:
                    6d:d1:5c:a6:86:2d:5e:9e:31:17:1d:68:ec:ad:67:
                    57:84:1d:c7:f6:ab:5a:14:71:c4:2f:6c:e6:63:cf:
                    25:5b:0d:71:ea:69:d6:f1:66:6b:20:77:a6:f1:fc:
                    0f:80:da:97:b3:3e:b6:df:10:1f:7a:67:e7:1f:83:
                    72:fa:9c:b8:cf:51:cf:3a:5c:c1:4d:23:75:52:cb:
                    f3:42:6f:bd:39:55:d4:47:6d:8c:8f:49:74:3d:0f:
                    0a:52:46:42:1a:13:3e:16:d4:00:9e:74:c0:1a:a8:
                    bd:05:85:f6:d6:1f:da:4c:18:0f:79:91:8d:f8:e8:
                    66:41:e2:f1:03:93:aa:42:5a:30:7f:47:c9:a3:28:
                    60:ca:5c:33:97:ab:98:a0:fa:05:86:70:09:40:a1:
                    5d:b7:4f:1c:94:f0:47:09:5f:63:00:10:13:0c:b1:
                    b4:5c:b2:93:e0:60:fc:50:8a:f2:ae:87:cf:3b:47:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:51:E4:41:F3:A0:0B:77:2B:B9:E0:92:AC:B2:12:2D:68:B1:FA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z9RR5EHzoAt3K7ngkqyyEi1osfo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:ea:9b:f9:f3:1d:41:11:65:51:01:cd:23:81:c4:ed:4c:
         25:12:c1:84:8c:fe:52:44:f1:3b:69:73:3c:c1:80:bd:ec:8d:
         2c:be:69:e0:9e:a9:2c:1a:f8:96:1f:ae:1d:3a:da:6f:fe:81:
         89:d5:f5:57:28:3e:ab:91:5e:1c:04:ff:e8:ad:c8:b6:90:bb:
         af:b4:c6:5b:80:c5:fb:75:d4:3c:a0:9c:56:e0:67:67:df:ee:
         09:b4:94:58:ba:81:3b:88:26:70:2f:5d:05:a2:36:4e:ff:dd:
         2e:7e:5c:6d:2b:97:a3:86:4e:b6:ee:db:c0:c0:cc:88:7e:33:
         80:1e:2f:06:7e:16:b2:67:18:bf:db:86:cd:9a:71:5c:85:a1:
         42:31:7c:9d:7a:70:c2:3c:16:9f:56:31:09:c4:25:0d:ce:76:
         90:12:a2:9c:4b:89:d4:a5:6c:0f:b3:ab:f7:1b:ca:6e:5b:25:
         e2:ce:b8:6c:31:65:b1:2f:26:fe:f6:b9:19:15:5b:b4:19:90:
         54:16:f3:2d:2f:cf:36:c9:b2:df:38:bd:e1:34:af:08:60:ae:
         e1:22:a2:35:95:e3:1f:31:73:4d:cf:23:30:f9:34:0d:1f:d4:
         5e:ca:4a:90:6c:69:9f:27:b1:69:d6:f5:ce:2c:bf:d4:7d:ac:
         48:af:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net