Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-9LWnmn3jUr4tKU-JXnSv8x7-vo.roa
File:                     -9LWnmn3jUr4tKU-JXnSv8x7-vo.roa (raw, json)
Hash identifier:          SxaYvNjxIDWoP+Sn624PxFB3M0dViS6psdw/+EjVR84=
Subject key identifier:   FB:D2:D6:9E:69:F7:8D:4A:F8:B4:A5:3E:25:79:D2:BF:CC:7B:FA:FA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       045A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-9LWnmn3jUr4tKU-JXnSv8x7-vo.roa
Signing time:             Tue 01 Apr 2025 01:42:26 +0000
ROA not before:           Tue 01 Apr 2025 01:42:26 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:26 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FBD2D69E69F78D4AF8B4A53E2579D2BFCC7BFAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:ab:f9:c8:c4:63:68:5f:cc:0a:7a:70:8c:
                    61:23:f4:83:55:a9:33:5b:44:05:d5:27:4d:99:35:
                    d3:64:dc:d4:8a:f2:5e:18:35:a6:ca:d9:5f:57:87:
                    7e:8a:61:02:f8:3d:16:89:b7:40:2c:ab:22:70:08:
                    6d:c9:01:52:47:68:ff:d2:0e:e7:68:63:1b:15:94:
                    15:6f:06:0b:cb:5d:40:b4:ce:5e:c8:b6:26:f9:af:
                    76:5d:60:8d:7f:83:5f:f2:92:f3:dd:ef:54:e7:21:
                    8e:77:01:61:f8:7c:ff:82:94:d1:bb:b2:4b:c6:a1:
                    30:eb:07:0b:b1:70:39:d7:38:97:b0:7b:1c:84:3b:
                    c4:51:bc:8a:39:cc:be:de:91:1c:62:92:38:78:1d:
                    0d:2d:4f:d8:55:68:cf:7b:44:2b:3d:c3:c2:93:0d:
                    6e:ef:67:08:8c:e7:58:a7:2b:7a:92:98:92:94:b8:
                    7b:7e:45:39:b3:97:2e:75:48:94:ff:23:97:e7:1b:
                    b3:9e:1d:2d:05:4a:59:ac:90:bd:ba:30:fc:6d:e4:
                    66:e8:da:73:11:a8:ae:7a:22:f8:66:24:fe:7e:cd:
                    db:c2:40:53:29:20:06:fd:3e:a7:6e:ed:4e:70:d0:
                    46:95:b2:18:0d:b0:53:a5:64:b1:47:ec:a2:45:83:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:D6:9E:69:F7:8D:4A:F8:B4:A5:3E:25:79:D2:BF:CC:7B:FA:FA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-9LWnmn3jUr4tKU-JXnSv8x7-vo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:d9:fd:8e:00:31:cf:6b:88:70:3a:00:76:42:28:1d:3b:2f:
         c1:c2:14:fb:f0:ba:7e:fa:45:6c:7f:e5:71:90:de:5d:18:65:
         6c:d7:dc:13:fb:ac:29:a0:a7:dd:65:45:08:b6:dc:8e:b4:b5:
         10:89:9f:e3:d9:b7:1d:0f:31:02:df:17:dc:72:f1:73:4a:64:
         b6:e4:90:fa:e2:31:96:4d:3c:e3:91:54:44:60:96:20:0f:c0:
         96:e5:cb:b7:f5:fe:1d:4c:cd:bf:8e:21:d9:a4:5a:4c:a2:a3:
         4c:bb:cc:ae:15:9a:f2:7c:66:1a:a5:1d:2c:18:b1:20:c5:27:
         fe:a5:ce:cc:09:b5:2c:f0:19:d2:c9:45:31:4a:cb:18:e0:61:
         26:15:0b:f9:75:e6:dc:1f:6a:80:89:7d:dd:66:05:a0:9d:d5:
         3c:c9:3f:59:8c:76:0a:b1:f1:01:b9:e6:b6:cd:fa:48:a6:f2:
         fd:54:95:9a:4d:7f:8b:0d:15:fc:d3:a5:1e:92:44:af:04:40:
         3d:5e:fe:91:d6:69:56:8a:0a:59:2c:7e:59:73:ff:be:ff:a4:
         dc:93:7f:c9:24:7f:b7:06:d7:5a:b2:65:64:e9:01:b5:e0:8d:
         89:2b:6c:29:fb:ce:5b:dd:42:bc:b1:a4:42:38:5d:9a:01:47:
         2d:31:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:37 2025 by rpki-client