Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07ZfQplj2wc9rRgZhBiZsZW8t3M.roa
File:                     07ZfQplj2wc9rRgZhBiZsZW8t3M.roa (raw, json)
Hash identifier:          HhMaHiNOLaXvRxgpqwNS81a5pWMkZGlY79p/I3LRpjw=
Subject key identifier:   D3:B6:5F:42:99:63:DB:07:3D:AD:18:19:84:18:99:B1:95:BC:B7:73
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03DD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07ZfQplj2wc9rRgZhBiZsZW8t3M.roa
Signing time:             Tue 01 Apr 2025 01:28:57 +0000
ROA not before:           Tue 01 Apr 2025 01:28:57 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:3c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 07:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:57 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D3B65F429963DB073DAD1819841899B195BCB773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:c0:00:40:f4:22:9a:89:84:cc:3d:7a:20:
                    7c:c1:dc:12:99:11:15:bd:2b:01:1a:a9:b8:a9:4e:
                    96:e7:a0:19:95:25:3a:82:c3:8a:97:0e:a5:05:5d:
                    3d:e9:ef:0c:4d:d3:e1:7b:10:ce:4f:2d:fd:88:bd:
                    8a:26:25:54:46:11:15:0e:1a:39:49:51:ac:84:1d:
                    40:15:73:7e:bd:9a:12:12:ba:6a:05:93:35:55:67:
                    8d:cd:2d:01:41:5e:2e:27:90:40:f3:ee:83:49:6e:
                    85:5d:e6:a4:e4:52:82:be:a6:4b:6e:77:7e:ff:b2:
                    80:fd:ec:74:4e:61:1d:e7:35:ca:cd:05:a0:c6:0f:
                    98:10:48:5e:c1:1a:dd:d8:41:4d:d4:a9:8d:c4:20:
                    b6:d5:9a:1b:64:71:ae:ca:b2:f3:81:66:2d:41:c2:
                    7b:24:98:03:45:36:6d:1f:8d:f1:99:b5:4b:af:d2:
                    ed:89:22:0f:b9:c4:ae:00:df:52:3e:55:67:ee:17:
                    3f:3f:fa:0e:70:22:2e:3c:e6:f0:f7:78:dd:0e:89:
                    88:1b:c0:be:3c:b5:dd:a5:87:85:48:1a:21:fd:22:
                    8c:16:1f:1c:3a:f4:99:ef:a8:e0:3b:47:cd:63:b4:
                    8d:dd:22:3f:a1:60:53:46:a0:50:42:27:e9:75:59:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B6:5F:42:99:63:DB:07:3D:AD:18:19:84:18:99:B1:95:BC:B7:73
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/07ZfQplj2wc9rRgZhBiZsZW8t3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:af:4d:9d:69:bd:38:30:0e:e5:39:a6:f5:a8:92:0b:80:fd:
         f8:f8:e9:80:f0:83:25:9c:db:3b:0b:76:1d:48:04:08:78:24:
         71:59:48:eb:c0:3e:4b:c1:07:9e:09:b5:64:e5:00:ea:9d:46:
         ef:4c:74:2a:8a:92:5e:15:da:94:69:cc:ab:f4:26:0c:42:f8:
         75:c3:85:37:a4:a1:42:be:04:90:69:82:fe:0c:29:18:a1:fa:
         da:81:6f:57:1a:5f:37:20:11:2b:65:3d:3b:cf:5c:6b:ba:39:
         4f:bc:0d:a8:95:98:80:ec:e2:93:1e:16:59:d0:db:6a:a0:09:
         f6:86:b1:e2:af:e9:09:9b:79:bb:f2:61:97:27:0b:49:f1:65:
         56:aa:a4:21:30:7d:6a:0e:da:e5:a7:a4:d8:f0:55:fb:70:39:
         aa:3f:9a:54:6a:ac:33:7a:7b:84:5c:42:6a:25:72:ad:b1:16:
         ee:d9:b9:1f:5d:4a:d5:7c:fc:65:c8:71:07:70:63:af:72:71:
         59:a4:28:ed:1f:f3:54:25:17:96:1c:2f:2a:0e:ba:ad:16:93:
         95:5a:dc:39:85:b2:db:81:6b:ea:72:c9:73:a0:96:15:73:86:
         87:ac:e3:36:ce:91:89:48:41:e2:83:ad:de:93:54:e5:a5:12:
         88:a9:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:30:22 2025 by rpki-client