Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0UXZlFxngfTZUlbfMdBXOeMxGm0.roa
File:                     0UXZlFxngfTZUlbfMdBXOeMxGm0.roa (raw, json)
Hash identifier:          jNkeeuMUQWk5sJtIuNf5tghOTGpHJdbeLmV+LQPSKek=
Subject key identifier:   D1:45:D9:94:5C:67:81:F4:D9:52:56:DF:31:D0:57:39:E3:31:1A:6D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       044E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0UXZlFxngfTZUlbfMdBXOeMxGm0.roa
Signing time:             Tue 01 Apr 2025 01:39:37 +0000
ROA not before:           Tue 01 Apr 2025 01:39:37 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:37 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D145D9945C6781F4D95256DF31D05739E3311A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:38:56:bd:46:50:1d:7c:48:3a:f5:22:50:
                    d1:a0:b7:17:aa:f6:44:af:b1:fe:b1:87:a1:98:13:
                    54:7f:19:ab:8e:48:de:e0:5f:7f:25:9a:f5:a9:2a:
                    f6:76:ec:17:1f:ca:eb:c3:02:68:1a:2d:25:44:8b:
                    92:64:16:87:7d:fe:da:8c:f6:f9:0d:9d:0d:ec:13:
                    db:64:47:58:c1:66:85:99:5c:71:48:8a:dc:55:31:
                    63:2a:9a:18:9c:ee:15:30:1f:8c:21:e5:5e:20:ae:
                    2f:e6:88:34:9c:5b:93:87:55:e5:f0:2f:f2:7b:01:
                    bb:e2:9b:88:c5:6c:00:68:b9:a3:44:6b:84:70:33:
                    99:34:57:7b:73:a6:4c:99:17:0b:8e:5f:89:d3:82:
                    73:1a:0b:81:1e:4c:4b:a4:c5:79:7f:4e:94:78:e6:
                    94:75:08:64:b7:1b:c2:31:54:c0:5e:ad:1c:5c:1e:
                    d1:6d:e2:75:fc:0b:84:28:f2:e8:7c:cc:db:85:70:
                    1e:21:7d:10:38:9a:0f:15:db:c7:b7:a0:59:5a:24:
                    64:08:f5:ef:da:1e:9e:c3:e3:d6:2a:09:fd:e4:3e:
                    fa:a6:ae:a3:7d:8c:ac:8a:cf:24:ac:70:10:8d:43:
                    da:16:b8:12:f2:a1:3e:9c:0f:af:43:54:91:bf:d7:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:D9:94:5C:67:81:F4:D9:52:56:DF:31:D0:57:39:E3:31:1A:6D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0UXZlFxngfTZUlbfMdBXOeMxGm0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:ef:4a:c8:8b:06:97:51:be:76:48:21:63:0d:a9:46:61:
         34:73:a1:c9:fb:67:40:79:a7:22:29:67:f6:29:af:2f:49:54:
         3d:80:98:08:ab:f6:a1:c5:0c:ce:b7:b2:03:5d:32:4c:17:0d:
         66:da:40:df:82:57:5b:3d:85:27:b1:1c:08:ee:21:fe:9f:7e:
         e6:4e:bf:4f:8b:9c:e8:4a:9c:df:84:e4:1e:34:ce:6a:61:82:
         e0:28:05:30:41:b5:e7:a7:fc:ac:a1:2e:74:c9:13:a0:ff:75:
         af:01:43:33:41:9e:30:e1:9f:86:79:a3:82:dd:38:f6:b8:6a:
         7f:6d:3b:ee:f2:89:24:ba:c6:31:1c:2f:1b:e2:34:d7:16:ae:
         5b:f1:9f:7e:f2:0c:1b:81:f0:57:0b:de:ad:85:87:aa:60:2c:
         87:c8:5d:46:05:29:be:78:54:32:45:d5:9a:f4:a2:c9:c0:fa:
         71:4b:a2:57:ea:77:00:db:d6:ec:fb:e7:5c:7c:78:99:a2:85:
         5f:d7:6e:da:44:bb:8d:08:16:1f:29:e7:ca:25:3c:9f:ad:ec:
         8b:e4:21:5a:f4:bc:a6:96:88:57:cc:22:d2:ac:d0:fb:85:63:
         f9:db:18:08:a3:d4:9a:0d:42:84:a9:7f:25:cd:33:b8:3a:ea:
         ba:a0:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:49 2025 by rpki-client