Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5GW8vXJls0nDy6lQ8ys9j9-8xKw.roa
File:                     5GW8vXJls0nDy6lQ8ys9j9-8xKw.roa (raw, json)
Hash identifier:          DnvzYcl4tDSIYzJRpH0dEB/wfdpnoqgajyj5KZqSdSU=
Subject key identifier:   E4:65:BC:BD:72:65:B3:49:C3:CB:A9:50:F3:2B:3D:8F:DF:BC:C4:AC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0425
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5GW8vXJls0nDy6lQ8ys9j9-8xKw.roa
Signing time:             Tue 01 Apr 2025 01:35:39 +0000
ROA not before:           Tue 01 Apr 2025 01:35:39 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:bc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 12:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:39 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E465BCBD7265B349C3CBA950F32B3D8FDFBCC4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:d0:67:f9:13:ca:e6:c9:91:f7:cf:b0:1b:
                    e0:00:93:25:cf:f8:ce:46:f1:4c:b3:21:19:ca:db:
                    c5:82:cc:ab:b6:e9:19:c5:5c:30:f9:b6:65:9c:1a:
                    d1:10:d3:37:6c:6d:e3:d2:5e:40:ab:b8:91:43:56:
                    d0:e8:03:2e:07:73:75:2a:e6:46:7e:6b:14:ea:ed:
                    83:51:1b:cb:e9:de:1e:66:4c:88:87:38:01:cd:3e:
                    41:14:3d:23:eb:53:ae:b6:9c:ed:28:d3:c3:00:2c:
                    39:1e:1a:e0:6c:ee:a7:e4:e5:4a:fc:f1:30:05:13:
                    11:e5:65:85:f8:ac:1d:07:b8:43:3d:b0:b9:97:5d:
                    4f:c3:2c:7e:2a:c6:c0:80:21:50:bc:8b:76:f4:7f:
                    44:b6:6e:a9:6a:65:42:8a:30:ef:57:54:1f:05:c6:
                    38:53:43:26:9b:7c:cb:a1:ae:ba:fe:db:df:ac:51:
                    eb:59:f7:5a:9c:17:dd:47:28:50:6f:69:21:69:4d:
                    63:4f:ad:83:f7:42:e4:3a:de:77:e0:6d:df:98:2e:
                    d5:da:04:8a:76:a3:d5:63:99:6f:fc:1e:7c:cc:b3:
                    65:c0:59:8e:05:24:0d:b5:41:22:e1:c6:71:77:b7:
                    2c:3f:3e:3a:4b:70:3a:5d:bc:9a:fc:a3:85:c6:5f:
                    e9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:65:BC:BD:72:65:B3:49:C3:CB:A9:50:F3:2B:3D:8F:DF:BC:C4:AC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5GW8vXJls0nDy6lQ8ys9j9-8xKw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:cc:ae:b7:3d:3b:04:1e:28:9e:15:d0:48:8c:c3:80:ef:
         47:9f:01:28:52:31:fc:24:84:f7:e0:d8:64:3a:30:80:51:e4:
         f1:98:6d:18:9b:91:c1:41:2e:65:50:31:a9:2e:6e:3d:d1:ef:
         11:15:ac:68:f5:82:96:c1:5d:19:59:3c:d6:3f:28:f5:77:21:
         d1:bc:bd:a1:12:a8:4e:0a:95:78:6d:4c:2b:68:6b:fa:1a:ca:
         53:0d:ae:5a:4c:fb:19:6a:e4:ad:fd:74:9c:c1:44:c5:e9:31:
         49:bf:55:da:1a:fb:c2:fa:41:7d:a9:83:69:5a:e7:eb:41:25:
         16:0f:77:c3:bf:4a:00:08:1d:05:93:ef:a2:36:23:6d:da:c5:
         ce:8b:2b:4c:c5:be:6a:17:15:de:ff:86:ba:75:55:21:06:e2:
         b9:26:83:78:0e:d9:a8:12:5c:b6:f0:b5:e1:21:84:8c:74:e7:
         6b:00:0d:1c:2f:61:09:e8:1d:97:fd:d6:37:b4:5d:18:e7:28:
         fc:fc:36:50:f8:e9:3f:66:ba:9a:00:ef:ab:76:0f:e3:72:f0:
         74:95:75:c7:c1:ce:df:19:a8:6b:be:18:c4:fb:a3:57:40:f1:
         30:bf:b8:41:52:db:50:c2:b2:cd:73:9b:60:56:e0:18:04:94:
         fb:0d:e1:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1MzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU0NjVCQ0JENzI2NUIz
NDlDM0NCQTk1MEYzMkIzRDhGREZCQ0M0QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKcdBn+RPK5smR98+wG+AAkyXP+M5G8UyzIRnK28WCzKu26RnF
XDD5tmWcGtEQ0zdsbePSXkCruJFDVtDoAy4Hc3Uq5kZ+axTq7YNRG8vp3h5mTIiH
OAHNPkEUPSPrU662nO0o08MALDkeGuBs7qfk5Ur88TAFExHlZYX4rB0HuEM9sLmX
XU/DLH4qxsCAIVC8i3b0f0S2bqlqZUKKMO9XVB8FxjhTQyabfMuhrrr+29+sUetZ
91qcF91HKFBvaSFpTWNPrYP3QuQ63nfgbd+YLtXaBIp2o9VjmW/8HnzMs2XAWY4F
JA21QSLhxnF3tyw/PjpLcDpdvJr8o4XGX+nhAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU5GW8vXJls0nDy6lQ8ys9j9+8xKwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS81R1c4dlhKbHMwbkR5NmxROHlzOWo5LTh4S3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7wwDQYJKoZIhvcNAQELBQADggEBAH7ozK63PTsEHiieFdBI
jMOA70efAShSMfwkhPfg2GQ6MIBR5PGYbRibkcFBLmVQMakubj3R7xEVrGj1gpbB
XRlZPNY/KPV3IdG8vaESqE4KlXhtTCtoa/oaylMNrlpM+xlq5K39dJzBRMXpMUm/
Vdoa+8L6QX2pg2la5+tBJRYPd8O/SgAIHQWT76I2I23axc6LK0zFvmoXFd7/hrp1
VSEG4rkmg3gO2agSXLbwteEhhIx052sADRwvYQnoHZf91je0XRjnKPz8NlD46T9m
upoA76t2D+Ny8HSVdcfBzt8ZqGu+GMT7o1dA8TC/uEFS21DCss1zm2BW4BgElPsN
4T4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:35 2025 by rpki-client